Privacy Policy

We determine how personal information is used for Task & Tool accounts, administration, billing, security, support, and operation of the service.

Customers can build, host, and publish their own apps through Task & Tool. For personal information a customer chooses to collect through an app, the customer generally determines what is collected and why. Where applicable law treats us as a processor or service provider for that information, we process it to provide the service and follow the customer's use of the platform. Each customer is responsible for its app, its data practices, and its own privacy notices and consents. End users should direct requests about a customer app to its operator.

Account and transaction information. Contact information, login and authentication records, workspace and team membership, permissions, subscription and transaction records, and communications with us. If you participate in the Partner Program, this also includes referral, attribution, commission, payout, and tax-compliance records, including tax forms and a U.S. partner's taxpayer identification number.

Customer Content. Information submitted, stored, generated, accessed, or transmitted through the service, including code, files, uploads, databases, app content, chat prompts and responses, AI and tool activity, scheduled-job instructions and output, repository information, and information submitted by users of a customer app.

Credentials and connections. API keys, tokens, connection details, account identifiers, permissions, and other credentials you choose to store or use. Depending on your configuration, credentials and related data may be available to Favored Company, an app or its machine, an AI provider, a connected service, or an infrastructure provider.

Usage and technical information. Device and browser information, IP address, cookies, timestamps, logs, security events, app and machine activity, AI and resource usage, deployments, requests, storage, bandwidth, and similar operational data.

We receive information from you, workspace administrators and members, users of customer apps, connected services, service providers, and automatically through use of the service.

Information may be received or accessed by the following parties, depending on how the service is configured and used:

• you, your workspace administrators, and other members with access;
• Favored Company personnel and contractors involved in operating, securing, or supporting the service;
• hosting, infrastructure, storage, database, edge-delivery, website-asset, security, communications, analytics, and support providers;
• AI providers that receive prompts, files, context, tool results, or other content needed to respond;
• payment and payout providers, including Stripe, for billing, payment or payout processing, identity or tax verification, fraud prevention, and related purposes;
• repositories and connected services, including GitHub and any account or API you authorize an app to use;
• the public or an app's intended audience when you publish or share an app;
• professional advisers, insurers, authorities, or other parties when we believe disclosure is appropriate for legal, security, or protective purposes; and
• participants in a financing, acquisition, reorganization, sale, or transfer involving Favored Company or its assets.

Examples of providers we currently use include services operated by Fly.io, Cloudflare, OpenAI, Anthropic, Neon, GitHub, and Stripe. We may use additional or replacement providers, including providers adopted in the future, within the categories described above. A third party's own terms and privacy policy govern its use of information, and we do not control or guarantee its practices.

Using AI sends prompts and relevant Customer Content to the selected AI provider. Task & Tool AI runs on OpenAI, and its requests pass through Favored Company's systems on the way. When you supply your own OpenAI or Anthropic key, the app's AI requests also pass through our systems to that provider, under your own agreement with it. When you place a key on an app's machine for the app's own code, that code may communicate directly with the provider. AI providers may retain, review, use, or disclose information as permitted by their terms, settings, and policies. You are responsible for selecting a provider and configuration appropriate for your information.

Connected services receive the information and instructions needed to perform actions you authorize. We are not responsible for what an AI provider or connected service does with information after receiving it.

We retain information for as long as we determine it is reasonably needed to provide and operate the service, maintain business and security records, collect fees, resolve disputes, enforce agreements, or comply with law. Retention varies by the information, account status, configuration, provider, and operational need. Information may remain in logs, archives, caches, backups, or provider systems after it is no longer visible in the service.

You are responsible for maintaining independent copies of Customer Content and exporting anything you want to keep. We do not guarantee that Customer Content can be recovered. After an app, project, account, or subscription ends, we may delete associated Customer Content at any time, subject to an applicable order, our then-current retention practices, and legal requirements. A file you delete may remain in a live app's backups for about eight days. An archived app's last backup, including its database and uploaded files, is normally deleted 90 days after the app is archived, and a file in it remains until then. Deleting Task & Tool content does not necessarily delete copies held in your own repository, connected account, or another third-party system.

Depending on applicable law, you may have rights concerning personal information, such as access, correction, deletion, portability, objection, restriction, opt-out, or appeal. These rights are subject to legal exceptions. We may verify identity and authority, deny requests where permitted, and retain information where permitted or required.

Submit a request to hello@taskandtool.com . If a request concerns a customer app, contact that app's operator first. We will handle requests as required by applicable law.