1. Introduction

Taskpend ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

2. Information We Collect

We collect information you provide directly to us, including:

Account information (email address, name, password)
Profile information (display name, handle)
Content you create (tasks, projects, notes)
Payment information (processed securely by Paddle)
Communications with us (support requests, feedback)

3. Automatically Collected Information

When you use our Service, we may automatically collect:

Device information (browser type, operating system)
Usage data (pages visited, features used)
IP address and approximate location
Cookies and similar tracking technologies

4. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Service
Process transactions and send related information
Send you technical notices and support messages
Respond to your comments and questions
Analyze usage patterns to improve user experience
Detect, prevent, and address technical issues

5. Information Sharing

We may share your information in the following circumstances:

With service providers who assist in our operations (e.g., Paddle for payments, Supabase for data storage)
With other users when you use collaborative features
To comply with legal obligations or protect our rights
In connection with a merger, acquisition, or sale of assets

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

7. Data Retention

We retain your personal data for as long as necessary to provide our Service and fulfill the purposes described in this Policy. When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law.

8. Your Rights

Depending on your location, you may have the right to:

Access your personal data
Correct inaccurate data
Request deletion of your data
Object to or restrict processing
Data portability
Withdraw consent at any time

9. Cookies

We use cookies and similar technologies to enhance your experience, analyze usage, and assist in our marketing efforts. You can control cookie preferences through your browser settings. Disabling cookies may affect the functionality of our Service.

10. Third-Party Services

Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

11. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we learn we have collected such information, we will take steps to delete it promptly.

12. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

14. MCP & AI Assistants (Claude and other connectors)

Taskpend offers a Model Context Protocol (MCP) server so third-party AI assistants such as Claude can read and modify your Taskpend data on your behalf. This is opt-in and only happens after you explicitly authorize the assistant through our OAuth consent screen.

What is shared: tasks, documents, comments, and metadata that you own or have been mentioned in — only when the assistant calls a tool and only for the scopes you approved (read or read/write).
What is not shared: your password, payment details, or data from other users beyond what you can already access in Taskpend.
Tokens: OAuth access and refresh tokens are stored hashed at rest, bound to the registered client, and never exposed to the browser. Access tokens are short-lived; refresh tokens rotate on use and a reused token revokes the whole family.
Provider data handling: when you connect Claude, the conversation content you send to Claude is governed by Anthropic's privacy policy, not ours. Taskpend only receives tool calls back from Claude.
Revocation: you can disconnect any connected app at any time from Settings → API & MCP → Connected apps. This immediately revokes its tokens.
Audit: tool calls made by AI assistants are logged against your account for security and abuse detection.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

16. Contact Us

If you have any questions about this Privacy Policy, please contact us at privacy@taskpend.com.