Privacy. Terms. Security.
Last updated: May 29, 2026
Privacy policy
Tasx ("we", "us", "our") respects your privacy. This summary explains what data we collect, why we collect it, and how we handle it.
Data we collect
- Account information: name, email, organization name, role, optional phone number and avatar.
- Workspace content: the projects, tasks, charters, comments, attachments, and notes you create.
- Usage telemetry: anonymized page-view and feature-use counters, used to prioritize the roadmap. Never sold to third parties.
- Operational data: error logs, audit log entries, login attempts, IP addresses — retained per your tenant policy.
- Support correspondence: tickets you submit and our replies.
What we don't do
- We don't sell your data to third parties.
- We don't use customer content to train AI models.
- We don't run advertising or behavioral tracking.
Where data is stored
Cloud customer data is stored in regional data centers operated by Tasx and its hosting partners. Specific region details for your tenant are documented in your Data Processing Addendum and available on request. Self-hosted customers retain full control of their data on their own infrastructure.
Your rights
You can request a copy of your data (export), request deletion, or correct inaccuracies by emailing privacy@tasx.me. We respond to verified requests within 30 days.
Terms of service
By using Tasx, you agree to these terms. Your subscription gives you access to the Tasx platform under the limits of your plan. The full Master Services Agreement governs your subscription.
Acceptable use
You agree not to misuse the service, attempt to circumvent technical controls, share login credentials, or use Tasx for illegal activity. We commit to providing the service as described and giving you reasonable notice of significant changes.
Subscription & billing
Plans are billed annually unless otherwise agreed. Pro and Business may opt into monthly billing at a ~20% premium. You can cancel any time; refunds for unused prepaid periods are issued at our discretion in accordance with your MSA.
Termination
You can terminate by closing your tenant in the app. We can terminate for material breach with reasonable notice. On termination you have 30 days to export your data; after that the data is irreversibly deleted.
Liability
Our maximum liability under these terms is limited to the fees you paid in the preceding 12 months.
Security commitments
Security is foundational to Tasx — not bolted on.
Encryption
All data encrypted in transit (TLS 1.2+) and at rest (AES-256). Backups encrypted with separate keys.
Authentication
Password hashing with bcrypt. Optional 2FA via email OTP. LDAP / AD sync for enterprise tenants.
API security
22 endpoints, all HMAC-SHA256 signed. Per-key rate limiting. No bearer tokens that can be stolen.
Isolation
Multi-tenant data isolation enforced at every database query — not just the application layer.
Audit log
Every task mutation logged with old → new diff. Tamper-evident, retention configurable per tenant.
Responsible disclosure
Security researchers: please email security@tasx.me. We respond within 48 hours.