Privacy Policy

We take your privacy seriously and are committed to protecting your data. We never sell your information and only collect what's necessary to provide you with the best experience.

Our lawyers drafted the detailed agreement below, but here's a quick summary that's easier to digest. It's still your responsibility to know and understand the full agreement, so please don't hesitate to reach out to us at sodiq@polartask.cc with any questions.

What we collect

Account info, task data, usage analytics, and device information

What we use it for

Providing services, improving features, and sending notifications

Who we share with

Only trusted service providers (Firebase, Resend, PostHog, Vercel)

Your rights

Access, correct, delete, or export your data anytime

Effective Date: October 18, 2025

This Privacy Policy explains how PolarTask ("PolarTask", "we", "us", or "our") collects, uses, and shares information about you when you use our Chrome extension, websites, and services (collectively, the "Services"). By using the Services, you agree to this Privacy Policy.

Contact Information:

Information we collect

We collect information in three ways: you provide it to us, we collect it automatically when you use the Services, and we receive it from third parties.

Information you provide

  • Account details — name, email address, and profile photo from your Google account when you sign in.
  • Workspace & task content — tasks, descriptions, comments, assignees, due dates, attachments, links to emails, and other data you create or upload.
  • Preferences — notification settings and workspace configurations.
  • Support & feedback — information you send through our help and feedback forms, including your browser type and usage context.

Information collected automatically

  • Usage data — features used, clicks, page views, and actions within the extension to help us improve performance and user experience (collected via PostHog).
  • Device & log data — browser type, operating system, extension version, and timestamps.
  • Chrome extension storage — local preferences and settings stored in your browser.

Information from third parties

  • Google OAuth — when you sign in with Google, we receive your email address, name, and profile photo.
  • Gmail integration — when you link emails to tasks, we store references to those emails within your workspace.

How we use information

We, or our service providers, use your information for various purposes depending on the types of information we have collected from and about you, in order to:

  • Provide, secure, and maintain the Services, including task management and workspace collaboration.
  • Send service-related communications such as workspace invitations, task assignments, completion notifications, and due date reminders.
  • Personalize features, such as your workspace views, task filters, and notification preferences.
  • Monitor performance, analyze usage patterns, fix bugs, and develop new features.
  • Prevent, detect, and investigate fraud, abuse, or security incidents.
  • Comply with legal obligations and enforce our terms and policies.

Sharing & disclosure

We share information only as described below:

  • Service providers — trusted vendors who process data on our behalf:
    • Google Firebase (hosting and database storage)
    • Resend (email delivery for invitations and notifications)
    • PostHog (analytics)
    • Vercel (hosting)
  • Workspace members — information you share within your workspace (tasks, comments, assignments) is visible to other workspace members according to your workspace settings.
  • Legal reasons — if we believe disclosure is reasonably necessary to comply with the law, protect any person's safety, or protect PolarTask's rights or property.
  • Business transfers — as part of a merger, acquisition, or sale of assets. We will continue to protect your information and notify you of any changes to this Privacy Policy.

Integrations & third-party services

PolarTask integrates with Gmail to help you manage tasks from your inbox. When you use this integration:

  • We only access Gmail data when you explicitly attach an email to a task.
  • We store references to email attachments, but do not store the full email content.
  • You can remove email attachments from tasks at any time.
  • We use Google OAuth for authentication, which is governed by Google's privacy policy.

Data retention

We keep personal data only as long as necessary to provide the Services and comply with our legal obligations.

  • Account data is retained while your account is active.
  • When you delete your account, we permanently delete your personal information and workspace data within 30 days.
  • Deleted tasks and content may remain in backups for up to 90 days before being permanently purged.
  • Support requests and feedback may be retained longer for product improvement purposes.

Security

We use technical and organizational measures designed to protect your information:

  • Data is encrypted in transit using HTTPS.
  • Data is stored securely in Google Firebase with access controls.
  • We regularly monitor for security vulnerabilities.
  • Access to personal data is limited to authorized personnel only.

No method of transmission or storage is 100% secure. If we learn of a security breach, we will notify affected users as required by law.

Your rights

Subject to applicable law, you may have the right to:

  • Access — request a copy of your personal data.
  • Correct — update inaccurate information through your account settings.
  • Delete — request deletion of your personal data by deleting your account in the extension settings.
  • Opt out — disable email notifications in your account settings.
  • Data portability — request your data in a portable format.

California residents: You may have additional rights under the CCPA/CPRA. We do not sell personal information.

EEA/UK residents: You may have additional rights under GDPR, including the right to lodge a complaint with your local supervisory authority.

To exercise your rights, contact us at sodiq@polartask.cc

Children's privacy

The Services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the extension and update the "Effective Date" above. Continued use of the Services after changes constitutes acceptance of the updated policy.

How to contact us

If you have any questions about this Privacy Policy or our privacy practices, please contact us: