Privacy Policy – TaskWhip

TaskWhip, LLC ("we", "us", or "our") respects your privacy. This Privacy Policy describes how we collect, use, and protect your information when you use the TaskWhip Chrome Extension and related services.

1. Information We Collect

Authentication Data

Google OAuth: When you sign in with Google, we receive your email address, name, and profile picture. We do not access Gmail, Google Drive, or other Google services.
Email/Password: If you register with email, we store your email and a securely hashed password.

Integration Data

Asana OAuth Tokens: When you connect TaskWhip to Asana, we securely store encrypted access tokens to enable task creation in your workspace.
Workspace Information: We store your selected Asana workspace name to display connection status.

Voice/Audio Data

Audio Recordings: When you click the record button, audio is captured and transmitted securely (HTTPS) to our backend server.
Processing: Audio is sent to OpenAI's Whisper API for transcription.
Retention: Audio is processed in real-time and immediately deleted after transcription. We do not store voice recordings.

Local Storage

Encrypted Tokens: Authentication tokens are encrypted (AES-256-GCM) before being stored locally in your browser using Chrome's storage API.
Preferences: Your selected default projects and settings are stored locally on your device.

2. How We Use Information

To authenticate you and maintain your session
To connect with Asana and create tasks on your behalf
To transcribe voice recordings into task details using AI
To provide and improve our services

3. Third-Party Services

OpenAI (Whisper API)

Data Shared: Audio recordings for speech-to-text transcription
Purpose: Convert your voice commands into text
Retention: Subject to OpenAI's data usage policies

Asana API

Data Shared: Task titles, descriptions, due dates, and project assignments
Purpose: Create tasks in your Asana workspace
Governed by: Asana's Privacy Policy

Google OAuth

Data Shared: Authentication tokens during sign-in
Purpose: User authentication only
We Access: Email address and basic profile information only

Stripe (Future)

Payment processing will be handled directly by Stripe
Billing information is not stored on our servers

4. What We Don't Do

We do not sell or share your personal data with third parties for advertising
We do not store voice recordings after transcription
We do not access your Asana data beyond task creation
We do not track your browsing activity outside the extension
We do not use your data to train AI models

5. Data Security

We implement industry-standard security measures:

Encryption in Transit: All data transmitted via HTTPS/TLS 1.3
Encryption at Rest: Tokens encrypted with AES-256-GCM before local storage
OAuth Security: PKCE (Proof Key for Code Exchange) implemented for all OAuth flows
Rate Limiting: Protection against abuse on all API endpoints
No Server-Side Token Storage: Your Asana access tokens are stored encrypted locally, not on our servers

6. Data Retention

Data Type	Retention Period
Audio recordings	Deleted immediately after transcription
Authentication tokens	Until you sign out or revoke access
Account information	Until you delete your account
Local preferences	Until you uninstall the extension

7. Your Rights

You can:

Disconnect Asana: Remove the integration anytime from the extension settings
Sign Out: Clear all stored authentication tokens
Delete Account: Remove all your data from our systems
Revoke Access: Remove TaskWhip from Asana's authorized apps
Uninstall: Remove the extension to delete all local data

8. Children's Privacy

TaskWhip is not intended for users under the age of 13. We do not knowingly collect information from children.

9. Contact Us

For privacy questions or data requests, contact us at:

Email: admin@taskwhip.com

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last Updated" date. Continued use of TaskWhip after changes constitutes acceptance of the updated policy.