Privacy Policy

Data we access and collect

When you connect Google, TaskFlow receives your Google account ID, verified email address, display name, profile image, and OAuth grants. With your permission, TaskFlow accesses your Google Tasks lists and tasks, including titles, notes, completion status, due dates, hierarchy, ordering, identifiers, and update metadata.

TaskFlow also stores information you create in the service, including Kanban placement, labels, priorities, scheduled times, saved views, workspace memberships, assignments, comments, invitations, activity records, and security and synchronization events.

How we use Google user data

Google user data is used only to authenticate you and provide the visible TaskFlow features you request: displaying and searching your tasks, synchronizing changes with Google Tasks, planning tasks on boards and calendars, and enabling collaboration you explicitly set up. TaskFlow does not use Google user data for advertising, credit decisions, surveillance, or training general-purpose AI models.

TaskFlow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Task data is cached in TaskFlow's database so the product can render, search, collaborate, and synchronize reliably. Google refresh tokens are encrypted at rest; access tokens stay server-side and are short-lived. Session identifiers are stored as hashes. TaskFlow uses access controls, audit records, rate limits, transport encryption, and database row-level security to protect data.

Sharing and service providers

We do not sell Google user data or personal information. Data is shared with workspace members only when you create or accept a shared workspace and according to its permissions. Infrastructure providers may process data solely to host, secure, back up, and operate TaskFlow. We may disclose information when required by law or to investigate abuse and protect users.

Control, retention, and deletion

You can revoke TaskFlow's access in your Google Account at any time. Disconnecting Google removes TaskFlow's authorization but does not delete your Google Tasks. Deleting your TaskFlow account removes active account data and synchronized projections, subject to workspace ownership safeguards and limited retention required for security, legal compliance, and backup expiry. TaskFlow never deletes Google Tasks merely because you disconnect or delete TaskFlow.

Questions and changes

Contact TaskFlow through the Support page with privacy questions or requests. Material changes to how Google user data is used will be disclosed before that new use begins and, where required, will ask for consent again.