Privacy Policy

01 Who is responsible

WhatsTask is run by its founders from Dubai, United Arab Emirates. We are responsible for the personal data we collect about the people who sign up and use WhatsTask. You can reach us at [email protected].

Customers also put personal data into WhatsTask about other people, such as the freelancers, staff and clients they work with. For that data, the customer decides what goes in and why, and we handle it on their behalf to provide the service. Questions about it are best sent to the business that added it. We will help them answer.

02 What we collect

• Your account: your name and email address, plus your profile name and picture if you sign in with Google.
• Your workspace: briefs, documents, tasks, handoffs, messages, rules, plans and the work produced. It also includes cost and time records.
• People on a roster: what a customer enters about the people they work with, such as names, roles, rates, email addresses, and Slack or Telegram identifiers.
• Connected services: the access tokens and data a connection lets us read, such as issues from GitHub or Linear. Tokens are encrypted, with a separate key for each workspace.
• Usage: pages viewed, errors and searches inside the app, recorded with your account so we can fix problems. It also includes your IP address and browser details in our server logs.
• Agreements: which version of the terms you accepted, whether you opted in to marketing, the exact wording you saw, and when and from which IP address and browser.

We do not use advertising cookies or third-party analytics trackers in the app.

03 How we use it

• To provide WhatsTask: to plan, route and run your work, send messages you asked us to send, and keep your ledger. This is needed to perform our agreement with you.
• To keep it safe and fair: to sign you in, enforce usage limits, prevent abuse and fix faults. This is our legitimate interest in running a secure service.
• To improve it: using counts and measurements that do not reveal your content. This is our legitimate interest.
• To send you marketing: only if you ticked the box for it. You can withdraw at any time.
• To meet legal obligations: when the law requires us to keep or disclose something.

04 AI and your data

To produce plans, answers and work, WhatsTask sends the relevant part of your content to an AI model provider. That might be the brief, the task, your workspace rules and the work already accepted on the project. Only what each request needs is sent.

• We do not use your content to train AI models.
• Anthropic’s commercial terms do not allow it to train its models on content sent through its API.
• IFM receives text only, and processes it under its API terms.
• We do not sell your content, or any personal data, to anyone.

05 Who we share it with

We use these providers to run WhatsTask:

When you connect Slack, Telegram, Google, GitHub, Linear or Upwork, we exchange data with that service as the connection allows. We may also disclose data if the law requires it, or to protect people or the service from harm. If WhatsTask is transferred to a company we form, or to anyone who takes it over, your data goes with it under this policy.

06 Where it is stored

Our providers store and process data outside the United Arab Emirates, including in Singapore, the United States and the European Union. We choose providers who protect data to a standard comparable with the law where you are.

07 How long we keep it

• Account and workspace data: while your account is open.
• After you ask us to close it: deleted from our active systems within 30 days, and from backups as they cycle out.
• Usage logs: kept for as long as they help us run and fix the service, then deleted.
• Records of what you agreed to: kept for as long as we rely on them, and as long as the law requires us to be able to prove them.

08 Your rights

Depending on where you live, including under the UAE Personal Data Protection Law and the GDPR, you can ask us to:

• tell you what we hold about you, and give you a copy;
• correct it, or delete it;
• stop or limit some uses of it, or object to them;
• send it to you or someone else in a usable format.

Where we rely on your consent, as for marketing, you can withdraw it at any time. Withdrawing does not affect anything done before. Email [email protected] and we will reply within 30 days. You can also complain to your local data protection authority.

09 Marketing email

We only send newsletters, tips or offers if you opted in by ticking the box. The box is never ticked for you. Every marketing email has an unsubscribe link, and you can also switch it off under Settings, then Email from us.

Email about your own work is not marketing, and you get it whether or not you opted in. That includes handoffs waiting for you, questions from your team, sign-in and password links, and notices about your account or these terms.

10 Cookies

WhatsTask uses only the cookies it needs to work:

• a sign-in cookie that keeps you signed in for up to five days. It cannot be read by scripts on the page;
• your light or dark theme choice, which is kept in your own browser.

11 Security

Data is encrypted in transit. Connection tokens are encrypted at rest, with a key for each workspace. Worker keys are stored only as a one-way hash. Each workspace is kept apart from the others in the data layer itself, not only by the app. No system is perfectly secure. If a breach affects your data, we will tell you without undue delay.

12 Children

WhatsTask is for businesses and people aged 18 or over. We do not knowingly collect data from children.

13 Changes to this policy

When we change this policy, the date at the top changes. If a change matters, we will ask you to review and agree to it the next time you use WhatsTask, and email you first if it affects you significantly.