TaskiFlow
TaskiFlow

Privacy Policy

Effective: 15 October 2025 • Consent text: v1.0

Who we are

Controller: Taskiflow
Email: info@taskiflow.com

Scope

This policy covers our website, waitlist forms, and related communications.

What we collect

  • Waitlist: email (required), company, role.
  • Technical: salted SHA-256 hash of IP, user agent, basic event logs for abuse prevention.
  • Support/contact: message content and headers you send us.

Sources: directly from you; automatically from your device when using our site. No data from third-party data brokers.

Why we process your data

  • Product updates and early-access notices to the waitlist. Legal basis: consent (GDPR Art. 6(1)(a)).
  • Abuse prevention and reliability. Legal basis: legitimate interests (Art. 6(1)(f)); we use hashed IP and logs.
  • Responding to inquiries. Legal basis: legitimate interests (Art. 6(1)(f)).

You may withdraw consent at any time. This does not affect prior processing.

Cookies and analytics

We do not use tracking pixels by default. If we enable analytics or non-essential cookies, we will ask for consent via our cookie banner and provide controls on the Cookie Policy page.

Sharing and recipients

  • Supabase: database hosting (EU region configured).
  • Resend: email delivery using our verified domain.
  • Operational vendors (e.g., error logging, uptime) as needed, bound by DPAs.

No selling of personal data. Access limited by need-to-know.

How long we keep it

  • Active subscribers: until you unsubscribe or ask us to delete.
  • Inactive/pending: purged after 30 days.
  • Support threads: 24 months then review.
  • Backups: retained per processor policy, then purged.

Security

  • TLS, HSTS, least-privilege keys, role-based data access.
  • Salted SHA-256 hashing for IP addresses used in abuse controls.
  • Audit logging and periodic access reviews.

Automated decision-making

No automated decisions producing legal or similarly significant effects.

Your rights

  • Access, rectification, erasure, restriction, portability, objection.
  • Withdraw consent at any time.
  • Lodge a complaint with your Data Protection Authority.

We respond within 30 days. We may request reasonable identity verification. Contact: info@taskiflow.com.

How to withdraw or delete

  • Use “Unsubscribe” in any email or the footer form on our site.
  • Use “Delete my data” in the footer or email info@taskiflow.com.

Children

Not intended for users under 16. Do not sign up if under 16.

Changes

We version this policy and consent text. Material changes will be announced. If purposes or recipients change, we will seek new consent where required.