Privacy Policy

Last updated: May 2026

1. Information We Collect

Account data: When you register, we collect your name, email address, and role (client or freelancer). If you sign in via Google, we receive the profile information shared by Google per your consent.

Usage data: We collect information about how you use TaskFlow — pages visited, features used, and actions taken — to improve the product and troubleshoot issues.

Messages and files: Messages you send and files you upload are stored securely in our database and file storage. Only conversation participants can access their messages.

Payment data: We use PayPal to process payments. TaskFlow does not store your credit card or bank details. PayPal handles all payment processing under their own privacy policy.

2. How We Use Your Information

  • Provide and maintain the TaskFlow service
  • Send notifications about tasks, messages, and meetings
  • Process billing and subscription management
  • Respond to support requests
  • Improve product features and performance

3. Messages and Files

Messages and uploaded files are accessible only to the client and freelancer in that specific conversation. We use Supabase row-level security (RLS) to enforce these access controls at the database level. No other users, including TaskFlow employees, can read your private messages except as required by law.

4. Payments

Payments are processed by PayPal. When you upgrade a plan, you are redirected to PayPal's secure checkout. TaskFlow receives a confirmation of successful payment and updates your plan accordingly. We do not store payment card numbers, bank account details, or PayPal credentials.

5. Cookies and Local Storage

TaskFlow uses browser local storage to maintain your authentication session and preferences (such as notification settings and conversation metadata). We do not use advertising or tracking cookies. Third-party services (Supabase, Google OAuth) may set cookies per their own policies.

6. Data Retention

We retain your account data for as long as your account is active. You may request deletion of your account and associated data by contacting us. Messages and files are deleted when an account is deleted. Billing records are retained as required by applicable law.

7. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, or delete your personal data. To exercise these rights, contact us using the details below. We will respond within 30 days.

8. Security

We use industry-standard security practices including TLS encryption for all data in transit, row-level security at the database layer, and secure storage for uploaded files. No system is completely secure, and we encourage you to use a strong, unique password.

9. Contact

For privacy-related questions or requests, please contact us at privacy@taskflow.app.