Privacy Policy

This Privacy Policy explains how TaskyTrack ("TaskyTrack", "we", "us") collects, uses, and protects information when you use our website and service at taskytrack.com (the "Service"). By using the Service, you agree to this policy.

1. Information we collect

• Account information. When you sign up, we collect your email address and, optionally, your name and company. Passwords are stored only as a salted cryptographic hash - never in plain text.
• Google sign-in. If you choose "Continue with Google", we receive your basic Google profile - your name and verified email address - to create or sign you into your account. We do not receive your Google password.
• Meeting content. To produce a blueprint, we process the transcripts of meetings you paste in or that our note-taker captures, along with the structured outputs generated from them.
• Connected accounts and AI tools. If you connect a third-party account (such as GitHub) or an AI coding tool, we store the access credentials needed to perform the actions you request. Access passes issued to AI coding tools are stored only in hashed form. You can disconnect any of them at any time.
• Technical data. We use a strictly necessary session cookie to keep you signed in, and basic logs to operate and secure the Service. We also collect aggregate, cookieless visit statistics (such as page views, referring sites, and country) to understand how the site is used. These do not identify you or track you across other websites. Separately, we use advertising cookies to measure our ads, as described under Advertising cookies (Meta Pixel) in section 9.

2. How we use your information

• To provide the core Service - turning your meeting content into structured specifications.
• To authenticate you and keep your account secure.
• To perform actions you explicitly request, such as delivering a spec to a connected account.
• To make the specs you approve available to the AI coding tools you choose to connect.
• To operate, maintain, debug, and improve the Service.

We do not sell your personal information, and we do not use your meeting content for advertising.

3. Meeting recording and consent

Where you use the note-taker to join a meeting, you are responsible for informing participants and obtaining any consent required by the laws and rules that apply to you and your meeting. Only send the note-taker to meetings you are authorized to record.

4. How your information is shared

We share information only with third-party service providers ("subprocessors") that help us run the Service, and only to the extent needed to operate it. These include a third-party meeting note-taker and transcription provider (for the meetings you choose to capture), a third-party AI provider on a paid tier that does not train on your data (for spec generation), our cloud hosting and database providers, and Paddle (payments, as merchant of record). Our use of Google services is described in Section 8. Each processes data on our behalf under its own security and confidentiality obligations. We may also disclose information where required by law. We do not sell your personal information.

AI coding tools you connect. If you connect an AI coding tool to your account through the TaskyTrack connector, that tool can read the specs you have approved, and only those. It cannot see specs you have not approved, your meeting transcripts, or your account details, and it cannot change anything. Each such tool is operated by its own provider, not by TaskyTrack, and processes the specs it receives under that provider's own terms and privacy policy. You choose which tools to connect, you can see them in Settings, and disconnecting a tool stops its access immediately.

5. Data retention

We keep your account and content while your account is active. You can delete a project (and its transcript and blueprint) at any time, and you can request deletion of your account by contacting us. Where our note-taker captures a meeting, we retain only the text transcript in your account; the recording and transcript are deleted from our note-taker provider once your spec has been generated, and we do not retain video recordings. Backups and logs are retained for a limited period and then removed.

6. Security

Data is transmitted over encrypted connections (HTTPS) and access is restricted to your authenticated account. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.

7. Your rights

You may access, correct, export, or delete your information. To make a request, contact us.

8. Google user data and Limited Use

TaskyTrack's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google sign-in data is used only to authenticate you and is never sold or used for advertising.

We request read-only access to your calendar events (calendar.events.readonly) for a single purpose: to show your upcoming meetings so you can choose which ones our note-taker should join, and to read the meeting link for the meetings you select. We never create, edit, or delete calendar events.

Limited Use and AI. Google user data is never used to create, train, retrain, or improve any artificial-intelligence or machine-learning models, whether our own or a third party's. Our spec-generation AI processes the transcript of the meetings you choose to capture, not your Google Calendar data, and it runs on a paid API tier whose provider does not use the data to train its models. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

9. Cookies

We use a strictly necessary cookie to keep you signed in, and a few small first-party cookies to remember your cookie choice and the country we detect, so we know whether to ask for it. Our visit statistics are collected without cookies.

Advertising cookies (Meta Pixel). We use the Meta Pixel and Meta's Conversions API to measure how our ads on Facebook and Instagram perform: when someone visits a page, creates an account, generates their first spec, or starts a paid plan. To do this, Meta (Meta Platforms Ireland Ltd. and Meta Platforms, Inc.) receives the page visited, cookie identifiers (_fbp and _fbc), your IP address and browser details, and, for account events, your email address and account id in hashed (one-way scrambled) form. We also store the ad campaign details from the link you arrived by (UTM tags and the Facebook click id) with your account, to see which campaigns bring sign-ups. We never send the content of your meetings or specs to Meta. Meta processes this data under its own terms and privacy policy.

If you visit from the UK, the European Union or the European Economic Area, none of this happens unless you choose Accept on our cookie banner, and your choice is kept for six months. You can change it at any time with the Cookie settings link at the bottom of our pages. Elsewhere, these cookies are used by default; you can opt out as described below.

Your privacy choices. Some US state laws, including California's, treat sharing data for advertising as a "sale" or "sharing" you can opt out of. We do not sell your personal information for money, but you can opt out of the advertising measurement described above in any of these ways:

• Decline the cookie banner (shown to visitors from the UK, the EU and the EEA), or change your choice later with the Cookie settings link.
• Turn on Global Privacy Control (GPC) in a browser or extension that supports it. We treat the GPC signal as an opt-out: the Meta Pixel does not load and we send no advertising events for you.
• Email us at [email protected] and we will opt your account out.

10. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

11. Contact

Questions about this policy? Contact us.