Who is responsible for your data
[Legal entity], NIF [NIF], [Registered address]. Email: hello@taskq.eu.
[Lawyer: confirm the controller for this website and the processor role for customer data in the app; add a data protection contact if one is appointed.]
What we collect on this website
- Early-access form: email, organisation and team size. Optionally: number of sites and volunteers, what you plan to use TaskQ for, whether you are a registered nonprofit, and your preferred language.
- Contact form: name, email, organisation (optional), topic and your message.
- Guide form: email, and whether you ticked the separate box for occasional marketing emails.
- With each form: the page language and any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign, utm_term, utm_content).
- Conversion events, such as a click on "Start free" or a form submission: event name, page, language, campaign tags and time. No IP address, no cookie and no browser details.
To stop abuse, the form endpoint limits the number of requests per IP address. It works with a one-way hash of the address, in memory only, and never stores or logs the address itself.
Forms are protected by Cloudflare Turnstile, a spam check that runs in your browser on form pages only.
Visits are counted with Cloudflare Web Analytics, which does not use cookies.
Why we use it
- To answer your message or your early-access request, and to switch Premium on for your workspace.
- To honour the founding price: accepted founding workspaces are recorded so that billing can apply it.
- To send you the guide you asked for.
- To send occasional marketing emails, only if you ticked the separate box. You can unsubscribe at any time.
- To see which pages and campaigns bring people to TaskQ, using the conversion events above.
[Lawyer: legal basis for each purpose.]
How long we keep it
- Form submissions from this website are deleted automatically after 12 months, unless you become a customer.
- Conversion events contain no personal data.
- In the app, employee clock records are kept for five years, following article 202 of the Portuguese Labour Code.
- In the app, evidence history is kept for up to 90 days on Free and up to 3 years on Premium (1 year by default).
[Lawyer: complete the retention periods for the other app data.]
Where your data is stored
The TaskQ app keeps its database with Supabase in the EU (Paris, eu-west-3) and its files in a Cloudflare R2 bucket with EU jurisdiction. Files are private and shared only through short-lived links.
AI Assist, when a workspace admin switches it on, sends a step and its evidence to Anthropic's API, with no name beyond the operator's first name. AI Assist is off until an admin turns it on.
Form submissions from this website are stored in a Cloudflare D1 database [location to be confirmed].
Subprocessors
We use these providers to run TaskQ. [Draft list for lawyer review.]
| Provider | What for | Where |
|---|---|---|
| Supabase | App database and sign-in | EU (Paris, eu-west-3) |
| Cloudflare | Hosting (Workers), file storage (R2), spam check (Turnstile), cookieless visit counts (Web Analytics), website form storage (D1), email routing for hello@taskq.eu | R2: EU jurisdiction. Other services: [to be confirmed] |
| Anthropic | AI Assist (photo and invoice checks, translation, More detail), only when switched on | [Location and transfer safeguards to be confirmed] |
[Lawyer: confirm the list, whether the browser push services that deliver app notifications must be listed, and the safeguards for any processing outside the EU.]
Your rights
You can ask us for a copy of your data, or ask us to correct or delete it, by writing to hello@taskq.eu.
[Lawyer: full list of data subject rights and the right to lodge a complaint with the CNPD.]
Data processing agreement
Customers who need a data processing agreement can ask for one at hello@taskq.eu.
Changes to this policy
[Lawyer: how changes are announced and when they take effect.]