Privacy Policy
This Privacy Policy explains how Task North AG (“TaskNorth”, “we”, “us”) collects, uses, and protects personal data when you use TaskNorth at tasknorth.xyz (the “Service”). The data controller is Task North AG, a company incorporated in Switzerland. For any privacy question or request, contact us at contact@tasknorth.xyz.
What we collect
Information you provide:
- the objective you describe and your answers to the follow-up questions used to tailor your AI Blueprint;
- your email address, if you create an account or ask us to email you a Blueprint;
- optional feedback you submit about a Blueprint.
Information collected automatically:
- a signed first-party identifier stored in the
tn_anoncookie, used to count your free routes and prevent abuse; - an account session identifier in the
tn_acctcookie once you sign in; - a privacy-preserving signal derived from your IP address, used only to detect and limit abuse — not to identify you;
- basic, aggregate traffic measurements (page views, referrer, country, device type) via Cloudflare Web Analytics, which is cookieless and does not fingerprint or track you across sites.
Payment information: card and billing details are collected and processed directly by Stripe. We do not receive or store your full card number. We keep a record of credit purchases and balances (amounts, timestamps, and a payment reference).
How we use your data
- to interpret your objective and generate your AI Blueprint;
- to enforce free-usage limits, secure the Service, and prevent abuse;
- to provide accounts, saved Blueprints, and email delivery;
- to process payments and maintain your credit balance;
- to measure aggregate traffic and improve the Service;
- to comply with legal obligations.
Legal bases
We are established in Switzerland and process personal data under the Swiss Federal Act on Data Protection (revFADP); where the EU/EEA GDPR applies to visitors, we also comply with it. We rely on: performance of a contract (providing the Service you request); our legitimate interests (securing the Service, preventing abuse, and improving the product); your consent (where required, e.g. for any optional marketing); and compliance with legal obligations.
AI processing
To generate a Blueprint, your objective and question answers are sent to our AI provider, OpenAI, acting as our processor. Under OpenAI’s API terms, content submitted through the API is not used to train OpenAI’s models by default. We do not use your content to train our own models. Please avoid including sensitive personal data in your objective; where you indicate confidentiality, we adjust which tools we recommend.
Who we share data with
We do not sell your personal data. We share it only with service providers who process it on our behalf under appropriate agreements:
- OpenAI — AI generation of Blueprints;
- Stripe — payment processing;
- Google / Firebase and Google Cloud — hosting, authentication, and database;
- Cloudflare — cookieless analytics and network security.
If we later enable transactional email (for example, to email you a Blueprint), we will add our email provider to this list before doing so.
We may also disclose data where required by law or to protect our rights and users.
International transfers
Your data may be processed in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and the Swiss addendum), together with supplementary technical and organizational measures.
How long we keep it
We retain personal data only as long as necessary for the purposes above. Specifically: your objectives and generated Blueprints are kept for up to 12 months; account data is kept until you delete your account; and abuse-prevention signals are kept for up to 90 days. After these periods the data is deleted. You can also delete your data at any time (see your rights below); when you do, it is erased rather than merely hidden.
Your rights
Subject to applicable law, you have the right to access, correct, delete, and export your data, to object to or restrict certain processing, and to withdraw consent. TaskNorth provides in-product controls to export and delete your data — available to anonymous users by their signed identifier and to registered users through their account. You may also contact us at contact@tasknorth.xyz. If you are in the EU/EEA, UK, or Switzerland, you may lodge a complaint with your data protection supervisory authority.
Cookies
We use only the cookies needed to run the Service:
tn_anon— signed anonymous identifier for free-route counting and abuse prevention (up to 12 months);tn_acct— account session (up to 30 days);- Stripe and Firebase may set cookies during payment and sign-in.
We use no advertising or cross-site tracking cookies. Cloudflare Web Analytics operates without cookies.
Children
The Service is not directed to children under 16, and we do not knowingly collect their personal data.
Security
We protect data with encryption in transit, access controls, and least-privilege handling of credentials. No system is perfectly secure, but we work to safeguard your information.
Changes
We may update this policy; we will post the revised version here with a new effective date.
Contact
Task North AG, Switzerland. Email: contact@tasknorth.xyz. We have not appointed a statutory Data Protection Officer; please direct all privacy matters to that address. Should we be required to designate an EU/EEA representative under Article 27 GDPR, we will identify them here.