Information Taskify uses
Account setup uses your first and last name, email address, phone number, password or connected identity provider, and an optional date of birth and profile photo. Taskify also stores the work you choose to add: spaces, tasks, projects, contacts, notes, financial-impact fields, custom fields, files, photos, voice notes, time records, imports, sharing records, and activity history.
Financial-impact fields are work context. Do not place card numbers, security codes, bank credentials, passwords, government identifiers, or other unsupported secrets in Taskify fields or files.
Why it is used
Taskify uses this information to provide accounts, organize and secure workspaces, save and share work, deliver account and invitation emails, support requested AI features, prevent abuse, investigate failures, understand aggregate website traffic, and let you export workspace data. Taskify does not run advertising analytics or sell payment plans.
Public intake forms and automations
If you submit through an intake link, your answers and any contact details you provide are stored privately for that space’s owner and administrators. Accepted requests become tasks visible to people with task access. Submitting does not create an account, verify your identity, or grant workspace access. Do not include financial credentials or sensitive personal information. Space managers control publication, review, and bounded automation rules. Taskify records their outcomes for accountability.
Cloudflare Turnstile also protects public intake submissions. Intake page visits are excluded from Taskify Web Analytics. Form answers and rule history are retained with the workspace; the existing general export does not yet include the complete Flows history. Contact the team that shared the form for correction or removal requests.
Client portals and linked tasks
Room managers choose client-facing task cards and invited email addresses. Guests must sign in, verify the invited email, and accept before accessing a room. Room messages are visible to the team and every accepted guest in that room. Private task notes, attachments, financial details, and workspace directories are not included. A task’s published status and optional deadline reflect its original record.
Room records, invitations, messages, and audit events are retained with their source space. Revoking access or pausing a room does not erase earlier messages or copies someone already viewed. These records and cross-space task references are not yet included in the general workspace export; contact the room owner for correction or removal requests. Client portal visits are excluded from Web Analytics. Linking a task to another space creates a reference, not a copy or a new sharing grant.
Who can see it
People you intentionally collaborate with may see the name, email, avatar, and work content needed for that shared space or task. Authorized organization administrators may see organization identity, role, access status, seat status, and recent activity time for linked organization work. Phone number and date of birth are not included in collaboration directories.
Service providers
Vercel hosts the web application and provides privacy-focused, aggregate Web Analytics. Supabase provides authentication, database, and private file storage. Resend handles configured service emails. Cloudflare Turnstile protects account forms from automated abuse. Google, Microsoft, or Apple process sign-in when you choose them. OpenAI processes relevant inputs only when you invoke an AI feature. These providers may process information outside Canada and under the laws of their operating locations.
See AI data use for the exact Scanner, Smart Inbox, Assistant, and voice-transcription boundaries.
Security and choices
You can update profile details, change your password, manage sharing, remove files, and export workspace data. Taskify uses the safeguards described in its Security & Trust centre, but no online service can promise absolute security.
A complete self-service account deletion and personal-information request process is not live yet. Taskify will publish verified access, correction, export, deletion, withdrawal, and complaint instructions before accepting payments.
Retention and paid billing
Taskify keeps account and workspace data while it is needed to operate the current service. Exact deletion periods for backups, invitations, activity, audit records, AI-use metadata, and exports are being documented and automated. No payment processor receives information today because billing is not active.
This summary will become a versioned, counsel-reviewed Privacy Policy with a verified legal operator and monitored Privacy Officer channel before paid plans launch.