Privacy Policy

Last updated: 13 October 2026

1. Who we are

Taskriz is provided by Appeggio.com Pty Ltd (ABN 33 638 342 748, Suite 1 Level 2, 77 Raleigh Street, Essendon VIC 3040, Australia) (“Appeggio”, “we”, “us”). This policy explains what information Taskriz handles, why, and the choices you have. We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

2. What we collect

• Your account: your email address, name and password (stored only as a secure hash), and your Profiles and their settings.
• Mobile numbers you add to a Profile for text messages, once confirmed.
• Payments: if you choose a paid plan, you pay through Stripe, which collects your card details (we never see or store them) and, for invoices, your business name and tax ID. We keep your plan, its status and Stripe’s customer reference for your account.
• Agents and connections: the Agents in your account, who is paired with them, invitations sent, and the public keys used to seal requests.
• Connected Apps: each app or AI tool you allow to act for you (listed under Connected Apps, where you can remove it) — its name, the Profile it acts for, and when it was allowed and last used.
• Requests and responses: see section 3.
• Attachments: files sent with requests or replies.
• The home page demo: a request you type into the demo on our home page is sent to Amazon Bedrock (an AI service run by Amazon Web Services) to design its interface. The result is kept for up to a week, so the same request can be shown again; what you typed is not stored in our logs, and nothing is sent to anyone.
• Technical information: IP addresses, device and browser details (in the apps, the device model, operating system and app version), and logs of activity, used for security, limits and fixing problems.
• One cookie, on the web: a session cookie set by our server keeps you signed in. It holds only a random session identifier (we keep only a scrambled form of it), and it is locked down: the page’s scripts can’t read it (HttpOnly), it is sent only over encrypted connections (Secure), and only to Taskriz itself (SameSite=Strict, a “__Host-” cookie). A signed-in session lasts 30 days from your last visit, and at most 90 days; before you sign in, the same cookie lasts an hour and protects the sign-in forms. Signing out ends it. We use no advertising or tracking cookies.

If you don’t give us the information we ask for, we may not be able to provide Taskriz, or some of it, to you.

The Taskriz apps for iPhone and Android

• On your device: the app keeps your sign-in and your Profile’s private key on the device — in the iPhone’s Keychain or Android’s secure storage. The key never leaves the device unless it is sealed for another of your own devices when you link one.
• Camera, photos and files: the app uses the camera, your photo library or your files only when you choose to attach one to a request that asks for it. Only what you choose is uploaded, and it is handled like any other attachment (section 3).
• Nothing else: the apps contain no third-party analytics or advertising, and don’t track you across other apps or websites.

3. Requests and responses

When an Agent sends a request, Taskriz handles its content while delivering it: we run automated checks that it is well-formed and genuine (no one reads it), then seal it to each recipient’s devices, and store it sealed — it opens only on those devices. When someone responds, their device seals the response; Taskriz opens it for the same automated checks — no one reads it — and hands it to the Agent, and keeps it until the Agent has collected it, for up to 30 days. Attachments are stored encrypted on our servers (they are not sealed to devices) and are deleted with the request they belong to.

4. How we use information

To provide Taskriz — delivering requests and responses, sending notifications by email or text, keeping accounts secure, preventing misuse, enforcing our Terms of Service, and improving the service — using technical information, not the content of requests and responses. We do not sell personal information. We don’t use analytics, advertising or tracking services, and we don’t send marketing emails.

5. Who we share it with

Service providers who run Taskriz for us, under contract — Amazon Web Services (hosting, storage, email and text messages, and Amazon Bedrock for the home page demo) and Stripe (payments). Requests are shared with the Agents and people they are sent between.

We may also disclose information when we believe in good faith that it is needed to comply with the law or a lawful request, to protect the rights, property or safety of Appeggio, the people who use Taskriz or the public, or to prevent or investigate misuse of Taskriz.

If Appeggio is involved in a merger, sale or reorganisation of all or part of its business, information may pass to the organisations involved and their advisers, who must keep handling it under this policy.

The Taskriz apps are distributed through Apple’s App Store and Google Play. Apple and Google handle the information involved in downloading and updating apps under their own privacy policies.

6. Where it is kept

Taskriz runs on Amazon Web Services in the United States (the us-east-1 region, in Northern Virginia), so information is stored and processed outside Australia. Stripe, which handles payments, also processes information in the United States. We take reasonable steps to make sure the organisations that hold information for us overseas handle it consistently with the Australian Privacy Principles.

7. How long we keep it

Requests stay until they are deleted; attachments go with them. Responses are kept until the Agent collects them, for up to 30 days. Account information is kept while your account is open and deleted from our systems within 24 hours of closing it (copies in our backups go too, within 35 days), unless the law requires us to keep it. Logs of activity (section 2) are kept for up to 90 days, then deleted.

8. Your choices and rights

You can view and update your account and Profiles in Settings, remove a mobile number, unpair Agents, decline invitations, and close your account. You may ask us for access to, or correction of, the personal information we hold about you, or complain about how we have handled it, by contacting us. There is no charge; we may ask you to prove who you are, and we will respond within 30 days. In limited cases the Privacy Act allows us to refuse access — for example, where it would unreasonably affect someone else’s privacy — and if we do, we will tell you why. To make a complaint about how we have handled your personal information, email us at support@appeggio.com with the details. We will look into it and respond in writing within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner (OAIC) — www.oaic.gov.au, phone 1300 363 992.

9. Security

Connections are encrypted, requests are sealed to recipients’ devices, passwords are hashed, and access is limited. No service can be perfectly secure; keep your devices and sign-in details safe.

10. Children

Taskriz is for people aged 16 and over. We don’t knowingly collect personal information from anyone under 16. If you believe a child under 16 has given us personal information, contact us and we will delete it.

11. Changes

We will update this policy as Taskriz changes, and tell you about significant changes before they take effect.

12. Contact

support@appeggio.com