Privacy Policy

Last updated: September 17, 2026

aitaskmind ("we" or "us") respects and protects your privacy rights. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use aitaskmind ("Service"), and your related rights under applicable law.

Please read this Policy carefully before using the Service. Using the Service means you have read and agreed to this Policy. We may update this Policy from time to time; significant changes will be communicated in advance via email or notice through the Service.

1. Data Controller

The data controller for this Service is:

• Company Name: aitaskmind
• Registered Address: [Company Registration Address]
• Privacy Contact Email: privacy@aitaskmind.xyz
• Data Protection Officer: Not applicable at this time

2. Personal Information We Collect

2.1 Information You Provide

• Account Information: Email, display name, password (encrypted), and other registration fields
• Payment Information: Transaction amount, payment status. We do not store complete card numbers — card data is processed by our payment provider (see Section 5)
• Communication Records: Emails, support tickets, and feedback you send to customer support
• Task Data: Tasks, lists, tags, subtasks, and preferences you create using the Service

2.2 Information We Collect Automatically

• Device & Network: IP address, device model, operating system, browser type, timezone
• Usage Behavior: Page visits, feature usage, operation logs, session duration
• Log Data: Request timestamps, error logs, performance data

3. How We Use Your Personal Information

Purpose	Legal Basis
Providing and maintaining Service	Contract performance
Billing and payment processing	Contract performance
Customer support	Contract performance / Legitimate interest
Service notifications (billing, security, policy updates)	Legitimate interest
Security and fraud prevention	Legitimate interest
Product optimization and analytics	Legitimate interest
Legal compliance	Legal obligation
Marketing communications (optional)	User consent

We may aggregate or de-identify data for statistical analysis. Such data cannot be linked to specific individuals.

4. Cookies and Tracking Technologies

Type	Purpose	Can Be Disabled
Strictly necessary	Maintaining login, core functionality	No
Functional	Language preferences, personalized settings	Yes
Analytics	Anonymous usage statistics, product optimization	Yes
Marketing (optional)	Targeted advertising and performance measurement	Yes

Analytics tools used: Google Analytics (privacy policy: policies.google.com/privacy). You can adjust preferences via browser settings or our Cookie Preference Center.

5. Sharing and Disclosure of Personal Information

We do not sell your personal information, including "sales" as defined under applicable laws such as CCPA. We only share your information in the following circumstances:

• Service Providers: Cloud computing, payment processing, customer support, analytics, and other suppliers, bound by confidentiality agreements. Payment card data is processed exclusively by our PCI-DSS compliant payment processor and Merchant of Record, Waffo Pancake, and is not stored on our servers. Creem is our backup payment channel and operates under the same PCI-DSS and Merchant of Record terms.
• Legal and Regulatory Requirements: As required by law, court orders, or legitimate requests from authorities
• Business Transactions: In cases of merger, acquisition, etc., with advance notice and protection obligations continuing
• With Your Consent: For other purposes, only with your explicit prior consent

6. Data Security Measures

• Transmission Encryption: TLS / HTTPS
• Storage Security: Sensitive data such as passwords encrypted or hashed
• Access Control: Principle of least privilege; employees sign confidentiality agreements
• Regular Security Audits: Periodic security audits and vulnerability scanning

In case of a security incident affecting your rights, we will notify you and relevant supervisory authorities within 72 hours of discovery, as required by law. Please keep your account credentials safe and do not share them with others.

7. Personal Information Retention Period

Data Type	Retention Period	Upon Expiry
Account information	During active use; 90 days after account deletion	Delete or anonymize
Transaction records	As required by law, typically 7 years	Delete or archive
Customer support records	3 years	Secure deletion
Security audit logs	12 months	Secure deletion

8. Your Data Rights

To exercise the following rights, contact us. We will process your request within 30 calendar days:

Right	Description
Right to be informed	Understand what data we collect and how we use it
Right of access	Obtain a copy of your personal data
Right to rectification	Correct inaccurate or incomplete information
Right to erasure	Request deletion of data under specific conditions
Right to restrict processing	Pause data processing under specific conditions
Right to data portability	Obtain your data in machine-readable format
Right to object	Object to processing based on legitimate interests or marketing
Right to withdraw consent	Withdraw consent for processing based on consent

If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data protection authority.

9. Marketing Communications and Opt-Out

With your consent, we may send marketing information related to the Service via email, SMS, or in-app notifications. You can unsubscribe at any time: click the "unsubscribe" link in emails, disable marketing notifications in Account Settings, or contact us. Opting out does not affect service-essential notifications (billing, security reminders).

10. International Data Transfers

Our servers and partners may be located in various regions including the United States and Singapore. When data is transferred internationally, we ensure data security through:

• Signing data processing agreements incorporating EU Standard Contractual Clauses (SCC)
• Transferring only to recipients with equivalent protection levels
• Other safeguards such as adequacy decisions or Binding Corporate Rules

11. Children's Privacy

This Service is intended for users aged 18 and above. We do not knowingly collect information from minors below this age. If you believe your child has provided us with information, please contact us immediately and we will delete it as soon as possible.

12. Third-Party Links and Services

This Service may contain links to third-party websites or integrate with third-party services. This Policy applies only to information we directly collect. We are not responsible for third parties' data practices and recommend reviewing their policies before use.

13. Changes to This Policy

In case of significant changes, we will notify you at least 15 days in advance via platform announcement or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

• Privacy contact: privacy@aitaskmind.xyz
• Customer support: support@aitaskmind.xyz
• Company: aitaskmind
• Service Hours: Monday to Friday, 09:00–18:00 UTC+8

This Privacy Policy is for reference only and does not constitute legal advice. We strongly recommend consulting a qualified legal professional familiar with your target market before formal publication.

aitaskmind · aitaskmind.xyz