Privacy Policy

Last updated: March 15, 2026

1. Introduction

TaskLite ("the Company", "we", "us") operates TaskLite ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service. We are committed to protecting your privacy and complying with applicable data protection laws, including the Israeli Privacy Protection Law and the GDPR where applicable.

2. Information We Collect

Information you provide:

  • Account details: name, email address, password (encrypted).
  • Organization information: company name, team members, roles.
  • Content: tasks, projects, comments, files, and other data you create in the Service.
  • Payment information: processed securely by our payment provider (Sumit). We do not store full credit card numbers.
  • Communications: emails, support requests, and feedback you send us.

Information collected automatically:

  • Usage data: pages visited, features used, timestamps, and interaction patterns.
  • Device information: browser type, operating system, screen resolution.
  • IP address and approximate location (country/city level).
  • Cookies and similar tracking technologies (see Section 7).

3. How We Use Your Information

  • To provide, maintain, and improve the Service.
  • To process payments and manage subscriptions.
  • To send transactional emails (password resets, notifications, billing).
  • To provide AI-powered features and suggestions within the Service.
  • To analyze usage patterns and improve user experience.
  • To detect and prevent fraud, abuse, or security incidents.
  • To comply with legal obligations.

4. Data Sharing

We do not sell your personal information. We may share data with:

  • Service providers: cloud hosting (AWS), payment processing (Sumit), email delivery (SendGrid), error tracking (Sentry), and AI processing (Anthropic).
  • Within your organization: team members in your organization can see shared projects, tasks, and related content based on their permissions.
  • Legal requirements: if required by law, court order, or governmental authority.
  • Business transfers: in the event of a merger, acquisition, or sale of assets.

5. AI Data Processing

TaskLite uses AI (powered by Anthropic) to provide smart suggestions, task assistance, and productivity insights. When you use AI features, relevant context from your tasks and projects may be sent to our AI provider for processing. This data is used solely to generate responses and is not used to train AI models. You can choose not to use AI features at any time.

Connecting external AI assistants (e.g. Claude): you may connect TaskLite to an AI assistant via our connector (MCP) or API. The assistant then acts on your behalf using short-lived access tokens scoped to your account — it can read and write the TaskLite data your account can access, and it never receives your password or administrative privileges. Prompts you send to an external assistant, and the data it retrieves, are processed by that assistant's provider under their own terms. You can revoke a connection at any time from TaskLite → Integrations → API keys, or by removing the connector in the assistant's settings.

6. Data Storage & Security

  • Your data is stored on secure servers with encrypted connections (TLS/SSL).
  • Passwords are hashed using industry-standard algorithms.
  • We implement access controls, monitoring, and regular security reviews.
  • Data backups are performed regularly to prevent data loss.
  • While we implement strong security measures, no system is 100% secure. We encourage you to use strong passwords and enable available security features.

7. Cookies

We use the following types of cookies:

  • Essential cookies: required for authentication and core functionality.
  • Analytics cookies: help us understand how users interact with the Service.
  • Preference cookies: store your language and display preferences.

You can manage cookies through your browser settings.

8. Your Rights

Depending on your location, you may have the right to:

  • Access: request a copy of the personal data we hold about you.
  • Correction: request correction of inaccurate or incomplete data.
  • Deletion: request deletion of your personal data and account.
  • Export: request a machine-readable export of your data.
  • Restriction: request restriction of processing in certain circumstances.
  • Objection: object to processing of your data for certain purposes.

To exercise any of these rights, contact us at [email protected].

9. Data Retention

  • Active accounts: data is retained for as long as your account is active.
  • Deleted accounts: data is permanently deleted within 30 days of account deletion.
  • Billing records: retained for up to 7 years as required by tax and accounting laws.
  • Server logs: automatically deleted after 90 days.

10. Children's Privacy

The Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.

11. Where Your Data Lives & International Transfers

Customer content is hosted on Amazon Web Services in the European Union (Ireland, eu-west-1). Remote administration and support may occur from Israel, which holds a European Commission adequacy decision under the GDPR. For business customers subject to the GDPR, our Data Processing Agreement (DPA) — including our sub-processor list — applies automatically as part of the Terms of Service; a copy is available on request at [email protected].

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through the Service. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact Us

TaskLite is operated by Shimon Krispel (Israeli licensed dealer / Osek Murshe), Heyl HaAvir 21, Jerusalem, Israel. If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at: [email protected]