Last Updated: August 11, 2026

Privacy Policy

At Taskade, we collect and manage user data according to the following Privacy Policy, with the goal of incorporating our company values: transparency, accessibility, sanity, usability.

Taskade is operated by Taskcade Inc., a Delaware corporation headquartered in San Francisco, California ("Taskade," "we," "us"). This document is part of Taskade's Terms of Service, and by using Taskade.com and our apps (together, the "Website"), you agree to the terms of this Privacy Policy and the Terms of Service. Please read the Terms of Service in their entirety, and refer to those for definitions and contacts.

One scope note before the details: this policy covers taskade.com and your Taskade account. If you are using an app that someone else built and published with Taskade (including signing in to one), the app's owner is the data controller for what you share with their app. Their privacy notice governs, and we process that data on their behalf. Please direct access, correction, or deletion requests about a published app to the app's owner.

Privacy at a Glance

Your content is yours. You keep ownership of everything you create in Taskade.
We never sell your data. We also never use it for advertising.
AI providers are contractually barred from training on your content. We route AI requests through vetted providers under contracts that prohibit using your content to train their general models.
The model you pick decides who processes your request. Some AI providers are based outside the United States, including in China, so an AI request can be processed abroad. Choosing a different model changes who handles it.
Your card details never touch our servers. Payments are handled by Stripe, Apple, and Google, with RevenueCat managing mobile subscriptions.
You stay in control. Export your data, and delete your account from settings or by asking us, subject to the limits described below.

This summary is for convenience only. The full policy below is what applies.

Data Collection & Use

Data Collected

We collect anonymous data from every visitor of the Website to monitor traffic and fix bugs. For example, we collect information like web requests, the data sent in response to such requests, the Internet Protocol address, the browser type, the browser language, and a timestamp for the request.

We ask you to log in and provide certain personal information (such as your name and email address) in order to be able to save your profile and the documents and comments associated with it.

In order to enable these or any other login based features, we use cookies to store session information for your convenience. You can block or delete cookies and still be able to use Taskade, although if you do you will then be asked for your username and password every time you log in to the Website.

In order to take advantage of certain features of the Website, you may also choose to provide us with other personal information, such as your picture or personal website, but your decision to utilize these features and provide such data will always be voluntary.

You are able to view, change and remove your data associated with your profile. Should you choose to delete your account, please contact us at [email protected] and we will follow up with such request as soon as possible.

Taskade is for adults. Our Terms of Service require account holders to be at least 18 years old, so Taskade is not for children or teenagers. By using the Website, you confirm you are at least 18 and have the legal capacity to enter into a binding agreement.

Data Retention

We keep your personal information for as long as your account is active or as long as we need it to provide the Service. In practice:

Account information: kept while your account exists. When you delete your account, we aim to remove it within 30 days.
Workspace content: projects, documents, and messages are kept until you delete them or close your account.
Usage analytics: kept in anonymous or aggregated form to understand how the product is used and improve it.
Support conversations: kept while we may still need them to give you consistent support and to resolve billing or account questions.

These are our current practices and targets, not fixed contractual retention periods. Timing can differ in real cases: copies survive in encrypted backups until those backups age out, and we keep data longer where the law requires it, where there is an open dispute or investigation, or where deleting it would break something another user still relies on.

You can request account deletion in your account settings or by contacting [email protected]. Deletion is subject to legal retention requirements, ongoing disputes, and technical limitations.

AI & Data Processing

AI Processing and Data Protection

AI Model Interactions: When you interact with AI features, we process your prompts, workspace content, and generated outputs. This processing is limited to providing the AI functionality you request.

AI Data Minimization: We only send necessary context to AI model providers to generate appropriate responses. We do not share more workspace data than required for the specific AI operation.

AI Provider Data Handling: Our AI partners process your data solely to provide AI responses according to their respective terms and privacy policies. While we contractually require that they do not use your data to train their general models, their data handling practices are governed by their own policies and may change. We disclaim liability for third-party AI provider practices beyond our contractual control.

AI Processing Logs: We may keep logs of AI interactions for a short period, normally no more than 30 days, to debug problems, monitor for abuse, and improve the Service. We then delete them. Copies can survive in encrypted backups until those backups age out, and we may keep a log longer if we need it for a security investigation or a legal obligation.

Regulated and sensitive data: Taskade is a general-purpose product. It is not built or certified for regulated data, and we do not scan for or automatically remove it. Please do not put data you are not permitted to send to a third-party AI provider into Taskade or into an AI feature. That includes payment card data, health records, government identity numbers, and anything covered by rules like HIPAA, PCI DSS, or similar regimes. We have no HIPAA Business Associate Agreement and Taskade should not be used as a system of record for that kind of data.

We do not intentionally collect biometric data or other special categories of personal data. If such data is processed by accident through an AI interaction, contact us and we will remove it.

To provide a powerful and reliable service, we partner with a few trusted third-party companies. We want to be transparent about who they are and why we use them. We only share the minimum data necessary for our service to function, and we never sell your information.

In our commitment to transparency and privacy, we inform you about our data sharing practices with third-party tools and AI integration. Our platform integrates with various third-party services and utilizes AI services from trusted providers.

Third-Party Integrations: Gmail, Google Workspace, Google Sheets, SurveyMonkey, Twilio, Calendly, Slack, Mailchimp, TypeForm, WordPress, Webflow, and other productivity tools you choose to connect. Integration availability and functionality may change without notice based on third-party terms and policies.

AI Service Providers: Taskade offers a range of AI models, and which company processes a given request depends on the model you choose. If you leave the model on Auto, your plan's default routing picks one for you.

The providers we route to today include OpenAI, Anthropic, Google (including Vertex AI), and Amazon Web Services (including Bedrock), along with the companies behind the open-weight models we offer, such as Alibaba (Qwen), DeepSeek, Moonshot AI (Kimi), Z.ai (GLM), MiniMax, xAI (Grok), and NVIDIA. This list is examples, not a complete list, and it changes as we add and retire models.

Two things follow from that, and we want to be direct about both:

Some of these providers are based outside the United States, including in China. So an AI request can be processed outside the United States and outside the EU and UK. Which one depends on the model in use at the time.
You choose the model, so you control this. If you would rather a request not go to a particular provider, pick a different model. Please do not put data you are not allowed to send to a third-party AI provider into an AI feature, and see the note above about regulated data.

Whichever provider handles a request, it processes your prompts and workspace content only to generate responses and outputs for your use, and our agreements do not permit it to use your content to train its general models. We put those protections in place before we route requests to a provider.

Want the current list? We keep a current list of the AI providers your account can be routed to, and we will send it to you on request. Email [email protected] and ask for the AI sub-processor list.

Infrastructure Partners: Amazon AWS (primary hosting, US East), Cloudflare (CDN and security), Fly.io (additional infrastructure), GitHub (code repository), Intercom (customer support), Google Analytics (website analytics), PostHog (product analytics), Plausible (privacy-friendly web analytics), and Sentry.io (error monitoring and bug tracking).

Payments: Subscriptions, AI credit purchases, and paid App Kits are processed by Stripe. Your full card details go directly to Stripe and never touch our servers; we receive limited billing information (such as plan, amount, card brand and last four digits, and billing country) to manage your account. Stripe's handling of your data is described in its own privacy policy. In-app purchases in our iOS and Android apps are processed by Apple or Google under their own payment terms; we use RevenueCat to manage mobile subscriptions, and it receives purchase metadata (never your card details).

Data Sharing Practices

We share only data reasonably necessary for the functionalities you use, subject to technical and operational constraints.
Our AI partners process your data according to their terms and our contractual agreements. While we require they not use your data to train general models, we cannot guarantee their compliance and disclaim liability for their practices.
Infrastructure partners process data to provide hosting, security, and operational services according to their own terms and policies.

Analytics and Monitoring: Google Analytics and PostHog help us understand how users interact with our platform to improve the experience. Sentry.io processes error logs and crash reports to help us fix bugs and improve reliability.

Our Business Model and Data Use

We do not sell your data. Our business operates on a subscription model built around:

Application hosting and server infrastructure
AI-powered team workspace features
Premium collaboration and automation tools

Your data powers your own workspace and apps - not advertising or third-party data sales. We make money when our platform helps your team be more productive, not by monetizing your information.

Data Processing Roles and Published Applications

Taskade as Data Processor: For your workspace data (projects, documents, AI interactions), Taskade acts as a data processor under your instructions to provide the Service.

You as Data Controller for Published Apps: When you create and publish applications that collect data from end-users, you become the data controller for that data. Taskade processes end-user data solely to provide the application functionality you've configured.

Dual Processing Relationships: Some data may involve dual processing relationships:

Your Application Data: You control what data your apps collect and how they process it
Platform Analytics: We may process aggregated, anonymized usage data about published applications to improve platform performance
AI Training Exclusion: We do not use application end-user data to train AI models

Data Subject Rights for Published Apps: You are solely responsible for handling data subject requests (access, deletion, portability) for your application users, including accounts your end users create to sign in to your app. We have no direct relationship with your end users; if they contact us, we will refer them to you. While we may provide technical tools, we make no warranties about their adequacy for compliance purposes. You remain the sole responsible party for all legal obligations related to your published applications.

Cross-Border Data Processing: Published applications may be accessed globally, potentially involving cross-border data transfers. You are responsible for ensuring appropriate legal mechanisms for any international transfers your apps facilitate.

User Consent and Control

Third-party integrations: before we send your data to a third-party service, you connect that service yourself. Clicking 'Connect' is the step that authorizes the data sharing described above. You retain full control over these connections and can deactivate any automation trigger or action involving a third-party tool at your discretion, which stops further sharing with that tool.

AI features: there is no separate consent prompt for AI. Using an AI feature is the action that sends the relevant prompt and workspace context to a model provider for that request, as described under AI Service Providers above. The model you choose decides which provider receives it, and if you do not use AI features, nothing is sent to a model provider.

For more details on how each service processes data, please refer to their respective privacy policies.

Collection and Use of Personal Information

Personal information is data that can be used to uniquely identify or contact a specific individual.

You may be asked to provide your personal information anytime you are in contact with us (like when you fill out our contact form or sign up for a newsletter). You are not required to provide the information we requested, but if you choose not to do so, in many cases this means we will not be able to provide you with our products or services or respond to your inquiries.

Here are examples of the types of personal information that we collect:

When you visit our website, connect to our services, contact us, use our software, create a Taskade account, or subscribe to our newsletter, we collect a variety of information, including your email address, device information (such as device type, operating system, and browser version), IP address, and a record of your communication.
When using Taskade to update your tasks, documents, comments, chat messages, we collect the content you provided, as well as additional information such as access logs and device identifiers.
When using our software, we collect additional information such as crash reports, information about the operating system, application version, user language, and whether or not you're logged in to Taskade.

How We Use Your Personal Information

We collect and process all your personal data in accordance with the relevant data protection regulations, including the General Data Protection Regulation (GDPR). This means that we may process your personal information for the purposes described in this Privacy Policy with your consent, if it is necessary for the performance of a contract to which you are party or in order to take steps at your request prior to entering into a contract, if it is necessary for compliance with a legal obligation to which Taskade is subject, or when we have assessed it is necessary for the purposes of the legitimate interests pursued by Taskade or by a third party to whom it may be necessary to disclose information.

The personal information we collect allows us to keep you up to date on our latest product announcements, software updates, and services. You may at any time opt out of receiving such communications by contacting us. In particular, we only send you our newsletter with your prior consent, and you can opt out of receiving the newsletter anytime by clicking the unsubscribe link we include in each newsletter, or by contacting us.

We also use the personal information we collect to help us create, develop, deliver, protect, and improve our products, services, content, and customer communications.

We may use your personal information to send important notices, such as communications about changes to our terms, conditions, and policies. As this information is important to your interaction with Taskade, you may not opt out of receiving these communications.

We may also use personal information for internal purposes such as auditing, data analysis, and research to improve our products, services, and customer communications.

With respect to any documents and files you may choose to upload to Taskade, we take the privacy and confidentiality of such documents and files seriously. Uploads are encrypted in transit, and our backups and stored credentials are encrypted at rest, as described on our Security & Compliance page. If you choose to make a document public, we recommend you redact any and all references to people and addresses, as we can't protect public data and we are not responsible for any violation of privacy law you may be liable for.

We implement reasonable security measures to protect data, but no system is completely secure. We disclaim liability for security breaches, unauthorized access, or data loss beyond our reasonable control.

We do not share personal information you have provided to us without your consent, unless:

doing so is appropriate to carry out your own request;
we believe it's needed to enforce our Terms of Service, or that is legally required;
we believe it's needed to detect, prevent or address fraud, security or technical issues;
otherwise protect our property, legal rights, or that of others.

Collection and Use of Non-Personal Information

Non-personal information is data that cannot, on its own, be used to uniquely identify a specific individual. We may collect, use, transfer, and disclose non-personal information for any purpose. We may combine personal and non-personal information for certain purposes; this data will then be treated as personal information for as long as it remains combined. Conversely, aggregated information, i.e. data that might have originated from personal information, but that has been processed in such a way as to not allow personal identification, is treated as non-personal information.

Cookies and Other Technologies

Our website, services, apps, email communications and advertisements may use “cookies” and other technologies such as “pixel tags” and “click-through URLs”.

We use the information we collect in this manner to better understand our users’ interaction with our website and to optimize the user experience. You can disable cookies in your browser settings, but please note that certain features on our website may not be available as a result.

In our email communications, we may use other technologies like “pixel tags” and “click-through URLs” in order to determine if an email has been opened and which links have been clicked. We use this information to help us determine interest in particular topics and improve the effectiveness of our communications, and to reduce or eliminate messages sent to customers. Pixel tags are small images shown inside an HTML email; you can disable tracking by disabling HTML in your email client.

A link with a click-through URL, when clicked, first sends the user to a web server which records the click, and then to the link’s destination. If you prefer not to be tracked in this way, you should not click text or graphic links in the email messages.

As you access our services, we gather some information automatically on our servers and store it in log files. This information includes your browser type, version, and language, your operating system, the referring and exit websites, IP address, a date/time stamp of the request, and the requested resource (file name and URL). We use this information in anonymized form for statistical analysis, to administer our site, and to improve our product and services, without directly associating this data with individual users.

Taskade operates globally with headquarters in San Francisco, California. Our primary infrastructure is hosted on Amazon AWS in the US East region, with content delivery through Cloudflare's global network. If you are outside the United States, your data may be transferred to and processed in the United States, where our primary servers are located.

AI requests can go further than that. As explained under AI Service Providers above, the model you choose decides which company processes that request, and some of those companies operate outside the United States, including in China. So an AI request may be processed in a country whose privacy laws differ from your own and that your regulator may not treat as offering equivalent protection. By using our services, and by choosing a model, you consent to these transfers. Where the law requires more than consent, we rely on the safeguards described in the next section.

International Data Transfers and Legal Framework

Cross-Border Processing: As a global platform, we may transfer your personal data across international borders to provide the Service. These transfers are conducted in accordance with applicable data protection laws.

Adequacy Decisions and Safeguards: Where we transfer data to countries without adequacy decisions from your jurisdiction, we implement appropriate safeguards such as:

Standard Contractual Clauses (SCCs) approved by relevant authorities
Data Processing Agreements with appropriate technical and organizational measures
Certification programs and codes of conduct where applicable

AI Provider Jurisdictions: Our AI providers are based in several countries, and not all of them are in the United States or the EU. Some are in China. Which one processes a request depends on the model in use, so the destination country depends on your model choice and, on Auto, on your plan's default routing. Before we route requests to a provider we put contractual protections in place, including a ban on training on your content and, where the transfer needs them, Standard Contractual Clauses or the provider's equivalent transfer terms. We cannot promise that every provider's home country offers protection a given regulator would call equivalent to your own, and local law in a provider's country may allow its government to request data. If that matters to your organization, choose models from providers whose jurisdiction you are comfortable with, and email [email protected] for the current provider list before you decide.

Regulatory Compliance Framework: We continuously monitor and adapt our practices to comply with evolving privacy regulations including:

EU General Data Protection Regulation (GDPR)
UK Data Protection Act 2018
California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA)
Other applicable regional privacy laws

Data Localization: Where required by local law, we may implement data localization measures or provide options for data residency preferences for enterprise customers.

Taskade may contact you, by email or other means. For example, Taskade may send you promotional emails relating to Taskade or other third parties Taskade feels you would be interested in, or communicate with you about your use of the Taskade website. Taskade may also use technology to alert us via a confirmation email when you open an email from us. You can modify your email notification preferences by clicking the appropriate link included in the footer of email notifications. If you do not want to receive email from Taskade, please opt out of receiving emails at the bottom of any Taskade emails or by editing your profile preferences.

We don’t share personal information with anyone outside of Taskade, except for the few exceptions below.

We work together with other companies who provide information processing services. We only share personal information with these companies if you have agreed to the transfer, or if it is permitted by data protection law. The information we share is limited to the data necessary for the third parties to provide their services. We use these companies for the following services: hosting of our website and support portal, providing our help desk software, sending out newsletters, analyzing our website traffic, hosting our cloud services, manage our app beta testing, and processing our app crash reports.

These companies are obligated to protect your information in accordance with data protection law and provide the necessary safeguards if they are outside of the EU. The companies are bound by our instructions, and are not allowed to use the shared data for any other purpose.

We also share personal information if disclosure of such information is reasonably necessary to satisfy any applicable law, regulation, legal process or enforceable governmental request; to enforce applicable Terms of Service, including investigation of potential violations thereof; to detect, prevent, or otherwise address fraud or security issues; and to protect against harm to the rights, property or safety of Taskade, its users or the public as required or permitted by law.

If Taskade is involved in a reorganization, merger, or sale, the information we collect may be transferred as part of that transaction.

We also use social buttons provided by services like X (Twitter), LinkedIn and Facebook. Your use of these third party services is entirely optional. We are not responsible for the privacy policies and/or practices of these third party services, and you are responsible for reading and understanding those third party services’ privacy policies.

We employ and contract with people and other entities that perform certain tasks on our behalf and who are under our control (our “Agents”). We may need to share personal information with our Agents in order to provide products or services to you. Unless we tell you differently, our Agents do not have any right to use Personal Information or other information we share with them beyond what is necessary to assist us. You hereby consent to our sharing of Personal Information with our Agents.

We may choose to buy or sell assets. In these types of transactions, user information is typically one of the transferred business assets. Moreover, if we, or substantially all of our assets, were acquired, or if we go out of business or enter bankruptcy, user information would be one of the assets that is transferred or acquired by a third party. You acknowledge that such transfers may occur, and that any acquirer of us or our assets may continue to use your personal information as set forth in this policy.

Protection of Personal Information

We take appropriate security measures to protect against unauthorized access to or unauthorized alteration, disclosure or destruction of data. These include internal reviews of our data collection, storage and processing practices and security measures, including appropriate encryption and physical security measures to guard against unauthorized access to systems where we store personal data.

Inside Taskade, we restrict access to personal information to only those employees who need to know that information in order to deploy and maintain our services. These individuals are bound by confidentiality agreements and may be subject to discipline, including termination and criminal prosecution, if they fail to meet these obligations.

Whenever you connect to our service, we use encryption such as Transport Layer Security (TLS) for all information that is being transmitted. However, no method of transmitting or storing data is 100% secure, so we cannot guarantee the security of information you transmit to us.

Some parts of our website, such as our blog or forums, may allow you to post personal information, such as your name or email address. This information is publicly accessible and can be read, collected, and processed by anyone. So please take care when using these features.

Security Incidents and Breach Notification

Incident Response: We maintain security incident response procedures to detect, contain, and remediate security events that may affect personal data.

Breach Notification: In the event of a confirmed data breach, we will provide notifications as required by applicable law. Notification timing and content will be determined based on legal requirements, investigation progress, and law enforcement coordination. We reserve the right to delay notification if required by legal or security considerations.

User Notification: We will notify users of security incidents affecting their data through:

Email to registered account addresses
In-app notifications for active users
Public notice on our status page for widespread incidents

Transparency Reports: We may publish periodic transparency reports regarding security incidents, law enforcement requests, and platform safety measures to maintain trust and accountability.

Limits of Use of Your Google Information

Taskade relies on certain Google services, including the Google API, where we allow you to connect your Google account using OAuth authentication, a secure method to give Taskade access to your Google account data without needing your password. We would like to clarify the following:

Specific Use Only: If you grant Taskade permission to access your Google account data, we will only use this data to provide the specific features that you have authorized. Our use of access to read, write, modify, or control settings will be strictly limited to retrieving and providing information for the features you use on Taskade.
No Data for AI/ML Model Training: We do not use or access your data for developing, improving, or training generalized or non-personalized AI and/or machine learning models. Our internal optimizations are limited to aligning prompts with our project data structure without involving any data training.
No Third-Party Transfers for AI/ML Model Training: We do not transfer your data to third-party AI tools for the purpose of developing, improving, or training generalized or non-personalized AI and/or machine learning models. Any data passed to third-party services is strictly for the functionality you have explicitly chosen and is not used for AI/ML model training.
Limited Data Transfers: We will not transfer your data to anyone else unless it is necessary to enhance the features provided to you, comply with applicable law, or participate in a merger, acquisition, or sale of assets.
No Data Use for Advertising: We will never use or distribute your data for the purpose of serving advertising, including retargeting, personalized, or interest-based advertising.
Limited Human Access: We will not allow humans to access your data unless one of the following conditions is met:
- We have your explicit permission to access specific information.
- We need to investigate a security issue.
- We are required by law.
- The data has been aggregated and anonymized for our internal operations purposes.

We want to assure you that our Privacy Policy's use of information obtained through Google APIs, as well as any information we share with other apps, will adhere to the Google API Services User Data Policy, including Google's Limited Use Requirements.

Access to Personal Information

You are entitled to request information about the personal data stored by us, to have incorrect data corrected, or to request the freezing or deletion of your data. For example, you can request the deletion of your account and its associated email address and content by going into the settings in any of our applications. You are also entitled to the portability of your personal data. Further, you may object to the use of your data at any time with effect for the future.

There are, however, cases where we are not allowed to delete your data in its entirety as a result of legal retention periods. We may also decline requests if they risk the privacy of others, would be extremely impractical, or for which access is not required by law.

Your personal information is retained for as long as it is necessary in order to fulfill the purposes outlined in this Privacy Policy, to enforce applicable Terms of Service, or to comply with our legal obligations. Anonymized and aggregated data, which cannot be used to identify you, may be retained for analytics purposes.

Minors

Taskade is designed for professional and business use, and our Terms of Service require account holders to be at least 18 years old. Taskade is not directed to anyone under 18, and we do not knowingly collect personal information from anyone under 18.

If we learn that an account belongs to someone under 18, we will close it and delete the personal information associated with it, except where the law requires us to keep something. If you are a parent or guardian and believe a minor has created an account or given us personal information, contact us at [email protected] and we will act promptly. We do not knowingly collect any personal information from children under 13, and we have no service directed to them.

Third-Party Sites and Services

Taskade’s website or any of our services may contain links to third-party websites or services. We are not responsible for the information collected by those third parties and we encourage you to read their privacy policy before submitting any personal information to them.

When using the Services in conjunction with third party sites and services, such as logging in with credentials from a third party service, exporting User Content to third party services, or integrating the Services with third party services, we may obtain information from those sources. For instance, if you log in with a third party service like Google, we may obtain your name, email address, access tokens, and other account-related data.

When sharing or exporting User Content from the Services with third party services, we may obtain data like user names, IP addresses, device identifiers, profile information, contacts, and email addresses. Additionally, when integrating the Services with third party services, we may obtain similar information.

It's possible that we could receive any other data that a third party site or service decides to share with us, or that you permit them to share with us. The information we obtain could be dependent on your privacy settings with the site or service, but we don't control those settings or guarantee their effectiveness. It's always recommended to review and customize your privacy settings with sites and services before using them with the Services.

Changes to the Privacy Policy

We may amend this Privacy Policy from time to time. Use of information we collect now is subject to the Privacy Policy in effect at the time such information is used. If we make major changes in the way we collect or use information, we will notify you by posting an announcement on the Website or sending you an email. A user is bound by any changes to the Privacy Policy when he or she uses the Services after such changes have been first posted.

Should you have any question or concern, please write to [email protected]. This Privacy Policy may be updated from time to time. Continued use of the Service constitutes acceptance of any changes.

Taskade is operated by Taskcade Inc., San Francisco, California, United States.

Privacy questions and data requests: [email protected]
Security reports: [email protected]

See also our Terms of Service and Security & Compliance.

Loved by teams at...