1. Overview
This Privacy Policy explains how the sole proprietor operating TaskShiftLab (formal legal name to be added after legal review) ("TaskShiftLab"), a sole proprietorship, handles information in connection with the TaskShiftLab platform. Effective date: [Effective date — to be added after legal review]. This document is a working draft and does not constitute legal advice.
2. Information we process
Business information: company name, contact details, address, industry, branding assets, and configuration preferences.
Authentication information: email address, account identifiers, session metadata, role assignment, and sign-in timestamps. Passwords are managed by our authentication provider and are never stored in application tables.
Customer information submitted by our clients: names, phone numbers, email addresses, service addresses, job records, communication history, consent flags, and review content.
Usage and analytics information: pages viewed, actions taken, device and browser metadata, and error diagnostics.
3. How we use information
To provide the platform, authenticate users, enforce per-business data isolation, deliver automation and AI features, process payments, provide support, and improve reliability and security.
4. AI processing
Selected content — such as lead messages, job details, and review text — may be sent to our AI processing provider to generate summaries, sentiment analysis, classifications, and draft responses.
AI processing is scoped to the originating business. Data belonging to one business is never used as context for another business. AI outputs require human review before being relied upon.
5. Third-party service providers
Payments and subscription management: our payment processor. We never store card numbers or security codes.
Authentication, application security, and file storage: our cloud platform provider.
Operational records: our operational database provider.
Automation and workflow orchestration: our automation provider.
AI processing: our AI model provider.
Each provider processes information only as needed to deliver its portion of the service.
6. Data retention
Our final data-retention period has not yet been set and requires final determination and legal review. Until it is finalized, applicable data may be retained as necessary for legitimate business, contractual, accounting, security, dispute-resolution, legal, and compliance purposes, subject to the final policy and legal review.
Billing records are retained as required for tax and accounting purposes.
Billing failures do not result in deletion of business data; access may be restricted until the account is brought current.
7. Your rights
Depending on your jurisdiction you may have rights to access, correct, export, restrict, or delete personal information, and to object to certain processing. Requests can be sent to contact@taskshiftlab.com.
Where we process customer information on behalf of a client business, we act as a processor and will direct requests to that business.
8. Security
We use authenticated, server-side authorization for every request; per-business data isolation; row level security on application data; encrypted transport; scoped file storage; and audit logging of sensitive actions. No system is perfectly secure, and we cannot guarantee absolute security.
9. Contact
Privacy questions: contact@taskshiftlab.com, [Mailing address — to be added after legal review].