Who is responsible
Soor LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA (“we”, “us”) is responsible for personal data collected on this website and for account data. For content your organisation puts into a workspace, your organisation decides the purpose and we process it on its behalf.
What we collect
Website: what you type into a form (name, email, mobile number, company, team size, message) and, only if you allow analytics, usage data from Google Analytics and Microsoft Clarity.
Product: your account details, the content of your workspace, and the technical logs needed to run and secure the service.
We do not collect special category data, we do not buy personal data from anyone, and we do not build advertising profiles.
Why
To reply to you, to provide and support the service, to keep it secure, to meet our legal obligations, and, with your consent, to understand which pages help people decide.
Where your organisation is on the Custom plan, also to agree and administer that order.
Attribution
If you arrive from a campaign link, the campaign tags on that link are kept in your browser for the visit and passed to the sign-up page. They contain no identifiers.
Who we share it with
Our sub-processors, listed on the sub-processors page, and no one else except where the law requires it or where we need to establish or defend a legal claim. We do not sell personal data, and we do not share it for cross-context behavioural advertising.
Where it is stored
There is one deployment of TaskSiddhi, run on infrastructure in the United States, and our sub-processors are US companies that may themselves process data elsewhere. We make no data-residency promise: a country page on this website does not mean data is held in that country, and we will not imply that it is.
If you are in the United Kingdom, the European Economic Area or India, using TaskSiddhi means your personal data is transferred to the United States. Where a transfer mechanism is required we rely on the European Commission's standard contractual clauses and the UK addendum to them, and we pass the same obligations on to our sub-processors.
How long we keep it
Website enquiries: 90 days from the date you send them, then deleted automatically.
Workspace content: for as long as the workspace exists. Delete the workspace and its content goes with it.
Your profile: deleted when you delete it, immediately and with no recovery window. The workspace's own activity log keeps a record that the action happened, for 30 days.
Backups and technical logs age out on their own cycle, within 90 days. We keep what the law requires us to keep for as long as it requires, and no longer.
Deleting your account
You can delete your own profile from Settings inside the product, without asking anyone. What is removed, what your organisation keeps, and what to do if you cannot sign in are set out at https://tasksiddhi.com/delete-account.
If you cannot reach that control yourself, write to [email protected] from the address on the account and we will delete it for you.
Your rights
Wherever you live, you can ask to access, correct or erase your personal data, ask for a copy of it in a portable form, object to or restrict what we do with it, or withdraw a consent you have given, by writing to [email protected]. We answer within one month. We will not treat you differently for asking.
United States: residents of California and of the other states with a consumer privacy law have the rights to know, to delete, to correct and to a portable copy, and the right to opt out of sale or sharing. We do not sell or share personal data, and we honour a Global Privacy Control signal as an opt-out. You may use an authorised agent, and you may appeal a refusal by replying to our answer. Californians may also contact the California Privacy Protection Agency or the state Attorney General.
United Kingdom and the European Economic Area: the rights above are your rights under the UK GDPR and the EU GDPR. Our lawful bases are performance of a contract (providing the service), legitimate interests (keeping it secure, and replying to an enquiry you sent us), consent (analytics) and legal obligation. You can complain to the Information Commissioner's Office in the UK, or to your own national supervisory authority in the EEA.
India: under the Digital Personal Data Protection Act, 2023 you have the rights to access, to correction and erasure, to grievance redressal, and to nominate another person to exercise them. Write to the address above for a grievance; if it is not resolved you can approach the Data Protection Board of India.
Children
TaskSiddhi is a tool for workplaces and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, write to us and we will delete it.
Security
Row-level security in the database keeps each workspace's rows apart, traffic to the service is encrypted in transit, and the activity log is written by the database rather than by the browser.
Report a vulnerability to [email protected]. If a breach affects your personal data we will notify you and the relevant regulator as the law requires.
Changes to this policy
The effective date shown at the top of this page is the date of the current version. A material change will be notified in the product or by email before it takes effect.
Contact
[email protected], or write to Soor LLC, 16192 Coastal Hwy, Lewes, DE 19958, USA.
