Data Protection

1. Roles and responsibilities

For workspace content you create — tasks, clients, staff records, timesheets, invoices and files — your organisation is the data controller and Lunava Digital Solutions FZCO acts as the data processor, processing that data only on your documented instructions. For account, billing and product-usage data, Lunava Digital Solutions FZCO acts as the data controller.

2. Data we process

Account data: names, email addresses, authentication identifiers and profile photos.
Workspace data: the records, documents and attachments your team stores in TasksPro.
Billing data: plan, seat counts and payment references handled by our payment providers.
Usage data: sign-in events, audit trails and product telemetry used to secure and improve the service.

3. Tenant isolation and security measures

Every workspace is a separate tenant. Row-level security is enforced in the database so a user can only ever read or write the workspace they are signed into. Attachments live in private storage with per-tenant access controls and short-lived signed URLs. Platform administration is restricted to verified platform admins and every administrative action is recorded in an audit log.

4. Sub-processors

We use a small set of vetted sub-processors to run the service:

Cloud hosting and database infrastructure for application and tenant data.
Payment providers (Stripe, PayPal) for subscription billing and customer payments.
Email delivery (Brevo) for transactional email such as invites, receipts and notifications.

Sub-processors are bound by data processing terms and may only process data to deliver their service to us.

5. International transfers

Data may be processed in regions outside your own. Where personal data is transferred internationally, we rely on appropriate safeguards such as contractual clauses with our sub-processors.

6. Retention and deletion

Workspace data is retained while your workspace is active. Workspace owners can delete records, files and entire workspaces at any time. When a workspace is deleted, its data is removed from production systems and then from backups on a rolling schedule.

7. Your rights

Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. Workspace members should contact their workspace owner first; account holders can contact us directly at support@taskspro.ai.

8. Breach notification

If we confirm a personal data breach affecting your workspace, we will notify the workspace owner without undue delay and provide the information needed to meet your own obligations.

9. Data processing agreement

Customers that need a signed data processing agreement (DPA) can request one from support@taskspro.ai. See also our Terms of Service, Privacy Policy and Cookie Policy.