This Privacy Policy (the "Policy") sets out how the personal data of users of the Taska service (the "Service") is processed and protected. It is drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other regulations of the Russian Federation.
By using the Service, the User confirms that they have read this Policy and consent to the processing of their personal data on the terms set out herein. If the User does not agree with the Policy, they must stop using the Service.
1. General provisions
This Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", as amended by Federal Law No. 420-FZ of 30 November 2024 (in force since 30 May 2025), and with other regulations of the Russian Federation concerning the processing and protection of personal data.
The personal-data operator is the person whose details are set out in the "Operator details" section (the "Operator").
The Policy applies to all personal data the Operator may obtain about the User while the User uses the Service. Personal data is processed on a lawful and fair basis.
2. Key terms
- "Personal data" — any information relating, directly or indirectly, to an identified or identifiable natural person (the data subject).
- "Processing of personal data" — any action or set of actions performed on personal data, whether or not by automated means (collection, recording, storage, use, transfer, anonymisation, blocking, deletion, etc.).
- "Operator" — the person who independently organises and carries out the processing of personal data and determines the purposes and scope of the data processed.
- "User" — a natural person who uses the Service.
- "Processor" means a person processing personal data on behalf of the Operator (Part 3 of Article 6 of Federal Law No. 152-FZ).
- "Cross-border transfer of personal data" means a transfer of personal data to the territory of a foreign state, to a foreign state authority, a foreign individual or a foreign legal entity.
- "TaskAI" means the AI assistant built into the Service that performs the User's requests to their data in the Service using language models.
3. What data is processed
The Operator may process the following personal data:
- data provided on registration and while using the Service: email address, name (nickname), password in encrypted form, language and interface settings;
- Content created by the User in the Service (spaces, projects, tasks, comments, files), to the extent required to provide the services;
- payment information required to arrange a subscription and issue a receipt (bank-card details are not stored by the Operator and are processed by payment providers);
- technical data automatically transmitted by the User's device: IP address, browser and operating-system information, the date and time of access, cookie data and similar technologies;
- data about actions in the Service required to operate it, ensure its security and improve its quality.
- the content of the User's requests to TaskAI, the history of dialogues with it and information on TaskAI sparks usage;
- Service data that TaskAI obtains to fulfil the User's request (titles and descriptions of tasks, projects and articles, names and email addresses of space members, assignees and service desk requesters) — only within that User's access rights.
4. Purposes of processing
Personal data is processed for the following purposes:
- registration, identification and authentication of the User;
- providing access to the Service and its functionality;
- fulfilling the User's requests to the TaskAI assistant and accounting for TaskAI sparks usage;
- arranging and maintaining a subscription, making settlements and issuing receipts;
- communicating with the User, sending technical and service notifications, handling enquiries;
- ensuring the security of the Service and preventing fraud and abuse;
- improving the Service, analysing usage and producing anonymised statistics;
- complying with the requirements of the law of the Russian Federation.
5. Legal grounds for processing
Personal data is processed on the basis of the User's consent, the need to perform the contract (the Terms of Service) to which the User is a party, and in order to fulfil obligations imposed on the Operator by the law of the Russian Federation.
Data required to fulfil a request to TaskAI is processed at the User's initiative to perform the contract with the User (clause 5 of Part 1 of Article 6 of Federal Law No. 152-FZ). Data of other persons (space members, assignees, service desk requesters) is processed in the same scope and for the same purposes for which it is already processed in the Service and available to the User, on the basis of clauses 5 and 7 of Part 1 of Article 6 of that law.
7. Transfer of data to third parties
The Operator does not sell personal data. Data is transferred to third parties only to the extent required for the Service to function, namely to:
- infrastructure and hosting providers — to host and operate the Service;
- Yandex Cloud (Yandex.Cloud LLC) — to operate the TaskAI assistant: on behalf of the Operator and exclusively within the Russian Federation (see Section 8);
- payment and tax services — to make settlements and issue receipts;
- analytics services — in anonymised form, to assess quality and improve the Service;
- authorised government bodies — in the cases and manner established by law.
The Operator takes reasonable measures to ensure that engaged parties provide adequate protection of personal data.
8. Data processing by the TaskAI assistant
The Service includes the TaskAI assistant. The User's requests to TaskAI and the Service data required to answer them are processed by language models hosted on the Yandex Cloud platform (Yandex.Cloud LLC).
Yandex Cloud processes this data as a Processor — on behalf of the Operator in accordance with Part 3 of Article 6 of Federal Law No. 152-FZ, on the basis of a data processing agreement concluded with it. The Processor must comply with the principles and rules of personal data processing established by that law, ensure the confidentiality and security of the data (Article 19), and may not process it for its own purposes.
Processing takes place exclusively within the Russian Federation — in Yandex Cloud data centers located in Russia. No cross-border transfer of personal data takes place when TaskAI operates: the data is not transferred to the territory of foreign states, to foreign state authorities, foreign individuals or legal entities, including the developers of the language models used.
To fulfil a request, the following is sent to TaskAI:
- the text of the User's request and the history of the current dialogue;
- Service data the assistant requests to answer — only data the User has access to: TaskAI does not receive data of spaces and sections unavailable to the User;
- technical information required for the answer: date and time, time zone and interface language, the section of the Service where the question was asked.
Retention of request content on the Yandex Cloud side for improving its services has been disabled by the Operator: requests and answers are not used by the Processor to train or improve language models and are not stored by it longer than necessary to process them in accordance with the Yandex Cloud terms.
TaskAI does not make decisions that produce legal effects for the User or otherwise affect their rights and legitimate interests (Article 16 of Federal Law No. 152-FZ): answers are generated automatically and are for reference only, and changes to data in the Service are made only at the User's request and within their rights.
Using TaskAI is voluntary: if the User does not address the assistant, no data is sent for its operation.
9. Storage and protection of data
The personal data of citizens of the Russian Federation is processed and stored using databases located within the Russian Federation, in accordance with the requirements of the law.
The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying and distribution, including encryption in transit and access restrictions.
10. Incident response
An incident means the unlawful or accidental transfer (disclosure, distribution, access) of personal data that results in a breach of the rights of data subjects.
Upon detecting an incident, the Operator acts in accordance with Article 21.1 of Federal Law No. 152-FZ of 27 July 2006:
- within 24 hours of detecting the incident, notifies the authority responsible for protecting the rights of data subjects (Roskomnadzor) of the incident, its presumed cause, the presumed harm to the rights of data subjects, the measures taken to remedy the consequences, and provides details of the person authorised to communicate about the incident;
- within 72 hours of detecting the incident, notifies the authority of the results of the internal investigation and provides details of the persons whose actions caused the incident, where such details are available.
At the same time, the Operator takes measures to remedy the consequences of the incident and prevent its recurrence, including suspending processing, changing access parameters and notifying affected Users where the incident poses a high risk to their rights and legitimate interests.
11. Retention periods
Personal data is kept no longer than the purposes of its processing require, or for the periods established by law. Once the purposes are achieved, and upon withdrawal of consent in the absence of other legal grounds, the data is deleted or anonymised.
The history of dialogues with TaskAI and sparks usage information are stored by the Operator for the lifetime of the account and are deleted together with it.
After an account is deleted, the Operator deletes or anonymises the associated personal data within a reasonable period, except for data whose retention is required by law.
12. Rights of the User
As a data subject, the User has the right to:
- obtain information about the processing of their personal data;
- require the clarification, blocking or destruction of data if it is incomplete, outdated, inaccurate or processed in breach of the law;
- withdraw consent to the processing of personal data;
- appeal the Operator's acts or omissions to the authorised personal-data protection body or in court.
13. Consent and its withdrawal
Consent to the processing of personal data is given by the User when using the Service and remains valid until withdrawn. Consent is withdrawn by sending a corresponding request to the Operator at support@taska.be.
14. Data of minors
The Service is not intended for persons under 18. The Operator does not knowingly collect the personal data of such persons. If it becomes known that a minor's data is being processed without a proper legal basis, that data is deleted.
15. Changes to the Policy
The Operator may amend this Policy. A new version takes effect once posted on the Service website, unless its text provides otherwise. The current version is always available on this page.
16. Contacts
For questions about the processing of personal data, or to exercise their rights, the User may contact the Operator at support@taska.be or via Telegram @i_podprugin.
Operator details
Operator of the Service and holder of the exclusive rights:
- Status: self-employed individual (payer of the professional-income tax under the special tax regime of the Russian Federation);
- Full name: Podprugin Ilya Alekseevich (Подпругин Илья Алексеевич);
- Taxpayer ID (INN): 380897188680;
- Date of registration as a professional-income taxpayer: 29.08.2022;
- Contact email: support@taska.be;
- Messenger for prompt contact: Telegram @i_podprugin;
- Service website: taska.be.