Legal
Effective date: September 17, 2026
TaskLift ("we," "us," or "our") operates the TaskLift Reminders service at tasklift.tech. This Privacy Policy explains what information we collect, how we use it, and your choices.
When you create a TaskLift account, we collect your email address and a hashed password. We do not store plaintext passwords.
When you connect your Google Calendar via OAuth, TaskLift reads upcoming appointment data — including event titles, dates, times, and attendee details — to schedule SMS reminders. We store only the metadata needed to send reminders and display your send log.
TaskLift extracts phone numbers from your calendar event fields (attendee info, event descriptions) in order to send appointment reminder text messages. These phone numbers belong to your clients/customers and are used solely for the reminder workflow you configure.
We log outbound reminder messages and inbound replies (confirm, reschedule, STOP, HELP) to provide your send history, handle opt-outs, and troubleshoot delivery issues.
Payments are processed by Stripe. We do not store credit card numbers. Stripe provides us with a customer ID, plan status, and subscription metadata.
If you submit our contact or assessment forms, we collect the information you provide (name, email, phone if given, business name, and message content) to respond to your inquiry.
We collect anonymized page-view analytics (hashed IP addresses, referrer, UTM parameters, user-agent strings) to understand site traffic. We do not use third-party ad tracking.
TaskLift sends appointment reminder text messages on behalf of our business customers to their clients. Key details:
We do not sell, rent, or share your personal information or your customers' phone numbers with third parties for marketing purposes.
We share data only with the following service providers, solely to operate TaskLift:
We may disclose information if required by law, regulation, or valid legal process.
Data is encrypted in transit (TLS) and at rest. We use hashed passwords (bcrypt), session tokens, and scoped OAuth grants. Access to production systems is restricted to authorized personnel.
We retain account and send-log data for the duration of your active subscription plus 90 days after cancellation, after which it is deleted. Opt-out (STOP) records are retained indefinitely to ensure continued compliance.
You may request access to, correction of, or deletion of your personal data by emailing us. If you are a California resident, you have additional rights under the CCPA. We will respond to verifiable requests within 30 days.
TaskLift is not directed at children under 13 and we do not knowingly collect personal information from children.
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the service constitutes acceptance of the revised policy.
If you have questions about this Privacy Policy or your data, contact us: