Privacy

Who we are

Progask is a task board run by its founder. Contact: support@progask.com.

What we collect

• Your email address and display name, given when you create an account.
• A scrambled (hashed) copy of your password. We cannot read your password.
• The tasks you write: titles, descriptions, dates, and the record of when you moved a date.
• If you send an email from a task card, that message and any replies to it are kept on the card.
• If you make or join a team board: its name, who is on it, and the tasks each person adds to it. An invite link is kept only as a scrambled (hashed) copy, with who made it and when; it works once, for 7 days.
• If you send us a message with Tell us: the message, the page you were on, your browser, and the time. We use it only to fix problems and to reply to you, and it is erased with your account.
• Anonymous page-view counts from Vercel Analytics, which uses no cookies and builds no profile of you.
• Microsoft Clarity, which records how pages are used — clicks, scrolling and the page’s layout — so we can see where people get stuck. It sets its own cookies. On every page except the home page, and in every form, the words on screen are hidden from it, so it never sees your tasks, your notes or what you type.

Why we use it

To run your board, to sign you in, and to send the emails listed below. Tasks on your own board are never shown to other users. Only the tasks you add to a team board are shared, with the people on it; joining a team board never moves or shares a task you already have. On a team board, the people on it see your name, your email address and the tasks you add there — never the reasons you moved a date, and never replies other people emailed to your tasks. Nothing is ever sold or used for advertising.

Emails we send

From noreply@progask.com: a verification code when you sign up, and a link when you reset your password. If you join the waitlist, one email when a place opens. We send no marketing.

Cookies

Ours are essential ones only: a session cookie that keeps you signed in, a language preference, and which board view you last chose. Microsoft Clarity sets its own cookies on every page to count visits and sessions; it is the only tracking cookie on your board, and it cannot read what is on it.

Who processes it

Hosting by Vercel, database by Neon, and outgoing email by ZeptoMail (Zoho). A daily backup of the database is kept in Google Drive. When something breaks on our side, Sentry receives the error message and the page it happened on, never your tasks, cookies or email address. Microsoft receives what Clarity records, as described above. The chat app you connect (Claude or ChatGPT) receives what its tools return, only when you ask it to look at or change your board. If you continue with Google, Google tells us your name and email address and nothing else, and we keep Google’s id for your account in place of a password.

Quick plan and AI

Quick plan is optional. When you use it, the text you type is sent to the AI provider we use to be turned into tasks. We do not store that text — only the tasks you choose to add. We record how many credits each use cost, never what you wrote. Nothing else in Progask is sent to an AI provider.

Connected apps

You can connect Progask to a chat app such as Claude or ChatGPT. Nothing is connected unless you sign in and approve it by name, and you can disconnect it at any time from your connected apps. While connected, that app can read your tasks, their dates and the notes you wrote on them, and can add tasks, move them and mark them done when you ask it to. It cannot delete a task, and it can never reach a board you are not on. On a team board it sees what you see there — your teammates’ tasks included — but never the reasons anyone moved a date or the email on a card, and it changes only your own tasks. When you ask, it can also make a team board, give you an invite link, and offer, take or decline a task.

Replies other people emailed to your tasks are never sent to a connected app. They were written by people who did not agree to that.

What goes through a connected app, in each direction. To the app, when it asks: your tasks (title, dates, notes, whether done), the boards you are on and, on a team board, the tasks and names of the people on it. From the app, when you ask it to act: the title, description and dates of a task to add, a new date or a done mark for a task, a note, or the name of a board to make. We keep a short log of each call: which app made it, which tool, whether it worked, how long it took, and our own error message if it refused — never what you wrote and never what was sent back. What the chat app does with what it receives is covered by that app’s own privacy policy, not this one.

How long we keep it

• Your account, tasks, notes, the record of moved dates, and messages on task cards: until you delete your account or ask us to delete them.
• Staying signed in: up to 30 days from when you signed in, or until you sign out. Sign-up, password-reset and account-deletion codes expire within 10 minutes.
• A connected app’s access: until you disconnect it from your connected apps. Its short-lived access tokens are cleared once they expire, and we store them only as scrambled (hashed) copies.
• The log of connected-app calls described above: 30 days, then erased.
• Messages sent with Tell us: until you ask us to delete them, and they are erased with your account.
• Backups: a daily copy of the database, of which the last 30 are kept. After you delete your account, your data can remain in those backups for up to 30 days, then goes with them.
• Data held by the companies in “Who processes it” follows their own retention, set out in their policies.

Your rights

You can delete your account and everything on it yourself, from Account: we email you a code to confirm it is you, and it is deleted at once. That includes the tasks you added to team boards, which the people on those boards then no longer see. You can also ask us to send you a copy of your data, correct it, or delete it for you: write to support@progask.com from the address on your account and we will answer within 30 days.

Some controls are yours without asking us: you can delete your account from Account, disconnect any chat app at any time from your connected apps, sign out, and choose whether to use Quick plan.

Changes

If this policy changes in a way that matters, we will email account holders before it takes effect.