Your privacy matters to us

1. What we collect

When you create an account and use TaskNest, we collect the following information:

• Account details — your name, email address, and a hashed (never plain-text) password.
• Workspace data — projects, tasks, deadlines, assignments, and notes you create inside TaskNest.
• Usage data — pages visited, features used, and session timestamps. This is used to improve the product.
• Device info — browser type, operating system, and IP address for security and fraud prevention.

We do not collect any payment or billing information directly. If we add paid plans in the future, payments will be handled by a certified third-party processor.

2. How we use your data

The data we collect is used only to:

• Provide and operate the TaskNest service
• Send email verification and password reset messages
• Respond to support requests and bug reports
• Analyze aggregate usage patterns to improve product features
• Detect and prevent fraud or security incidents

We will never use your data to serve third-party advertisements.

3. Data storage and security

Your data is stored in a managed cloud database with the following protections in place:

• Passwords are hashed using bcrypt before storage — we cannot see your password.
• Data is transmitted over HTTPS / TLS at all times.
• Database access is restricted to the application server only.
• Authentication tokens expire after 7 days and are invalidated on logout.

No system is 100% secure. While we take reasonable precautions, we cannot guarantee absolute security of your information. We will notify affected users promptly in the event of a data breach.

4. Cookies and local storage

TaskNest uses browser local storage (not traditional cookies) to keep you signed in and remember your preferences. Specifically:

• tasknest_token — your session JWT, stored locally so you stay logged in.
• tasknest_user — your email address, used to display your profile.
• tn_sidebar — sidebar collapsed/expanded preference.

These values are stored only in your own browser and are never sent to third-party services. Clearing your browser data will sign you out.

5. We do not sell your data

We do not sell, rent, or share your personal information with any third party for marketing or commercial purposes. Period.

We may share anonymised, aggregated statistics (e.g. "X% of users create tasks on mobile") but these never identify you individually.

6. Third-party services

TaskNest relies on a small number of trusted third-party services to operate:

• Railway — our API server hosting provider.
• Firebase / Google — frontend hosting and optional Google sign-in.
• MongoDB Atlas — database hosting with encryption at rest.

Each of these providers has their own privacy policy and processes data under strict data-processing agreements.

7. Your rights

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — request full deletion of your account and data.
• Portability — receive your data in a portable format.

To exercise any of these rights, email us at support@tasknest.in. We respond within 7 business days.

8. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for significant changes, notify you by email. Continued use of TaskNest after changes are posted constitutes your acceptance of the updated policy.

9. Contact us

If you have any questions, concerns, or requests related to this Privacy Policy, please reach out:

Email: support@tasknest.in
Contact page: tasknest-8fcfe.web.app/contact.html