Privacy
What this service holds about you, why it holds it, and how to get rid of it. Last updated August 19, 2026.
Draft. Written from how the software behaves, and not yet reviewed by a solicitor. Everything in double brackets is unanswered.
Who holds it
[[Company name]], [[registered address]]. Questions and requests: [[privacy@example.com]].
What is held
Your login. Your name, your email address, and a photo if you upload one. A password only if you choose to set one — sign-in is by emailed link otherwise.
Your team's work. Everything typed into the product: task titles and notes, comments, dates, tags, projects, who a task is assigned to and who is supporting it, and a record of the changes made to each task and by whom.
Records of use. One row per signed-in device, holding the browser's user-agent string and the IP address it signed in from, so that a session can be revoked. Sign-in and invitation links are stored only as one-way digests: the link itself exists in the email and nowhere on this end.
Why
To provide the service you or your team signed up for, which is the contract between us; to keep it secure and to keep it working, which is our legitimate interest; and to send the notifications described below. There is no advertising here and nothing is sold or shared for it.
Sign-in links and invitations are sent when someone asks for them. Beyond that the product emails you about four things: work assigned to you, being added as support on a task, comments on a task you are on, and a follow-up date arriving. One switch on your profile turns all four off, and turning them off does not stop them appearing in the product itself.
Cookies
One cookie, holding a signed reference to your session. No analytics, no advertising identifiers, and nothing belonging to anybody else. Clearing it signs you out.
How long
A deleted task or comment sits in the trash for thirty days and is then permanently deleted by a scheduled job. Closing a workspace deletes everything in it immediately — every task, comment, note, project, tag and membership — and that cannot be undone from this end. Your login survives the closure of one workspace because it may be how you reach another.
Who else touches it
[[Hosting provider and region]] and [[email delivery provider]]. No other processor, and no transfer outside [[region]] beyond those.
Your rights
You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted, at [[privacy@example.com]]. A workspace owner can delete an entire workspace themselves, at once, from its settings page. A self-serve export is being built; until it ships, ask and it will be produced by hand.
If you think this has been handled badly you can complain to [[supervisory authority]].