Privacy Policy

Information we handle

• Account and sign-in information: your email address and account identifier, plus profile information such as your name, picture, or phone number if you provide it or authorize an identity provider to share it. Our authentication provider handles sign-in credentials and sessions.
• Your Offtasks content: tasks and their titles, descriptions, dates, priorities, labels, completion and work status; notes and note-linked tasks; goals, outcomes, goal briefs, plans, acceptance criteria, dependencies, progress, results, and links; and the preferences and sync information you save. This content can include personal information you choose to enter.
• Connection and security information: account, app and record identifiers; authorization choices and permissions; access tokens used to verify a connection; action, revision and request identifiers; response snapshots; and timestamps. Hosting and security logs may include IP address, browser or device information, request URL, time, and response status.
• Support information: the name, email address, message, source and submission time you provide through our contact form.
• Public-site analytics, when configured: visits, selected link clicks and confirmed contact submissions. Analytics excludes form contents and the authentication and planner pages, uses no analytics cookies, and respects Do Not Track, Global Privacy Control and the opt-out below.

ChatGPT and other connected AI services

• Connecting is optional. After you authorize a connection, ChatGPT, Codex or another connected service sends Offtasks the tool calls and inputs it chooses for your request. Inputs can include search text, record identifiers, dates, task or goal content, plans, and requested changes. We receive those inputs, not your whole conversation automatically; the connected service may include information from your conversation in a tool call.
• Offtasks checks the connected account and permissions, then returns relevant account-owned data to the service. Depending on the tool, results can include account or project and record identifiers, task and note-task text, note titles, goal details, linked goal briefs, plans, progress, dates, statuses, revisions and timestamps. A list request can return multiple matching records from the connected account.
• With the access you approve, the service can read information and can create or change supported tasks, goals and plans when requested. Note-linked tasks are currently read-only through the integration. Setting a task date does not create a push reminder.
• OpenAI and any other connected service receive the tool inputs and outputs they process, and may retain them in a conversation or under their own policies and settings. Disconnecting Offtasks does not delete information already in those services.

OpenAI privacy policy

ChatGPT chat deletion and connected app data

How we use information

• Provide the Offtasks web and iOS apps, authenticate you, save and sync your information, and carry out the requests you make through an authorized integration.
• Remember your preferences and permissions, prevent duplicate changes, maintain an action history, secure accounts, diagnose failures, and prevent abuse.
• Respond to support and privacy requests and, when configured, measure use of the public website and improve its reliability.
• We do not sell personal data or use task content for advertising.

Who receives information

• Supabase provides authentication and database services; Vercel hosts the website; Google Cloud hosts the connected integration; and Etlyn's analytics service may process public-site events when enabled. These providers process information to operate and secure Offtasks.
• If you choose Google sign-in, Google processes that sign-in. If you connect ChatGPT or Codex, OpenAI receives the tool inputs and outputs described above. Another AI service you choose to connect would receive the information exchanged with it under that service's own terms.
• We may disclose information when required by law or to protect users and the service. Service providers may process information in the United States and other locations where they operate.

How long information is kept

• Your saved Offtasks content and preferences remain until you remove them or delete your Offtasks data. Some deleted notes and goals remain as sync records, and integration retry and action records can retain earlier response snapshots, until you delete your Offtasks data. There is currently no separate automatic expiry for those records.
• Connection permissions remain until you disconnect or delete your Offtasks data. The associated Offtasks authorization, retry and action records are retained until Offtasks data deletion; disconnecting alone does not erase that history.
• Scheduled Supabase database backups currently cover approximately seven days, so deleted information may remain in a backup during that period. Google Cloud's default integration-hosting log bucket currently retains logs for 30 days; required infrastructure audit logs are retained for 400 days. Other provider logs and exceptional security or legal records may follow different retention requirements.
• When public-site analytics is enabled, event records are scheduled for deletion after 400 days; processing delays and backups can extend their presence. The Offtasks application has no automatic expiry for support messages, which remain until manually deleted, including following a deletion request.
• Your shared Etlyn sign-in identity is separate from Offtasks data and remains after you delete Offtasks data. Information already sent to OpenAI or another connected service is retained according to that service's policies, your settings, and any applicable workspace rules.

Your controls and requests

• Edit or delete tasks and other content in Offtasks. To remove the Offtasks cloud data for a signed-in account, choose Delete Offtasks Data in the app. This removes Offtasks-owned planner, preference, authorization and integration-history records and signs the current device out; it does not delete your shared Etlyn sign-in identity or data already sent to another service.
• To stop future ChatGPT access, open your Offtasks account menu, find ChatGPT and select Disconnect. You can also manage the connection and delete conversations in ChatGPT. Disconnecting does not erase past conversations, backups, or Offtasks action history.
• Guest data is stored on your device until you remove it from that device. Deleting cloud data or signing out on one device does not automatically erase local data on every device.
• When public-site analytics is configured, use the preference below to opt out; the preference is not shown when analytics is unconfigured. Contact us through the support form to ask about access, correction, deletion, your shared Etlyn identity, or other privacy rights available to you.