1. Purpose and scope

This Data Policy explains how TicTask handles data generated by the Service, including technical, application, and user-provided data. It complements our Privacy Policy and describes operational practices.

2. Types of data processed

We process account data, project/task metadata, attachments you upload, logs and telemetry, and aggregated usage metrics. Sensitive personal data should not be uploaded unless explicitly requested.

3. Purposes of processing

Data is processed to operate the Service, provide features (search, notifications, collaboration), improve reliability/performance, and for security and fraud prevention.

4. Data minimization & retention

We aim to collect only data necessary for the stated purposes. Retention periods vary by data type; inactive accounts and associated data may be deleted after a reasonable retention period or upon user request, subject to backups and legal obligations.

5. Backups and disaster recovery

We keep encrypted backups and take standard disaster-recovery measures. Backups may contain personal data and will be retained according to our backup lifecycle; deletion from backups may take longer.

6. Access control and security

Access to production data is limited to authorized personnel on a least-privilege basis and logged. We use industry-standard encryption at rest and in transit and perform regular security assessments.

7. Subprocessors and vendors

We use subprocessors (e.g., cloud hosting, analytics, payment processors). A current list of subprocessors is available on request; subprocessors are contractually bound to protect data.

8. Data subject requests & portability

Users can request access, correction, deletion, or export of their data. Exported data is provided in common machine-readable formats (CSV, JSON) where technically feasible.

9. Law enforcement and legal requests

We may disclose data in response to lawful requests by public authorities. We evaluate requests carefully and will notify users where permitted by law.

10. Contact

For data-related inquiries or to request exports/removals, contact our support or legal team through the in-app support flow or by email.