Privacy Policy

This Privacy Policy explains how BizReflex LLC-FZ (“we”, “us”) collects, uses, shares, and protects your personal data when you use TaskNeuron.ai (the “Service”). We are based in Dubai, United Arab Emirates, and offer the Service to users around the world. We aim to comply with applicable data-protection laws wherever you are, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”), the EU/EEA and UK General Data Protection Regulation (“GDPR”), and the California Consumer Privacy Act as amended (“CCPA/CPRA”). By creating an account you agree to the practices described here.

1. Data we collect

We collect only what we need to run the Service:

• Account data — your name, email address, and a securely hashed password. We never store your password in plain text.
• Profile data — anything you choose to add (e.g. profession, company, links), used to personalize the Service.
• Content you submit — goals, project plans, tasks, notes, and any files you upload for AI processing.
• Approximate location — country, region, city, and timezone derived from your IP address by our network provider (Cloudflare). We do not collect GPS/precise location.
• Technical & security data — IP address, browser/user-agent, and session activity, used for authentication, rate limiting, abuse prevention, and audit logs.
• Usage data — feature usage and AI request counts, used to enforce quotas and improve the Service.

2. How we use your data

• To provide, maintain, and secure your account and the Service.
• To generate AI plans and other outputs from the content you submit.
• To prevent fraud, abuse, and unauthorized access (e.g. bot checks, rate limits).
• To send essential account emails (verification, password reset, security notices).
• To comply with legal obligations and enforce our Terms.

We do not sell your personal data, we do not “share” it for cross-context behavioral advertising, and we do not use it for third-party advertising.

3. Legal bases for processing (EEA/UK)

Where the GDPR applies, we rely on the following legal bases: performance of a contract (to provide the Service you request); legitimate interests (to secure, maintain, and improve the Service and prevent abuse, balanced against your rights); consent (where we ask for it, such as optional communications — you may withdraw it at any time); and legal obligation (to comply with applicable law).

4. Service providers we share with

We share data with vetted processors only as needed to operate the Service, under contractual confidentiality and security obligations:

• Cloudflare — CDN, security, and approximate geolocation from your IP.
• Hosting & database (Render / PostgreSQL) — stores your account and content.
• AI providers (e.g. OpenAI, Anthropic, or a configured provider) — process the content you submit to generate output. Your inputs are sent to the provider to fulfill your request.
• Email delivery (Resend) — sends transactional emails.
• Error monitoring (Sentry, optional) — diagnostic data to fix problems.

We may also disclose data if required by law, to protect our rights, or in connection with a merger or acquisition (with notice where required).

5. Cookies

We use only essential cookies (session, security, and referral). See our Cookie Policy for details. We do not use advertising or cross-site tracking cookies.

6. Data retention

We keep your account data while your account is active. Content you delete is moved to trash and purged after a retention window; uploaded AI attachments are retained per your plan settings. When you delete your account, we delete or anonymize your personal data except where we must retain it for legal, security, or audit purposes.

7. Security

We protect your data with industry-standard measures, including password hashing, encrypted secrets, HTTPS in transit, scoped sessions bound to their origin, bot protection, and rate limiting. No system is perfectly secure, but we work to keep your data safe and to notify you of material breaches as required by law.

8. Your rights

Subject to applicable law, you may have the right to access, correct, delete, export (port), or restrict the processing of your personal data, and to object to certain processing. Where we rely on consent, you may withdraw it at any time without affecting prior processing. You can edit your profile and delete your account from your settings, or contact us to exercise any of these rights. We will not discriminate against you for exercising them.

If you are in the EEA or UK and believe we have not handled your data lawfully, you have the right to lodge a complaint with your local data-protection supervisory authority.

9. California privacy rights (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access to or deletion of it, to correct it, and to not be discriminated against for exercising these rights. We do not sell your personal information and do not share it for cross-context behavioral advertising. You may exercise your rights, including via an authorized agent, by contacting us at the address below.

10. Children

The Service is not directed to children under 16 (or the minimum age in your jurisdiction), and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

11. International data transfers

Because we operate globally, your data may be processed in countries other than your own, including countries that may not provide the same level of data protection as your home country. Where required, we rely on appropriate safeguards for such transfers — such as the European Commission’s Standard Contractual Clauses (or equivalent mechanisms) — to protect your data regardless of where it is processed.

12. Google user data and connected integrations

If you choose to connect Google Calendar, TaskNeuron.ai requests the Google calendar.events permission for the single purpose of creating, updating, and deleting calendar events that mirror your due-dated tasks. We only create and modify events that TaskNeuron.ai itself created; we do not read, modify, or delete your other calendar entries.

• What we access — the ability to manage events on the calendar you choose (your primary calendar by default).
• How we use it — solely to keep your calendar in sync with your TaskNeuron due dates. We do not use Google data to train AI models.
• Storage — the OAuth access and refresh tokens Google issues are stored encrypted at rest and are never sold, rented, or shared, and never used for advertising.
• Your control — you can disconnect at any time in Settings, which revokes our access at Google and deletes the tokens and the task-to-event mappings we stored.

TaskNeuron.ai’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

13. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by a new version and effective date, and we may ask you to re-accept at sign-in.

14. Contact

Questions or requests about your data? Email us at [email protected] and we will respond within the time required by applicable law.