Privacy Policy

This Privacy Policy explains how Task Bun ("we", "us", "our") collects, uses, shares and protects personal data when you use our websites, applications and services (the "Service"). It also describes the rights you have over your data.

We act as the data controller for account and website data, and as a data processor for the content you store in your boards on behalf of your organisation.

We collect the following categories of personal data:

• Account data — your name, email address, password hash, profile photo and authentication settings (such as two-factor or passkeys).
• Content data — the boards, cards, comments, attachments and other content you and your team create.
• Billing data — your plan, seats and billing contact. Card details are handled directly by our payment processor; we do not store full card numbers.
• Usage data — log data, device and browser information, IP address and analytics about how the Service is used.
• Communications — messages you send us for support and your notification preferences.

We use personal data to:

• Provide, maintain and secure the Service and your account.
• Process payments and manage subscriptions.
• Send service messages, security alerts and, where permitted, product updates.
• Provide support and respond to your requests.
• Detect, prevent and investigate fraud, abuse and security incidents.
• Improve the Service and develop new features.

Our legal bases for processing include performance of our contract with you, our legitimate interests in operating and improving the Service, your consent (where required), and compliance with legal obligations.

We do not sell your personal data. We share it only with:

• Service providers (sub-processors) such as cloud hosting, payment processing and email delivery, who process data on our behalf under contract.
• Other members of your organisation, where you collaborate on shared boards.
• Authorities or third parties where required by law, or to protect our rights, users and the public.
• A successor entity in connection with a merger, acquisition or sale of assets, subject to this Policy.

We retain personal data for as long as your account is active and as needed to provide the Service. After cancellation we retain Your Content for a limited period to allow export, after which it is deleted or anonymised, unless a longer period is required by law (for example, for tax and accounting records).

We protect your data with encryption in transit, access controls, and optional two-factor authentication and passkeys on your account. No method of transmission or storage is completely secure, but we work continuously to safeguard your information.

Your data may be processed in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses to ensure it remains protected.

Depending on where you live, you may have the right to:

• Access, correct or delete your personal data.
• Object to or restrict certain processing.
• Receive a copy of your data in a portable format.
• Withdraw consent at any time, without affecting prior processing.
• Lodge a complaint with your local data protection authority.

You can exercise many of these rights directly from your account settings, or by contacting us. We will respond within the time required by applicable law.

We use cookies and similar technologies to keep you signed in, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings; disabling some cookies may affect functionality.

The Service is not directed to children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us data, please contact us so we can remove it.

We may update this Privacy Policy from time to time. We will post the updated version and, where changes are material, notify you. The "last updated" date above reflects the latest revision.

If you have questions about this Policy or how we handle your data, please contact us using the details on our website.