Privacy notice

Short version: we collect what we need to run the service, we store it on infrastructure we control, we don’t sell it, and we don’t train models on your task trees.

What we collect

• Account data: email, name, hashed password (or Google OAuth identifier). Used to authenticate and to email you about your account.
• Task tree contents: goals, tasks, notes, files you attach. Stored encrypted at rest. Visible to people you explicitly share with — nobody else.
• Usage telemetry: aggregated, de-identified counts of how features are used. Helps us prioritise. Never sold.

Where it lives

Primary database: Turso (libSQL, SOC 2 II, hosted in AWS us-east-2). Web app: Vercel (also SOC 2 II). Email: Postmark. We don’t use third-party analytics scripts on the marketing site.

AI providers

When you ask the agent to do something inside Fractask, the request and the relevant subtree are sent to the model provider you chose (Anthropic or OpenAI). Both have zero-retention agreements for API traffic. Your content is not used to train their models.

Your rights

Email cto@sunbek.com to: export your data, delete your account, opt out of usage telemetry, or ask any question. We respond within 7 days.

Cookies

We set one essential session cookie when you sign in. No tracking cookies. No third-party advertising pixels.

This page is a placeholder while we’re in private beta. A GDPR/CCPA-compliant production version, reviewed by counsel, will replace it before public launch.