TaskPrivacy Policy
Last updated: 2 October 2026
Taskano is a task tool: AI agents assign work to people, and people do it through a Telegram bot and a Mini App. This page describes exactly what the service stores, why, where it is kept and how to have it removed. It is written to be read, not to be skimmed past.
Who is responsible
The service is operated by the Taskano team, reachable at [email protected]. Questions about data, including deletion requests, go to the same address; see Support.
What we store
About a person
| Data | Why it is needed |
|---|---|
| Display name | So colleagues and agents can tell people apart in lists and cards. |
| Email address | Invitations and sign-in codes. Sign-in is by one-time code or with Google; we never store passwords. |
| Google account ID | If you sign in with Google: we keep the account identifier Google returns, so that only the same Google account can sign in to your Taskano account with that email. We receive your email and its verification status; we do not use your Google profile otherwise and get no access to your Google data. |
| Telegram user ID and chat ID | To deliver tasks in the bot and to authenticate the Mini App. |
| When you last opened the bot and the Mini App | So the owner and administrators of your company can see whether tasks reach you. Only the time of the last visit is kept, rounded to the hour; only owners and administrators of a company you have joined see it. |
| Language, country, time zone, working hours | Each person reads work in their own language, and deadlines are counted in their working days. |
| Role in a company | It decides what a person may see and do. |
About the work
Tasks and everything attached to them: title, the reason behind the task, what counts as done, due dates, status, notes people write, questions they ask, reasons they decline, time spent, links and files added to a task, and photos forwarded from work chats. Agents connected to an account also store their plans, decisions and proposals.
Technical records
An event log of what happened to each task (who took it, when it was submitted, when it was accepted) — this is how the product works, not analytics. Server logs contain request errors and timestamps. We do not use advertising trackers or third-party analytics on this site.
What we do not do
- We do not sell personal data and do not share it for advertising.
- We do not train AI models on your data.
- We do not read Telegram chats. The bot receives only messages addressed to it, and in work groups only what is explicitly forwarded to it.
- We do not request access to your Claude conversation history, memory or files.
Who else processes the data
The service uses a small number of providers, each for one purpose:
| Provider | What it receives | Purpose |
|---|---|---|
| Hetzner (Germany) | All service data | Servers and database hosting |
| Telegram | Messages the bot sends and receives | Delivery of tasks and replies |
| Anthropic | Text being translated; messages and images from work chats the bot was added to | Translating tasks and notes into each person's language; filing work-chat messages to the right tasks |
| Resend | Email address and letter body | Invitations and sign-in codes |
| Nothing from us; you sign in at Google, and Google returns your email and account ID | Optional sign-in with Google | |
| Cloudflare | Connection metadata | TLS and protection of the public endpoint |
Where the data is kept
The database and the application run on servers in Germany. Data leaves them only towards the providers listed above, and only the part each of them needs.
The Claude connector
When you connect Taskano to Claude, the connector acts within one account and only through the tools the connector declares. Access is granted by OAuth: you approve it, and you can revoke it at any time in Claude's connector settings — after that the tokens stop working. The connector does not read your conversations; it receives only what a tool call passes to it.
How long we keep it
- Work data — while the account exists.
- Sign-in codes — minutes; they are single use.
- Server logs — up to 30 days.
- Database backups — up to 30 days, after which they are overwritten.
Deleting data
A person removed from a company stops seeing its work immediately. To have an account and its personal data deleted, write to [email protected] from the address on the account; we do this within 30 days. Tasks that belong to a company remain with the company, with the person's name replaced — otherwise the company would lose its own history of work it paid for. Backups are overwritten on the schedule above.
Your rights
You can ask what data we hold about you, correct it, have it deleted, or receive a copy. Write to [email protected]. If you are in the EU or the UK, these rights are the ones granted to you by the GDPR.
Children
The service is for work and is not intended for people under 16.
Changes
If this policy changes in a way that affects what we collect or whom we share it with, the date at the top changes and account owners are notified by email before the change takes effect.