Information Taskify uses
Account setup uses your first and last name, email address, phone number, password or connected identity provider, and an optional date of birth and profile photo. Taskify also stores the work you choose to add: spaces, tasks, projects, contacts, notes, financial-impact fields, custom fields, files, photos, voice notes, time records, imports, sharing records, and activity history.
Financial-impact fields are work context. Do not place card numbers, security codes, bank credentials, passwords, government identifiers, or other unsupported secrets in Taskify fields or files.
Why it is used
Taskify uses this information to provide accounts, organize and secure workspaces, save and share work, deliver account and invitation emails, support requested AI features, prevent abuse, investigate failures, and let you export workspace data. Taskify does not currently run advertising analytics or sell payment plans.
Who can see it
People you intentionally collaborate with may see the name, email, avatar, and work content needed for that shared space or task. Authorized organization administrators may see organization identity, role, access status, seat status, and recent activity time for linked organization work. Phone number and date of birth are not included in collaboration directories.
Service providers
Vercel hosts the web application. Supabase provides authentication, database, and private file storage. Resend handles configured service emails. Cloudflare Turnstile protects account forms from automated abuse. Google, Microsoft, or Apple process sign-in when you choose them. OpenAI processes relevant inputs only when you invoke an AI feature. These providers may process information outside Canada and under the laws of their operating locations.
See AI data use for the exact Scanner, Smart Inbox, Assistant, and voice-transcription boundaries.
Cookies and connection data
Taskify uses essential session cookies to keep you signed in and an appearance preference stored in your browser. Hosting and security systems process ordinary request information needed to deliver the site and protect it.
On email sign-in, signup, and password-reset forms, Cloudflare Turnstile may process security signals such as IP address, browser and device characteristics, traffic information, and short-lived challenge data. The challenge may use essential browser storage to maintain its state. Cloudflare states that Turnstile does not access, store, or transmit form entries or user communications. Taskify does not currently use advertising cookies.
Security and choices
You can update profile details, change your password, manage sharing, remove files, and export workspace data. Taskify uses the safeguards described in its Security & Trust centre, but no online service can promise absolute security.
A complete self-service account deletion and personal-information request process is not live yet. Taskify will publish verified access, correction, export, deletion, withdrawal, and complaint instructions before accepting payments.
Retention and paid billing
Taskify keeps account and workspace data while it is needed to operate the current service. Exact deletion periods for backups, invitations, activity, audit records, AI-use metadata, and exports are being documented and automated. No payment processor receives information today because billing is not active.
This summary will become a versioned, counsel-reviewed Privacy Policy with a verified legal operator and monitored Privacy Officer channel before paid plans launch.