Privacy policy

The distinction matters.For example, if your employer uses Tasklic to manage employee records, your employer may determine what employee information is entered into Tasklic and why it is used. Tasklic provides the technology to store and process that information according to the customer's instructions and applicable agreements.If you are an employee of a Tasklic customer and have questions about why your employer collected your information, what information your employer has entered into Tasklic, or how your employer uses it, you should generally contact your employer or organization's administrator first.For privacy questions concerning Tasklic itself, contact:Tasklic LLCPrivacy & LegalEmail: Legal@tasklic.comFor general support:Support@tasklic.com

We collect information that is reasonably necessary to create accounts, provide our services, maintain security, process transactions, communicate with customers, and comply with applicable law.The information we collect depends on how you interact with Tasklic.2.1 Account InformationWhen you create or use a Tasklic account, we may collect:Full nameBusiness nameJob titleBusiness email addressPersonal email address where providedTelephone numberUsernameAccount credentialsCompany addressBilling addressTime zoneProfile informationAccount preferencesAuthentication information

If your organization subscribes to Tasklic, we may collect information about the organization, including:Legal business nameBusiness contact informationCompany sizeIndustryBilling informationSubscription informationOrganization administratorsAccount configurationService usageCustomer support history

Tasklic provides HR and workforce management functionality.Customers may choose to store information such as:Employee nameEmployee identification numberJob titleDepartmentEmployment statusWork locationWork scheduleManagerStart dateCompensation informationPayroll informationTax-related informationAttendance recordsTime recordsLeave recordsPerformance informationDocumentsEmergency contact informationEmployee communicationsTraining informationElectronic signaturesOther information configured by the customerBenefits-related informationThe exact information collected depends on which Tasklic features a customer enables.

Depending on the services used, Tasklic or its payment service providers may process:Billing contact informationSubscription informationInvoice informationPayment statusTransaction identifiersPayment method informationLimited payment-card informationWhere payment processing is provided by a third-party payment processor, payment information may be collected and processed directly by that provider under its own privacy practices.Tasklic does not need to store complete payment-card information when the payment processor can securely process the transaction without exposing the full card number to Tasklic.

Customers may upload documents to Tasklic, including:ContractsEmployee documentsPoliciesInvoicesReceiptsFormsSigned documentsIdentification documentsHR documentsPayroll-related documentsBusiness recordsOther filesThe content of these documents may contain personal or confidential information.Customers are responsible for determining whether they have an appropriate legal basis and authorization to upload such information to Tasklic.

When you use Tasklic, we automatically collect certain technical and usage information.This helps us operate the platform, troubleshoot problems, detect abuse, protect accounts, and improve reliability.

We may collect: IP addressBrowser typeOperating systemDevice typeDevice identifiersScreen characteristicsLanguage preferencesTime zoneReferring URLApproximate location derived from IP addressNetwork informationApplication versionSession information

Card numbers are tokenised and never stored in our own systems in readable form. Personal data is encrypted We may record information about how the service is used, including:Login eventsLogout eventsPages or features accessedActions performedAccount settings changedFiles uploaded or accessedTasks created or modifiedAdministrative actionsAPI requestsError eventsSecurity eventsFeature usageSession information rest and in transit. Production access requires hardware-key multi-factor authentication and every access is logged.

We test against an independent penetration test at least annually and fix what it finds.

Tasklic may maintain audit logs showing actions performed within an organization.For example, an audit log may record that an administrator:Created an employeeModified an employee recordChanged a permissionAccessed a documentExported informationChanged a payroll settingCreated or deleted a userChanged an account configurationAudit logs help organizations investigate unauthorized activity and maintain accountability.

Tasklic may use cookies, local storage, pixels, SDKs, and similar technologies to:Keep users signed inMaintain sessionsRemember preferencesProvide security functionalityMeasure service performanceUnderstand product usageDiagnose technical problemsImprove the user experienceWhere legally required, we provide appropriate choices regarding non-essential cookies and similar technologies.

We use personal information only for legitimate business and service purposes consistent with this Privacy Policy.These purposes may include:

We use information to:Create and manage accountsAuthenticate usersProvide HR functionalityProvide payroll functionalityManage employeesManage projects and tasksProvide document storageProvide electronic signaturesProcess invoices and expensesProvide attendance and leave managementProvide asset managementProvide ticketing functionalityProvide job managementProvide integrationsProvide customer support

We use technical and account information to:Detect suspicious activityPrevent unauthorized accessProtect accountsDetect malwareDetect automated attacksPrevent abuseInvestigate security incidentsMaintain audit trailsEnforce access controlsProtect the integrity of the platform

We may use contact information to send:Account notificationsSecurity alertsPassword reset messagesBilling noticesService announcementsSupport responsesProduct updatesLegal noticesChanges to our servicesChanges to our agreements or policiesSome communications are essential to operating your account and cannot be unsubscribed from while the account remains active.

We may analyze aggregated or appropriately de-identified information to understand:Platform performanceFeature adoptionReliabilityProduct usabilityError patternsSystem capacityPerformance bottlenecksGeneral product trendsWe do not use customer HR records to create advertising profiles.

We may process information when necessary to:Comply with applicable lawRespond to valid legal requestsProtect our rightsEnforce our agreementsInvestigate fraudPrevent abuseResolve disputesProtect users and the publicRespond to government requests where legally required

Tasklic may use automated systems for operational and security purposes.For example, automated systems may help identify:Suspicious login activityUnusual account activityPotential security threatsAbuseMalicious trafficSystem anomaliesTechnical errorsThese systems are intended primarily to protect the platform and its users.Tasklic does not intend to make significant employment decisions about an individual solely through automated processing based on information stored in Tasklic.However, customers may configure their own workflows, rules, automations, or integrations that affect how information is processed.If you believe an automated Tasklic process has produced an inaccurate or materially harmful result, contact us at Legal@tasklic.com and explain the issue. We will review the matter as appropriate.Where applicable law provides additional rights concerning automated decision-making or profiling, those rights will apply.

Tasklic does not sell personal information to data brokers.We may disclose information to the following categories of recipients when necessary to operate the service or fulfill a legitimate purpose.

If you use Tasklic through an organization, administrators and authorized users within that organization may be able to access information according to the organization's configuration and permissions.For example, an employer may be able to access:Employee profilesAttendanceLeavePayroll informationDocumentsTasksProjectsReportsAudit information

We may use carefully selected service providers to help operate Tasklic, including providers supporting:Cloud infrastructureHostingDatabasesStorageEmail deliverySMSAuthenticationPayment processingCustomer supportMonitoringSecurityAnalyticsBackupDocument processingElectronic signaturesCommunicationsError monitoringThese providers may access personal information only as necessary to provide services to Tasklic and are expected to maintain appropriate safeguards.

Tasklic may allow customers to connect third-party services such as:Cloud storage providersCommunication platformsPayment providersCalendar systemsEmail systemsIdentity providersBusiness applicationsWhen a customer enables an integration, information may be transferred to the third-party service according to the customer's instructions and the third party's terms and privacy policy.

We may disclose information where reasonably necessary to:Comply with a subpoena, court order, or other legal processComply with applicable lawRespond to lawful government requestsProtect the rights or property of TasklicProtect usersInvestigate fraud or abuseAddress security threatsPrevent imminent harmWe will generally limit such disclosures to what is reasonably necessary.

If Tasklic is involved in:A mergerAcquisitionFinancingReorganizationSale of assetsBankruptcyCorporate restructuringpersonal information may be transferred as part of that transaction, subject to applicable law.

We retain information for as long as reasonably necessary for the purposes described in this Privacy Policy.The retention period depends on the type of information and why it was collected.Factors may include:Whether your account remains activeThe customer's contractual requirementsLegal obligationsTax or accounting requirementsSecurity requirementsDispute resolutionFraud preventionEnforcement of agreementsBackup and disaster recovery requirementsLegitimate business needs

For information submitted by a Tasklic customer, retention may be determined by the customer's instructions and agreement with Tasklic.When a customer terminates its account, Tasklic may retain or delete customer data according to the applicable agreement, deletion procedures, backup policies, and legal requirements.

Deleted information may remain temporarily within encrypted or otherwise protected backups until those backups are overwritten or securely deleted according to our backup lifecycle.Backup copies are not ordinarily used for active business purposes except where necessary for restoration, security, legal, or continuity purposes.

We may retain certain information longer where required by law or where reasonably necessary to:Establish or defend legal claimsComply with legal obligationsResolve disputesPrevent fraudMaintain securityEnforce contractsWhen information is no longer reasonably necessary, we will delete it, anonymize it, or securely dispose of it in accordance with applicable requirements.

Depending on where you live and the circumstances in which Tasklic processes your information, you may have rights regarding your personal information.These rights may include:Right to KnowYou may have the right to request information about:What personal information we collectWhy we collect itCategories of informationCategories of recipientsRetention practicesSources of informationCertain information about how personal information is usedRight to AccessYou may request a copy of personal information that we maintain about you, subject to applicable law. Right to CorrectYou may ask us to correct inaccurate or incomplete personal information.If the information is controlled by your employer or another Tasklic customer, we may direct you to that organization. Right to DeleteYou may request deletion of personal information where applicable law gives you that right.Deletion may not be possible where we or our customer are legally required to retain the information or where an exception applies.Right to Data PortabilityWhere required by applicable law, you may request certain information in a portable format.Right to Object or Restrict ProcessingDepending on applicable law, you may have the right to object to or request restriction of certain processing activities.Right to Withdraw ConsentWhere processing is based on consent, you may withdraw that consent.Withdrawal does not affect processing that occurred before consent was withdrawn.Right to Opt Out of Certain UsesSome U.S. state privacy laws provide rights concerning:Sale of personal informationSharing for cross-context behavioral advertisingCertain profilingTargeted advertisingTasklic does not sell personal information to data brokers.If our practices change in a way that creates an applicable opt-out right, we will provide the legally required mechanism.Exercising Your RightsTo submit a privacy request, contact:Legal@tasklic.comPlease include enough information for us to understand and verify your request.We may need to verify your identity before fulfilling certain requests. This is a security measure designed to prevent unauthorized access to personal information.If you use Tasklic through an employer or organization, some requests may need to be directed to that organization because it controls the relevant information.We will respond within the timeframe required by applicable law.

We take the security of personal information seriously.Tasklic uses administrative, technical, and organizational safeguards designed to protect information against unauthorized access, alteration, disclosure, destruction, and misuse.Depending on the system and service involved, safeguards may include:Encryption in transitEncryption or other appropriate protection at restAuthentication controlsRole-based access controlsLeast-privilege principlesAccess loggingAudit trailsMonitoringSecurity alertsNetwork protectionsBackup and recovery proceduresVulnerability managementSecure development practicesAdministrative security controlsAccess to production systems is limited to authorized personnel and service providers who require access for legitimate business purposes.No internet-based service can guarantee absolute security.If you believe your Tasklic account or information has been compromised, contact us immediately at:Support@tasklic.comFor legal or privacy-related security concerns:Legal@tasklic.com

Tasklic may communicate with customers and users about products, services, features, events, educational resources, and other business-related information.Where required by applicable law, we will obtain consent before sending certain marketing communications.Marketing communications may include:Product announcementsNew featuresEducational contentProduct updatesPromotionsEventsIndustry informationYou can unsubscribe from promotional email communications by using the unsubscribe mechanism included in the message or by contacting us.Unsubscribing from marketing communications does not prevent us from sending essential service communications, including:Security alertsPassword resetsBilling noticesAccount notificationsTransactional communicationsService interruptionsLegal noticesPrivacy or Terms updatesWe do not sell personal information to advertisers or data brokers. We do not use employee HR information stored by customers to create advertising profiles.

We may update this Privacy Policy from time to time.Changes may be necessary because of:New products or featuresChanges to our technologyChanges to our businessChanges in applicable lawChanges to our data practicesSecurity improvementsCustomer requirementsWhen we make changes, we will update the Last Updated date at the top of this Privacy Policy.If a change materially affects how we use personal information, we may provide additional notice where required by law, including through the Tasklic platform, email, or other appropriate communication.Your continued use of Tasklic after an updated Privacy Policy becomes effective means the updated policy applies to your use of the service, subject to applicable law.

Tasklic customers may use the platform to manage information that may be considered sensitive under applicable privacy laws.Depending on the customer's configuration, this may include:Government identifiersFinancial informationPayroll informationCompensation informationEmployment recordsHealth or benefits informationBiometric informationAuthentication informationInformation relating to an employee's circumstancesTasklic does not require customers to provide sensitive information unless it is necessary for a feature they choose to use.Customers are responsible for ensuring that they have an appropriate legal basis, authorization, notices, and permissions before submitting sensitive personal information to Tasklic.Where sensitive information is processed on behalf of a customer, Tasklic will process it according to the applicable customer agreement and data processing terms.

Tasklic may use service providers and infrastructure located in countries other than the country in which you live.As a result, personal information may be processed or stored internationally.Where applicable law requires safeguards for international transfers, Tasklic will use legally recognized transfer mechanisms or other appropriate safeguards.Customers subject to specific data residency requirements should contact Tasklic before enabling services that require international processing.

Tasklic is a business software platform and is not directed to children under 13.We do not knowingly request personal information directly from children under 13 for the purpose of creating independent Tasklic accounts.If you believe a child under 13 has provided personal information directly to Tasklic without appropriate authorization, contact:Legal@tasklic.comWe will investigate the request and take appropriate action consistent with applicable law.Federal U.S. law provides specific protections for children's online information, including requirements that may apply to services directed to children or services with actual knowledge that they collect personal information from children under 13.

Tasklic may integrate with or rely on third-party services.Examples may include:Payment processorsCloud storage providersEmail providersSMS providersAuthentication providersAnalytics providersCommunication platformsElectronic signature servicesCloud infrastructure providersThese third parties may have their own privacy policies and terms.When you use a third-party integration, information may be exchanged between Tasklic and that service according to the configuration authorized by you or your organization.Tasklic is not responsible for the independent privacy practices of third-party services that are outside Tasklic's control.

If you are a California resident, you may have additional rights under California privacy laws, including rights to access, correct, delete, and obtain information about the categories of personal information collected and used by a business, subject to applicable exceptions.Depending on our activities and your circumstances, California law may also provide rights concerning the sale or sharing of personal information and certain uses of sensitive personal information.Tasklic does not sell personal information to data brokers.Where a customer uses Tasklic to process employee information on its behalf, the customer's obligations and relationship with the employee may affect how a request is handled.California residents may submit privacy requests to:Legal@tasklic.comWe will process requests according to applicable California law

If you are located in the European Economic Area, United Kingdom, Switzerland, or another jurisdiction with comprehensive data protection legislation, additional rights and protections may apply.Depending on the circumstances, Tasklic may process personal information based on:Performance of a contractCompliance with a legal obligationLegitimate interestsConsentProtection of vital interestsOther lawful bases recognized by applicable lawWhere Tasklic acts as a processor on behalf of a customer, the customer may determine the lawful basis for processing and remain responsible for providing appropriate privacy notices to individuals.Where Tasklic acts as a controller, you may have rights including access, correction, deletion, restriction, objection, portability, and withdrawal of consent, subject to applicable limitations.You may also have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.

Tasklic may enter into Data Processing Agreements ("DPAs") with business customers that require additional privacy and security commitments.A DPA may establish:Processing instructionsRoles and responsibilitiesSecurity obligationsConfidentiality requirementsSubprocessor requirementsData subject request proceduresIncident notification proceduresInternational transfer mechanismsData deletion or return proceduresWhere a signed DPA conflicts with this Privacy Policy regarding customer data processing, the applicable contractual terms may control.

For privacy requests, legal questions, data protection requests, or concerns regarding the handling of personal information:Tasklic LLCLegal & PrivacyEmail: Legal@tasklic.comFor technical support and account assistance:Tasklic SupportEmail: Support@tasklic.comWhen submitting a request, please provide:Your nameEmail address associated with your accountOrganization name, if applicableDescription of your requestAny information necessary to help us identify the relevant account or dataWe may request additional information to verify your identity before processing a request