TaskRel Privacy Policy

Privacy contact: support@taskrel.com
Mail: 2212 S Chickasaw Trail, Unit #2275, Orlando, FL 32825, United States

This policy covers the TaskRel web app at taskrel.com, including the client-facing quote pages (/q/…), job completion records (/jc/…), and booking pages (/book/…), whether you open a booking page on taskrel.com or inside a business’s own website.

Three kinds of people, and the difference matters.

• TaskRel account holders (the businesses that use TaskRel). For your own account information, TaskRel decides how the data is used.
• Your clients and suppliers, as you enter them. For information you enter about your clients or about the suppliers you buy from, you decide what to collect and why; TaskRel stores and processes it on your instructions. You are responsible for having the right to store their information and for answering their privacy requests. If your client or a contact person at one of your suppliers contacts us directly about their data, we will tell them which business holds it and help that business respond.
• People who request a booking through a business’s booking page. The business decides to publish the page, what it offers, and what to do with your request, and it is responsible for how it uses your request. TaskRel runs the page and decides which details the form asks for. TaskRel also carries out some processing of its own on the page: abuse prevention and product analytics. Section 3 explains this.

Your account: your name or business name, email address, and a password.

Your password is sent to our server when you sign up or log in, and our server hands it to our authentication provider (Supabase). TaskRel never stores your password, and we cannot retrieve or read your stored password. TaskRel does not offer social or third-party sign-in. An email address and password is the only way to create an account.

Your business profile: business name, phone, website, license text, logo, service categories, business ZIP code, timezone, default sales-tax rate, how you charge sales tax (not at all, on the whole bill, or on goods only), your default markup on stocked items, quote template and default note, and terms and policy text. We use your ZIP code only to suggest a starting tax rate from tax tables built into TaskRel; it is not sent to any outside service.

What your booking page shows publicly: if you set up booking, your business name, logo, business phone, license text, the services you offer, and your open arrival windows appear on your booking page to anyone who has its link. The page is not indexed by search engines.

Your clients, as entered by you: contact name, email address, phone number, and service address.

Your suppliers, as entered by you: the supplier’s name and, if you add them, a contact person’s name, an email address, a phone number, and your notes. A supplier’s contact person has no TaskRel account; section 1 explains who is responsible for these details.

Your inventory and purchasing records: the items you stock (name, part number, unit, cost, pricing rule, count on hand, low-stock level and usual supplier), a dated history of every change to an item’s count or cost, with the reason and the account that made it, and your purchase orders (order number, supplier name, lines, quantities, costs, status, notes and dates).

Supplier receipts you upload: when you receive stock from a receipt, you can add a photo or PDF of it (up to 4 MB). TaskRel stores the file privately in your account and sends it to OpenAI to read its lines (see section 7). What you confirm is saved as a purchase order: the supplier, the receipt number and date, the printed total, and each line’s item, quantity and cost. When OpenAI reports that a receipt shows more than the last four digits of a card number, TaskRel covers the digits it can find on a photo, or does not keep the file. When OpenAI reads a receipt, it also tells TaskRel whether a card number is printed with more than its last four digits showing. If it is, a photo is stored with the card digits TaskRel finds covered, leaving the last four, and a PDF is not stored at all; if TaskRel cannot find the number on the photo to cover it, the photo is not stored either. This check depends on the reading: if OpenAI does not report a card number, the file is stored as sent. Your lines are received either way. Most printed receipts already show only the last few digits. If a receipt cannot be read (the AI service is unavailable, OpenAI does not recognise it as a receipt, or the photo cannot be processed), its file is stored as sent. Anything else printed on a receipt, such as your name or an address, stays in the stored file. A PDF is otherwise stored unchanged. A photo is normally re-saved as a smaller JPEG, which removes embedded information such as the camera’s location; if a photo cannot be processed (some iPhone HEIC files, for example), the original is stored and is not sent to OpenAI. The lines TaskRel copies out of a receipt are filtered to remove card numbers it recognises, including last-four digits shown next to a card name or a mask.

Supplier wording: when you receive lines from a receipt, TaskRel remembers how that supplier words each item, so the next receipt from them matches the same item automatically.

Your work records: quotes, invoices, jobs, schedules, arrival windows and blocked dates, job cards, checklists, crew entries, recorded actuals, photos you upload, and client signatures captured on completion records.

Documents: when you send a quote or invoice, TaskRel saves a PDF copy as a frozen record of exactly what your client received. These PDFs contain client personal information: name, address, contact details, and line items.

Google integrations, if you connect them: a Google refresh token for each integration you connect (Sheets and Calendar are separate), and for Calendar, the start and end times of your busy events (see section 5).

Usage information: pages viewed (including each page’s address), clicks, product events (for example a quote being created or sent), error reports, and technical details such as IP address, browser and device type, tied to your account. TaskRel does not record your sessions (see section 10).

What TaskRel does not collect: TaskRel’s own product has no field for a mailing address, a billing address, a job title, a username, or contact preferences, and we do not ask for them. (Stripe, which handles billing, may ask you for billing details; see section 6.)

This section is for you if you used a business’s booking page. You do not need a TaskRel account, and the business you are booking with is the one you are dealing with.

What the form asks for:

• your name and phone number (required), and your email address (optional);
• the service you want, your answers to a short set of questions about the job, and anything you choose to add in the free-text box;
• the date and arrival window you pick;
• up to five photos, if you choose to add them.

The booking form does not ask for your address or payment details. The first step of the form links to this policy.

When your details are saved. Your name, contact details, answers and photos are saved only when you submit your request. If you leave the form before submitting, they are not saved.

Photos. Photos are stored privately and are shown only to the business. We normally re-save each photo as a smaller JPEG, which removes embedded information such as the camera’s location. If a photo cannot be processed (some iPhone HEIC files, for example), we store the original file as you sent it, and it may still contain that embedded information.

Your IP address. To stop automated abuse, we limit how many requests one network can send in an hour. For this we store a scrambled, one-way code made from your IP address. We do not store your IP address itself in the booking record. Our hosting provider (Vercel) processes IP addresses to deliver the page, as it does for every visitor.

AI-drafted quote. When you submit, TaskRel may send the service you picked, your answers, and your free-text details to OpenAI so the business receives a draft price estimate. Your name, phone number, email address and photos are not sent to OpenAI. Anything you type into the free-text box is sent as written, so leave personal details out of it. The draft is saved in the business’s TaskRel records together with your name and contact details, and only the business can see it. Nothing is sent to you unless the business reviews the draft and chooses to send it.

Emails. If you gave an email address, you receive a confirmation of your request, sent by TaskRel through SendGrid on the business’s behalf and showing the business’s name. The business receives an email with your name and what you requested. If the business declines and writes you a note, that note is emailed to you. If the business accepts, it may send you a quote by email. Replies go to the business. TaskRel does not send you text messages or marketing email.

Matching you to the business’s records. When you submit, TaskRel checks whether your email or phone number matches exactly one client already on that business’s client list, and if so links your request to that client. This comparison is only ever made within the one business you are booking with. If the business accepts your request, your name, email and phone are added to its client list and your booking is added to its schedule. If the business has connected Google Calendar, the job appears on its calendar as “[service] for [your name]”.

Your time hold. Your chosen window is held for 48 hours. If the business does not respond in that time the hold lapses, but your request stays on record (see section 11).

Analytics on booking pages. TaskRel measures how booking pages are used (for example, that a page was viewed or a request was submitted), using PostHog. These measurements do not include what you type into the form, they are not linked to your name, phone or email, and we do not identify you in them. We do not record sessions. See section 10.

Your requests about your data. The business you booked with decides what happens to your request, so ask it first. You can also email support@taskrel.com. We will tell you which business holds your request and help that business respond, and we will act directly on the parts TaskRel controls (the abuse-prevention code and analytics).

To provide the product: create and send quotes and invoices, generate PDFs, schedule jobs, run booking pages and hold requested times, record job completion, take payments through your connected Stripe account, sync to Google Sheets and Google Calendar when you connect them, and support you when you ask.

To keep it working and safe: diagnose errors, prevent abuse (including rate-limiting booking pages), enforce our Terms, and meet legal obligations.

We do not sell your information. We do not share it for advertising, we run no advertising on TaskRel, and we do not use your content, your clients’ or suppliers’ information, or booking requesters’ information to target ads to anyone.

About Google Sheets: if you connect it, TaskRel creates one spreadsheet in your Drive and writes your records to it. The permission we request is Google’s drive.file scope, which covers only the files TaskRel itself creates. We cannot see, open or edit any other spreadsheet or file in your Drive, including ones you already had. If you connected Google Sheets before September 8, 2026, the permission you granted then covered all your spreadsheets; TaskRel only ever used the one it created, and disconnecting and reconnecting replaces that permission with the narrower one. We store a Google refresh token so the sync can keep running. You can disconnect at any time in Settings, which is the right thing to do if you stop using the sync. Disconnecting stops the sync and leaves the spreadsheet in your Drive, yours to keep or delete.

About Google Calendar: Calendar is a separate connection from Sheets, with its own permission and its own token; connecting one never widens the other. The permission we request is Google’s calendar.events scope. Google describes this scope as covering events on all your calendars; TaskRel uses it only on your primary calendar. With it, TaskRel does two things there:

• Reads your busy times. TaskRel asks Google only for each event’s identifier, start time, end time, whether it is cancelled, whether it is marked “busy”, and TaskRel’s own marker if present, along with your calendar’s time zone. We do not request or store event titles, descriptions, locations or guest lists. We keep those busy intervals, for up to 90 days ahead, so your booking page does not offer times you are already committed.
• Writes your TaskRel schedule. TaskRel adds your scheduled jobs as events and booking holds as tentative events. It updates them when a job moves and removes them when a job is unscheduled or a hold is declined or expires. Each event contains a title, a start time, an end time, a status (confirmed for a job, tentative for a booking hold), a setting that shows the time as busy, and an internal marker that lets TaskRel recognise its own events. Nothing else is written. A job’s title is the job title in TaskRel, which is often your client’s name (for example “Jane Smith job”). A booking-hold title does not include the requester’s name; an accepted booking’s title does.

We store a Google refresh token so this keeps working. You can disconnect in Settings. Disconnecting stops all reading and writing, and it also deletes the busy times we saved. It does not delete events TaskRel already added to your calendar (delete those in Google Calendar if you want to). Disconnecting also does not cancel the permission on Google’s side; to fully remove TaskRel’s access, also remove it at https://myaccount.google.com/permissions.

Google API Limited Use. TaskRel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. In particular, information from your Google Calendar and Google Sheets is used only to provide the calendar and sheet features you turned on; it is not sold; it is not transferred to advertising platforms, data brokers or information resellers; it is not used for advertising; it is not used to create, train or improve AI or machine-learning models; and TaskRel staff do not read it, except when you ask us to for support, when it is needed for security, or to comply with the law. In plain terms: Google data is used only to run your calendar and sheet features.

TaskRel never sees or stores the card number you pay for TaskRel with. Subscription payments are taken on Stripe’s own hosted checkout page, and your card details go directly to Stripe and never reach TaskRel’s servers. There is no card field anywhere in TaskRel. (A supplier receipt you upload may show a card number. Section 2 explains what TaskRel keeps.) Stripe’s billing portal may let you add billing details, such as an address or phone number, to your Stripe customer record; those details are held by Stripe.

Payments from your clients run through Stripe Connect into your connected Stripe account. TaskRel is not the merchant of record for those payments, never holds the funds, and takes no platform fee from them. Refunds, chargebacks and payouts are between you, your client, and Stripe.

When you use AI-assisted drafting, the job text you enter is sent to OpenAI to generate a draft. When someone submits a booking request, the requested service, their answers and their free-text details are sent to OpenAI to prepare a draft quote for you (see section 3). Do not paste payment card numbers, government identification numbers, or health information into those fields.

When you ask TaskRel to read a supplier receipt, the file itself is sent to OpenAI before any card digits are covered (see section 2), together with the names and part numbers of your stocked items so its lines can be matched to them. Everything printed on the receipt reaches OpenAI, including any card digits; OpenAI is told never to return them. When you receive parts from an approved quote, the description, quantity and unit of its material lines are sent to OpenAI to suggest parts, with the same item names and part numbers. Prices and your client’s details are not sent for that suggestion, but a line description is sent as written.

OpenAI is the only AI provider TaskRel uses. No Google data is sent to OpenAI. Every request TaskRel sends asks OpenAI not to store the response for later retrieval; how long OpenAI keeps what it receives is governed by OpenAI’s own policies.

Emails you send through TaskRel: when you send a quote or invoice, TaskRel emails it to the client address you entered, through SendGrid.

Emails TaskRel sends about booking: a confirmation to the person who requested a booking (if they gave an email), a notification to you, and your decline note if you write one (see section 3). Replies from the requester go to your business.

Emails TaskRel sends to you about your account: for example, reminders before your free trial ends, and service notices. These are about your account, not marketing.

TaskRel does not send text messages. SMS delivery is built into the product but is switched off and is not offered anywhere in the interface. No client or booking requester phone number has been sent to a messaging provider. If that changes, this policy will be updated before the feature is turned on, not after.

You are responsible for having your client’s permission to contact them at the address you enter, and for complying with the laws that govern those messages.

When you send a quote or completion record, TaskRel creates a link with an unguessable token. These pages:

• do not require an account and are not indexed by search engines;
• can be opened by anyone who has the link;
• allow a quote to be approved, declined, or a change requested, and a completion record to be signed.

TaskRel records the action and the time it was taken. TaskRel does not verify the identity of the person who opened the link. Our analytics record the address of these pages, which includes the link’s private code (see section 10).

Your booking page (/book/…) works the same way: anyone with its link can open it and submit a request, and it is not indexed by search engines. You can also place it on your own website.

TaskRel uses these kinds of cookies and similar storage:

• Essential: sign-in and session cookies set by Supabase, and a short-lived security cookie used while you connect Google. Without these you cannot stay logged in or connect Google. They cannot be turned off.
• Analytics: PostHog, which records page views (including the address of each page), clicks, product events and errors so we can see how the product is used and fix what breaks. PostHog is served through taskrel.com rather than a third-party domain. It runs on public pages too (quote, completion and booking pages). There it is not linked to visitors’ names or contact details, and it does not record what visitors type into form fields. Analytics on quote and completion pages record the page address, which includes the private link’s code.

No session recording. TaskRel does not make session recordings or screen reconstructions of how anyone uses any page, whether in the app or on public pages.

TaskRel sets no advertising cookies, uses no ad networks, and does no cross-site tracking. Third parties do not collect information about your activity on other websites through TaskRel. PostHog and our other providers act only for us. Most browsers let you block or delete cookies; blocking the essential ones will stop you being able to log in.

How We Respond to Do Not Track Signals. TaskRel does not currently respond to browser “Do Not Track” signals or Global Privacy Control signals. Because TaskRel does no cross-site tracking and no advertising, these signals would not change what we collect.

Account holders: we keep your information while your account is open. When you delete your account, we delete what is described in section 12.

Booking requests (accepted, declined or lapsed) are kept until the business that received them deletes its TaskRel account. TaskRel does not currently delete them on a timed schedule. If you requested a booking and want your details removed sooner, see section 3.

Google Calendar busy times are kept while Calendar is connected, until the event has passed. Disconnecting Calendar or deleting the account deletes them.

Suppliers, inventory and purchase orders are kept until you delete your TaskRel account. TaskRel does not currently let you delete a single supplier or stocked item. Archiving one marks it as no longer in use but keeps the record, so your past purchase orders and stock history still read correctly.

Supplier receipt files saved with a received receipt are kept until you delete your TaskRel account; there is no option to delete a single receipt file. If you undo a receipt within the 15 minutes allowed, its file is deleted (if that fails, it is removed later along with other files that were never received). A file you added but never received is deleted the first time you read another receipt after it is more than a day old; if you never read another receipt, it stays until you delete your account. Remembered supplier wording is kept until you delete your account, except wording created by a receipt you undo.

Billing records held by Stripe follow Stripe’s own retention rules. We may keep limited records where the law requires it.

You can permanently delete your account at any time from Settings. This is immediate and irreversible.

Deletion removes your contractor profile and your business records (clients, quotes, invoices, jobs, schedules, pricing, booking requests, inventory items and their stock history, suppliers, purchase orders, remembered supplier wording, and saved calendar busy times) together with the quote and invoice PDFs, your uploaded logo, job photos, job card photos, supplier receipt files, photos attached to booking requests, and client signatures captured on completion records. It also deletes the Google tokens TaskRel held for you.

What deletion does not remove:

• Events TaskRel added to your Google Calendar, and the spreadsheet TaskRel created in your Google Drive. They are in your Google account; delete them there if you want to.
• Your permission grants at Google. Remove them at https://myaccount.google.com/permissions.
• Billing records held by Stripe.

You can also email support@taskrel.com for help with a deletion request.

You can update your business profile, export your quotes and invoices as a CSV file, connect or disconnect Google Sheets and Google Calendar, and delete your account and stored documents at any time from Settings. The export covers quotes and invoices only. It does not include your other records, such as inventory, suppliers or purchase orders.

To review or correct personal information TaskRel holds about you that you cannot change in Settings, or to ask us to delete it, email support@taskrel.com. If you are a client of a TaskRel business, a contact at one of its suppliers, or requested a booking, see sections 1 and 3: the business is the right first contact. We will tell you which business holds your information and help that business respond.

TaskRel stores files in private, access-controlled storage scoped to each business account, reachable only through short-lived signed links, and database access is restricted per account. Booking pages store only a one-way code in place of your IP address. No system is perfectly secure, and we cannot guarantee absolute security.

TaskRel is for business use by people 18 or older and is not directed to children. Booking pages are for arranging services and are not directed to children.

We may update this policy. We will change the effective date and, for material changes, give notice by email or in the app.

Questions: support@taskrel.com