Account info (name, email), workspace content (projects, tasks, comments, files you upload), and usage telemetry (page-load timings, error stacks) to keep the Service running.
One session cookie per signed-in browser. That's it. No third-party trackers on the marketing site.
Stripe (billing), Cloudflare (CDN), Let's Encrypt (TLS). Full list and DPA available on request.
You can export or delete your data at any time from /profile.cgi. EU / UK / California residents have additional rights under GDPR / CCPA; reach out to privacy@taskforge.3dshawn.com.
Argon2 password hashing. TLS-only transport. Encryption at rest. Annual third-party penetration test. SOC 2 Type II on Business plan and above.
Customer content is kept while your subscription is active and for 30 days after cancellation. Audit logs are kept for 12 months by default; longer on Business plan.
Last updated 2026-06-06.