Source: https://taska.be/en/legal/privacy
Updated: 2026-10-22

[Back to home](https://taska.be/en/)

# Privacy Policy

Processing and protection of personal data in the Taska service

Version of September 29, 2026 [Terms of Service](https://taska.be/en/legal/terms)

Contents

This Privacy Policy (the "Policy") sets out how the personal data of users of the Taska service (the "Service") is processed and protected. It is drawn up in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other regulations of the Russian Federation.

By using the Service, the User confirms that they have read this Policy and consent to the processing of their personal data on the terms set out herein. If the User does not agree with the Policy, they must stop using the Service.

## 1. General provisions

This English text is provided for convenience only. The legally binding version of this document is the Russian one; in case of any discrepancy, the Russian version prevails.

This Policy has been drawn up in accordance with Federal Law No. 152-FZ of 27 July 2006 "On Personal Data", as amended by Federal Law No. 420-FZ of 30 November 2024 (in force since 30 May 2025), and with other regulations of the Russian Federation concerning the processing and protection of personal data.

The personal-data operator is the person whose details are set out in the "Operator details" section (the "Operator").

The Policy applies to all personal data the Operator may obtain about the User while the User uses the Service. Personal data is processed on a lawful and fair basis.

## 2. Key terms

- "Personal data" — any information relating, directly or indirectly, to an identified or identifiable natural person (the data subject).
- "Processing of personal data" — any action or set of actions performed on personal data, whether or not by automated means (collection, recording, storage, use, transfer, anonymisation, blocking, deletion, etc.).
- "Operator" — the person who independently organises and carries out the processing of personal data and determines the purposes and scope of the data processed.
- "User" — a natural person who uses the Service.
- "Processor" means a person processing personal data on behalf of the Operator (Part 3 of Article 6 of Federal Law No. 152-FZ).
- "Cross-border transfer of personal data" means a transfer of personal data to the territory of a foreign state, to a foreign state authority, a foreign individual or a foreign legal entity.
- "TaskAI" means the AI assistant built into the Service that performs the User's requests to their data in the Service using language models.

## 3. What data is processed

The Operator may process the following personal data:

- data provided on registration and while using the Service: email address, name (nickname), password in encrypted form, language and interface settings;
- Content created by the User in the Service (spaces, projects, tasks, comments, files), to the extent required to provide the services;
- payment information required to arrange a subscription and issue a receipt (bank-card details are not stored by the Operator and are processed by payment providers);
- technical data automatically transmitted by the User's device: IP address, browser and operating-system information, the date and time of access, cookie data and similar technologies;
- data about actions in the Service required to operate it, ensure its security and improve its quality.
- the content of the User's requests to TaskAI, the history of dialogues with it and information on TaskAI sparks usage;
- Service data that TaskAI obtains to fulfil the User's request (titles and descriptions of tasks, projects and articles, names and email addresses of space members, assignees and service desk requesters) — only within that User's access rights.

The Operator does not deliberately collect special categories of personal data or biometric personal data. Users should not place such data in the Service.

## 4. Purposes of processing

Personal data is processed for the following purposes:

- registration, identification and authentication of the User;
- providing access to the Service and its functionality;
- fulfilling the User's requests to the TaskAI assistant and accounting for TaskAI sparks usage;
- arranging and maintaining a subscription, making settlements and issuing receipts;
- communicating with the User, sending technical and service notifications, handling enquiries;
- ensuring the security of the Service and preventing fraud and abuse;
- improving the Service, analysing usage and producing anonymised statistics;
- complying with the requirements of the law of the Russian Federation.

## 5. Legal grounds for processing

Personal data is processed on the basis of the User's consent, the need to perform the contract (the Terms of Service) to which the User is a party, and in order to fulfil obligations imposed on the Operator by the law of the Russian Federation.

Data required to fulfil a request to TaskAI is processed at the User's initiative to perform the contract with the User (clause 5 of Part 1 of Article 6 of Federal Law No. 152-FZ). Data of other persons (space members, assignees, service desk requesters) is processed in the same scope and for the same purposes for which it is already processed in the Service and available to the User, on the basis of clauses 5 and 7 of Part 1 of Article 6 of that law.

## 6. Cookies and analytics

The Service uses cookies and similar technologies. By purpose they fall into two groups.

Strictly necessary cookies keep the Service running: signing in, remembering the selected language and colour theme, protecting forms against request forgery. The Service cannot work without them, so they are used on the basis of clause 5 of part 1 of Article 6 of Federal Law No. 152-FZ — to perform the agreement with the User.

Analytics cookies (Yandex Metrica) collect anonymised usage statistics: which pages are opened, where difficulties arise, which features are used. They are enabled ONLY after the User gives explicit consent. Until consent is given, the analytics service is not loaded and its cookies are not set.

Consent is given via the banner shown on the first visit. The decision is stored in a separate cookie and remembered for subsequent visits. Consent can be withdrawn at any time via the "Cookie settings" link in the site footer — after withdrawal, analytics is no longer loaded.

The User may also restrict the use of cookies through their browser settings. Disabling strictly necessary cookies may limit the functionality of the Service.

## 7. Transfer of data to third parties

The Operator does not sell personal data. Data is transferred to third parties only to the extent required for the Service to function, namely to:

- infrastructure and hosting providers — to host and operate the Service;
- Yandex Cloud (Yandex.Cloud LLC) — to operate the TaskAI assistant: on behalf of the Operator and exclusively within the Russian Federation (see Section 8);
- payment and tax services — to make settlements and issue receipts;
- analytics services — in anonymised form, to assess quality and improve the Service;
- authorised government bodies — in the cases and manner established by law.

The Operator takes reasonable measures to ensure that engaged parties provide adequate protection of personal data.

## 8. Data processing by the TaskAI assistant

The Service includes the TaskAI assistant. The User's requests to TaskAI and the Service data required to answer them are processed by language models hosted on the Yandex Cloud platform (Yandex.Cloud LLC).

Yandex Cloud processes this data as a Processor — on behalf of the Operator in accordance with Part 3 of Article 6 of Federal Law No. 152-FZ, on the basis of a data processing agreement concluded with it. The Processor must comply with the principles and rules of personal data processing established by that law, ensure the confidentiality and security of the data (Article 19), and may not process it for its own purposes.

Processing takes place exclusively within the Russian Federation — in Yandex Cloud data centers located in Russia. No cross-border transfer of personal data takes place when TaskAI operates: the data is not transferred to the territory of foreign states, to foreign state authorities, foreign individuals or legal entities, including the developers of the language models used.

To fulfil a request, the following is sent to TaskAI:

- the text of the User's request and the history of the current dialogue;
- Service data the assistant requests to answer — only data the User has access to: TaskAI does not receive data of spaces and sections unavailable to the User;
- technical information required for the answer: date and time, time zone and interface language, the section of the Service where the question was asked.

Retention of request content on the Yandex Cloud side for improving its services has been disabled by the Operator: requests and answers are not used by the Processor to train or improve language models and are not stored by it longer than necessary to process them in accordance with the Yandex Cloud terms.

TaskAI does not make decisions that produce legal effects for the User or otherwise affect their rights and legitimate interests (Article 16 of Federal Law No. 152-FZ): answers are generated automatically and are for reference only, and changes to data in the Service are made only at the User's request and within their rights.

Using TaskAI is voluntary: if the User does not address the assistant, no data is sent for its operation.

Do not include special categories of personal data (health, beliefs, etc.) or biometric data in requests to TaskAI.

## 9. Storage and protection of data

The personal data of citizens of the Russian Federation is processed and stored using databases located within the Russian Federation, in accordance with the requirements of the law.

The Operator takes the necessary legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying and distribution, including encryption in transit and access restrictions.

## 10. Incident response

An incident means the unlawful or accidental transfer (disclosure, distribution, access) of personal data that results in a breach of the rights of data subjects.

Upon detecting an incident, the Operator acts in accordance with Article 21.1 of Federal Law No. 152-FZ of 27 July 2006:

1. within 24 hours of detecting the incident, notifies the authority responsible for protecting the rights of data subjects (Roskomnadzor) of the incident, its presumed cause, the presumed harm to the rights of data subjects, the measures taken to remedy the consequences, and provides details of the person authorised to communicate about the incident;
2. within 72 hours of detecting the incident, notifies the authority of the results of the internal investigation and provides details of the persons whose actions caused the incident, where such details are available.

At the same time, the Operator takes measures to remedy the consequences of the incident and prevent its recurrence, including suspending processing, changing access parameters and notifying affected Users where the incident poses a high risk to their rights and legitimate interests.

A suspected incident can be reported to support@taska.be. Such reports are handled as a priority.

## 11. Retention periods

Personal data is kept no longer than the purposes of its processing require, or for the periods established by law. Once the purposes are achieved, and upon withdrawal of consent in the absence of other legal grounds, the data is deleted or anonymised.

The history of dialogues with TaskAI and sparks usage information are stored by the Operator for the lifetime of the account and are deleted together with it.

After an account is deleted, the Operator deletes or anonymises the associated personal data within a reasonable period, except for data whose retention is required by law.

## 12. Rights of the User

As a data subject, the User has the right to:

- obtain information about the processing of their personal data;
- require the clarification, blocking or destruction of data if it is incomplete, outdated, inaccurate or processed in breach of the law;
- withdraw consent to the processing of personal data;
- appeal the Operator's acts or omissions to the authorised personal-data protection body or in court.

## 13. Consent and its withdrawal

Consent to the processing of personal data is given by the User when using the Service and remains valid until withdrawn. Consent is withdrawn by sending a corresponding request to the Operator at support@taska.be.

Withdrawing consent may make it impossible to provide the Service if the processing of the relevant data is necessary for it to function.

## 14. Data of minors

The Service is not intended for persons under 18. The Operator does not knowingly collect the personal data of such persons. If it becomes known that a minor's data is being processed without a proper legal basis, that data is deleted.

## 15. Changes to the Policy

The Operator may amend this Policy. A new version takes effect once posted on the Service website, unless its text provides otherwise. The current version is always available on this page.

## 16. Contacts

For questions about the processing of personal data, or to exercise their rights, the User may contact the Operator at support@taska.be or via Telegram @i_podprugin.

## Operator details

Operator of the Service and holder of the exclusive rights:

- Status: self-employed individual (payer of the professional-income tax under the special tax regime of the Russian Federation);
- Full name: Podprugin Ilya Alekseevich (Подпругин Илья Алексеевич);
- Taxpayer ID (INN): 380897188680;
- Date of registration as a professional-income taxpayer: 29.08.2022;
- Contact email: support@taska.be;
- Messenger for prompt contact: Telegram @i_podprugin;
- Service website: taska.be.

The Operator applies the special "Professional Income Tax" regime and is not a VAT payer. Upon payment the Operator issues a receipt in the manner set out by Federal Law No. 422-FZ of 27.11.2018.