1. Our Commitment to Privacy

At TaskTrackerHQ, we believe productivity tools should protect your personal information, not monetize it. We operate under a strict principle: We do not sell, rent, or trade your personal data, task entries, or calendar schedules to third-party advertisers.

This Privacy Policy explains what data we collect across our Web App, Mobile PWA, and Browser Extension, how it is used, and how you maintain total control over your information.

2. Information We Collect

We only collect information necessary to deliver productivity, calendar synchronization, and AI assistant capabilities:

• Account Profile Data: When signing in via Google or Microsoft OAuth, we receive your basic profile name, email address, profile avatar image, and unique provider account identifier.
• Workspace Content: Tasks, priorities, due dates, categories, GPA course names, credit values, and grade entries created by you.
• Calendar Sync Data: When explicitly connected, event titles, start/end timestamps, locations, and provider event IDs from Google Calendar or Microsoft Outlook.
• AI Telemetry & Request Logs: Timestamps, model identifiers (e.g., gemini-nano, o3-mini, gpt-4.1), and feature invocations to enforce quota tier limits and calculate cost metrics.
• Extension & PWA Context: Text explicitly highlighted for quick-task capture and local focus session history (stored locally on your device).

3. How We Process & Protect AI Requests

TaskTrackerHQ utilizes a privacy-first hybrid AI architecture designed to minimize cloud data transmission:

4. Third-Party Integrations & OAuth Scopes

TaskTrackerHQ integrates with trusted cloud providers to deliver seamless multi-device productivity:

• Google APIs: Used for Google OAuth identity and Google Calendar event sync. We adhere to the Google API Services User Data Policy, including the Limited Use requirements.
• Microsoft Graph: Used for Azure AD / Microsoft account login and Outlook Calendar event mapping.
• OpenAI: Used for advanced task reasoning, TT Bot conversations, and calendar optimization prompts.

5. Data Storage, Security & Retention

Your data is stored securely in encrypted databases with strict access controls. Authentication sessions use secure, encrypted JWT cookies.

• Data Retention: We retain your workspace records as long as your account remains active.
• Local Storage: Offline calendar event caches and theme customizations reside in your browser's local storage and can be cleared instantly from your device.

6. Your Rights & Data Deletion

You maintain full sovereignty over your data under GDPR, CCPA, and applicable global privacy frameworks:

• Access & Export: You can view all your stored tasks, GPA records, and active events directly in the application.
• Disconnection: You can disconnect Google or Microsoft calendar integrations with one click in Settings, instantly wiping provider tokens.
• Full Account Deletion: You have the right to request permanent deletion of your profile, all created tasks, GPA records, and AI usage logs by contacting administration.

7. Children's Privacy

TaskTrackerHQ does not knowingly collect or solicit personal information from children under the age of 13. If we learn that we have collected personal data from a child under 13, we will promptly delete that information.

8. Contact Our Privacy Team

For privacy inquiries, data deletion requests, or questions regarding our security architecture:

Email: privacy@tasktrackerhq.app
Administrator: TaskTrackerHQ Platform Security Team
In-App Support: Submit inquiries via the in-app Suggestion modal.