Privacy Policy

1. Overview

honeytask ("we", "us", or "our") operates honeytask.io. This Privacy Policy explains what information we collect, how we use it, and your rights. By using our Service you agree to the practices described here.

2. Information We Collect

Account information

When you register, we collect your name, email address, and any profile information you provide. If you log in via Google, we receive the profile data permitted by your Google account settings.

Business and customer data

Information you enter into the Service (including business details, customer records, requests, bookings, and resources) is stored on your behalf. You control this data and remain its owner.

Usage data

We automatically collect log data such as IP addresses, browser type, pages visited, timestamps, and error reports to operate and improve the Service.

Payment information

Payments are processed by Stripe. We do not store full card numbers or bank account details. Stripe's privacy policy governs how payment data is handled.

3. How We Use Information

• To create and maintain your account and business workspace.
• To operate, secure, and improve the Service.
• To send transactional emails (confirmations, reminders, notifications).
• To respond to support requests.
• To send product updates or announcements (you may opt out at any time).
• To comply with legal obligations.

We do not sell your personal information or Customer Data to third parties.

4. Data Sharing

We share information only in these limited circumstances:

• Service providers: Trusted vendors (e.g., Supabase for database hosting, Stripe for payments, Google for authentication and calendar integration, PostHog for product analytics) who process data on our behalf under data processing agreements.
• Legal requirements: When required by law, regulation, or valid legal process.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to confidentiality obligations.
• With your consent: For any other purpose with your explicit authorization.

5. Multi-Tenant Isolation

Each business account is logically isolated. Data belonging to one business is not accessible to other businesses on the platform. Access within a business is controlled by the roles you configure.

6. Data Retention

We retain account and Customer Data for as long as your account is active or as needed to provide the Service. After account termination, data is retained for a reasonable period to allow export, then deleted. Usage logs are retained for a shorter period for operational purposes.

7. Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Cookies and Tracking

We use cookies and similar technologies to maintain sessions and remember your preferences. We use PostHog to understand how account holders use the Service, such as which pages they visit and whether they finish setting up their business. PostHog may also record how account holders move through the Service, with what you type and your customers' details hidden. This does not include the content of requests, messages or payments, and it does not run on booking forms embedded on our customers' websites. If you are in Canada or the United States and reach us through one of our Google ads, PostHog keeps the ad's click identifier with your account, and once you finish setting up a business we send Google Ads that identifier and the time of setup so we can tell which ads work. We do not send Google your name, email or business details, and we do not load advertising scripts on the Service. You can control cookies through your browser settings, though disabling them may affect Service functionality.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your personal data.
• Export your data in a portable format.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.

To exercise these rights, contact us at privacy@honeytask.io. We will respond within 30 days.

10. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, contact us and we will delete it promptly.

11. International Transfers

Our infrastructure is hosted primarily in the United States. If you access the Service from outside the US, your information may be transferred to and processed in the US or other countries. We take steps to ensure appropriate safeguards are in place for such transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or a notice within the Service. Continued use after the effective date constitutes acceptance of the updated policy.

13. Contact

For privacy questions or concerns, contact us at privacy@honeytask.io.