How Task Board Protects Your Data
Last updated: 17 January 2026
1 Who we are
Task Board™ is provided by The Code Guy Ltd ("we", "us", "our").
We're the data controller for personal data collected through:
- Task Board marketing website (task-board.io)
- Task Board application (task-board.app)
Contact: support@task-board.io
2 What data we collect
Data you give us
- Account information: name, email address, password (hashed)
- Billing information: company name, billing address (payment card details are handled by Stripe — we don't see or store them)
- Workspace content: tasks, projects, time entries, comments, and any other data you add
Data we collect automatically
- Usage data: pages visited, features used, actions taken
- Device data: browser type, operating system, screen size
- Log data: IP address, access times, referring URLs
Data from third parties
- Stripe: payment status and subscription information
3 How we use your data
We use your data to:
| Purpose | Legal basis (UK GDPR) |
|---|---|
| Provide and run the service | Contract |
| Process payments | Contract |
| Send service emails (e.g. password resets, billing) | Contract |
| Send product updates and tips (you can opt out) | Legitimate interest |
| Analyse usage to improve the product | Legitimate interest |
| Respond to support requests | Contract / Legitimate interest |
| Comply with legal obligations | Legal obligation |
| Protect against fraud and abuse | Legitimate interest |
We don't sell your data. We don't use your task content to train AI models or for advertising.
4 Who we share data with
We only share data with third parties who help us run the service:
| Provider | Purpose | Location | Safeguards |
|---|---|---|---|
| Microsoft Azure | Hosting and infrastructure | UK / EU | UK GDPR adequacy, SCCs |
| Stripe | Payment processing | USA | UK Extension to DPF, SCCs |
| Google Analytics | Website analytics | USA | UK Extension to DPF, SCCs |
We may also share data if required by law or to protect our rights.
5 International transfers
Some of our processors are based outside the UK. When we transfer data internationally, we ensure appropriate safeguards are in place:
- UK Extension to the EU-US Data Privacy Framework (for US providers certified under the framework)
- Standard Contractual Clauses (SCCs) approved by the ICO
- Adequacy decisions where applicable
6 How long we keep data
| Data type | Retention period |
|---|---|
| Account and workspace data | Until you delete your account, then 30 days |
| Billing records | 7 years (legal requirement) |
| Server logs | 90 days |
| Analytics data | 26 months (Google Analytics default) |
7 Your rights
Under UK GDPR, you have the right to:
- Access your data
- Correct inaccurate data
- Delete your data ("right to be forgotten")
- Export your data (portability)
- Object to processing based on legitimate interest
- Restrict processing in certain circumstances
- Withdraw consent where processing is based on consent
To exercise any of these rights, email us at support@task-board.io. We'll respond within 30 days.
8 Security
We take reasonable measures to protect your data, including:
- Encryption in transit (HTTPS/TLS)
- Encryption at rest
- Access controls and authentication
- Regular security reviews
No system is 100% secure. If we discover a breach affecting your data, we'll notify you and the ICO as required by law.
9 Children
Task Board is not intended for anyone under 16. We don't knowingly collect data from children. If you believe a child has provided us data, please contact us and we'll delete it.
10 Changes to this policy
We may update this Privacy Policy from time to time. We'll post the updated version here with a new "last updated" date. For significant changes, we'll notify you by email.
11 Contact
Questions or requests?
Email us at support@task-board.io