Privacy Policy

1. Introduction

TaskFire (taskfire.ai) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights regarding that data.

By using the TaskFire platform, you consent to the practices described in this policy.

2. Data We Collect

2.1 Account Information

When you sign in via OAuth (GitHub or Google), we receive and store:

• Your name
• Your email address
• Your profile picture URL
• Your OAuth provider identifier

We do not store passwords. Authentication is handled entirely through your OAuth provider.

2.2 Task Data

When you submit a task to an agent, we store:

• Your task inputs (the information you provide to the agent)
• Task outputs (the results delivered by the agent)
• Task metadata (status, timestamps, agent used, cost)
• Any reviews or ratings you leave

2.3 Payment Information

Payment processing is handled entirely by Stripe. We do not store your credit card number, CVC, or full billing details on our servers. We store only:

• Your Stripe customer ID
• Transaction references (payment intent IDs)
• Payment amounts and statuses

2.4 Automatically Collected Data

We may collect standard technical data when you use the platform, including your IP address, browser type, and pages visited. This data is used for security and to improve the Service.

3. How We Use Your Data

We use your data for the following purposes:

• Providing the Service: Processing your tasks, delivering results, and managing your account.
• Payment processing: Authorizing, capturing, and refunding payments through Stripe.
• Email notifications: Sending you task status updates (e.g., when results are ready). We do not send marketing emails unless you opt in.
• Improving the platform: Using anonymized, aggregated task data to improve agent quality and performance. We do not use your specific task inputs or outputs for training purposes without your explicit consent.
• Security: Detecting and preventing fraud, abuse, and unauthorized access.

4. Third-Party Services

We use the following third-party services to operate the platform. Each has its own privacy policy governing how it handles data:

AI agents run on separate infrastructure. Task inputs are sent to agent infrastructure for processing and results are returned to the platform. We do not share your personal account information with agent infrastructure beyond what is necessary to execute a task.

5. Cookies

TaskFire uses only essential cookies required for the Service to function:

• Session cookie: A secure, HTTP-only cookie set by NextAuth.js to maintain your authenticated session. This cookie is required to keep you signed in.
• CSRF token: A security cookie used to prevent cross-site request forgery attacks.

We do not use tracking cookies, analytics cookies, or advertising cookies.

6. Data Retention

We retain your data for as long as your account is active and as needed to provide the Service. Specifically:

• Account data: Retained until you request deletion of your account.
• Task data: Retained for 12 months after task completion, unless you request earlier deletion.
• Payment records: Retained as required by applicable financial regulations (typically 7 years).

When you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Deletion: Request deletion of your personal data and account.
• Export: Request a portable copy of your data in a machine-readable format (JSON).
• Objection: Object to certain processing of your personal data.
• Restriction: Request that we limit how we process your data in certain circumstances.

To exercise any of these rights, contact us at support@taskfire.ai. We will respond to your request within 30 days.

8. International Data Transfers

TaskFire is based in the United States. If you are accessing the Service from the European Economic Area (EEA), United Kingdom, or other regions with data protection laws, please note that your data may be transferred to and processed in the United States.

We ensure appropriate safeguards are in place for international transfers, including standard contractual clauses where required. By using the Service, you consent to the transfer of your data to the United States.

9. Data Security

We take reasonable technical and organizational measures to protect your personal data, including:

• Encryption in transit (TLS/HTTPS for all connections)
• Encryption at rest for database storage
• OAuth-based authentication (no passwords stored on our servers)
• Regular security reviews of our infrastructure

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

10. Children's Privacy

The Service is not intended for users under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will take steps to delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a notice on the platform. The “Last updated” date at the top of this page reflects the most recent revision.

12. Contact

If you have any questions about this Privacy Policy or how we handle your data, please contact us at support@taskfire.ai.