Roles and permissions
A space has an owner, administrators, members and guests. A guest can be invited to one project without opening the rest.
Security and your data
Where the data is, who can access it, what happens after a mistake or when a subscription ends, and what we don't have yet.
Updated
Where data is stored
Taska's servers are located in Russia. Personal data is processed under Russian Federal Law 152-FZ, and the terms are described in the privacy policy. The service works in Russia without workarounds, and payments are accepted in RUB.
Backups
A backup of the database is made every hour. Backups are encrypted and stored separately from the main servers, in external storage. This protects against hardware failure; it is not a way to restore a single deleted task, which is what the trash is for.
Access
API keys
A key is issued for one space, with permissions for specific resources and an allowlist of IP addresses. It can be revoked at any time.
AI within your permissions
TaskAI and assistants connected via MCP see and change only what is available to the user. The owner can forbid TaskAI from changing data.
Mistakes and undo
- Trash. Deleted tasks, pages and sections go to the trash and can be restored.
- Activity log. You can see who changed what and when, including changes made by TaskAI.
- Undo. Related changes are reverted together, not one record at a time.
If you leave
- Data is not deleted when a subscription ends: the space moves to the free plan, and anything beyond its limits is frozen until renewal.
- You can delete your account yourself in your profile. Personal data is anonymized, while the tasks you ran in teams stay with your colleagues.
- There is no built-in export of a whole space yet. Data can be retrieved through the public API.
What's not available yet
- Two-factor sign-in. Sign-in is protected by a password or Yandex ID.
- Installation on your own servers. Taska runs as a cloud service; for companies of 100 people or more, terms are discussed individually.
- An entry in the Russian software registry.
Frequently asked questions
Who in Taska sees our tasks?
Members of your space and guests of the projects you invited them to, each within their role. How the operator handles data is described in the privacy policy.
Is our data used to train AI?
No. Requests to TaskAI are processed by language models in Yandex Cloud on the territory of Russia, and storing requests to improve models is disabled for Yandex Cloud: requests and answers are not used for training. Details are in the AI assistant section of the privacy policy.
How do I report a vulnerability?
Write to the support email listed in the privacy policy, with a description of the problem and steps to reproduce.