Privacy Policy

Effective date: 22 September 2026 · Last updated: 22 September 2026

This policy explains what personal data TaskOS collects, why, who can see it, and the choices you have. TaskOS is a shared task board used by invited teams. It is operated by SuperGaming Pte Ltd ("SuperGaming", "we", "us"). This policy applies to TaskOS at tasks.supertuned.ai and its related services (together, the "Service").

The data we collect

Data you provide

• Account details: your name and work email address, and your role on the team.
• Work content: the projects, tasks, notes, comments, subtasks, due dates and assignments that you and your teammates add.
• Messages to us: anything you send when you contact support.

Data from Google Sign-In

If you choose "Continue with Google", we receive your name, email address, whether Google has verified that address, your profile picture and a Google account identifier. We request only the openid, email and profile scopes. We do not access your Gmail, Google Drive, Calendar, contacts or any other Google data.

Data collected automatically

• Sign-in and security data: your IP address and browser user agent when you sign in, request a sign-in link or create an API token, used to secure your account and prevent abuse.
• Activity history: a record of changes to tasks and projects (what changed, when and by whom) so your team can see how work moved.
• Cookies: one strictly necessary cookie that keeps you signed in. We do not use advertising or analytics cookies.

Data from your team's integrations

A workspace owner may connect their own tools, such as email, chat or meeting notes, so that commitments they make appear on the board as tasks. Content created this way is stored as work content in the same way as tasks entered by hand.

Why we use your data

• To run the Service: creating your account, signing you in, showing you the projects you are allowed to see, sending sign-in links and invitations, and keeping the activity history.
• To keep the Service safe: rate-limiting sign-in attempts, detecting misuse and investigating security incidents.
• To support you: answering your questions and fixing problems.
• To improve the Service: understanding what breaks and what to build next, using operational logs only.

We do not sell your data, we do not use it for advertising, and we do not show ads in TaskOS.

Google user data

TaskOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to sign you in and to show your name and picture to your teammates. We do not transfer it to third parties except as needed to provide the Service or as required by law, we do not use it for advertising, and we do not use it to train artificial intelligence or machine learning models. People do not read it except with your permission, for security purposes, or to comply with the law.

Who can see your data

• Your team: teammates can see your name, email address, picture and the work you contribute to projects they have access to. Private projects are visible only to their members and the workspace owner.
• Workspace administrators: the owner and admins can invite, change and remove members and see the activity history.
• Service providers: companies that process data only on our instructions to run the Service: Railway (application hosting and database), Google (sign-in) and Resend (delivery of sign-in and invitation emails).
• Authorities: we may disclose data where required by law, to respond to lawful requests, or to protect the rights and safety of our users and others.

International data transfers

The Service is hosted in the United States, so your data may be processed outside your country. Where required, we rely on appropriate safeguards such as standard contractual clauses.

Your rights and choices

• Access and copies: you can ask for a copy of your personal data.
• Correction and deletion: you can ask us to correct or delete your data, or to restrict how we use it.
• Withdraw consent: you can stop using Google Sign-In at any time and revoke TaskOS's access from your Google account permissions.
• Leaving a team: a workspace administrator can remove you, which ends your sessions and API tokens immediately.

Email dpo@supergaming.com to exercise these rights. We respond within a reasonable time. If you are not satisfied, you can contact legal@supergaming.com or your local data protection authority.

How we protect your data

We use administrative, technical and physical safeguards, including encryption in transit (HTTPS), the infrastructure security of our hosting provider, hashed session and sign-in tokens, single-use sign-in links that expire after 15 minutes, and per-project access controls.

How long we keep your data

We keep your data while your team's workspace is active or as needed to provide the Service. Sessions expire after 30 days. When a member is removed, their account is disabled and the history of their contributions stays with the team's work. We delete or de-identify data when it is no longer needed, except where we must keep it to comply with the law, resolve disputes or enforce our agreements.

Children

TaskOS is a workplace tool and is not directed at children. We do not knowingly collect personal data from anyone under 13, and we delete such data if we learn of it.

Changes to this policy

We may update this policy. If we make material changes, we will update the date above and, where appropriate, tell you in the Service or by email.

Contact us

Questions about this policy or your data: dpo@supergaming.com.