Draft, not yet reviewed by a lawyer
Everything highlighted below is a decision Bottleneck still has to make. This notice and those highlights come out together, once the details are filled in and someone qualified has read it.
Task Harbor
Privacy policy
Last updated [date]
Every section says what we do in the proper terms, then what that means for you. The terms are there because vague language reads as evasive to anyone who knows what to look for. The explanations are there because you should not need a legal background to understand what happens to your work.
Who we are
Task Harbor is operated by [legal entity name] of [registered address]. For anything in this policy, write to [email protected].
If you use Task Harbor because your employer set it up, your employer is the data controller and we are the processor acting on their instructions.
Why that matters to you
It decides who you ask about your own data. If your company put you in Task Harbor, they decide what happens to your records and we do what they ask. Speak to them first. If you cannot reach them, write to us and we will help.
What we hold
Your account. Your name, your email address, the harbor you belong to, and your rank in it.
Your work. Tasks you create or carry, the definition of done, instructions, comments, files you attach, due dates, and the Signals that close each loop.
Your day. End of day reports you compile and send, and the note or blocker you add to them.
When you were last here. A single timestamp, updated while Task Harbor is open in front of you.
Why that matters to you
That last one is the only thing in Task Harbor that could be mistaken for monitoring, so it is worth being exact. We store one moment in time: the last time the app was open and active. We do not record which pages you visited, how long you stayed, what you typed, or how many tasks you closed in an hour. It exists so a colleague can tell whether you are reachable right now, and it shows as a green dot or a grey one. Never a red one, because being asleep in another timezone is not a fault.
A record of what changed. Who moved a task, who approved work, who called something off and the reason they gave, and when each happened.
Why that matters to you
This is deliberate and it cuts both ways. It means finished work keeps your name on it and nobody can quietly rewrite what was agreed. It also means your own actions are recorded. That is the trade the product is built on: accountability only works if it is not selective.
Where it lives, and who can reach it
Task Harbor enforces tenant isolation using row level security in the database. Every read and write is evaluated against the harbor you belong to, in Postgres, before any data is returned.
Why that matters to you
Most software decides who sees what inside the application, which means one bug in the application can leak data between customers. Ours decides one layer below, in the database itself. Even if we wrote the application wrong, another company's harbor stays shut to you, and yours stays shut to them.
Data is held in [region] and encrypted in transit and at rest by our infrastructure providers.
Companies that touch your data
These are our sub-processors. A sub-processor is a company we rely on to run Task Harbor, which therefore handles some of your data on our behalf.
| Who | What they do | What they see |
|---|---|---|
| Supabase | Database, sign in, file storage | Everything you store in Task Harbor |
| Vercel | Hosting | Requests to the site, technical logs |
| Postmark | Sending email | Names and addresses we email, and what those emails say |
| Anthropic | The Skipper | The text you hand him, set out below |
Why that matters to you
The one worth your attention is Anthropic, and burying it in a list would be the easy thing to do. So, plainly, here is exactly what he is sent.
The Skipper, and what he is sent
The Skipper is built on Anthropic's Claude models. Text is sent to Anthropic when, and only when, one of these happens:
- You ask him to sharpen a task. He receives what you typed, and the name of the person it is going to if you chose one.
- You ask him to draft or update a route. He receives your description of how the job is done.
- You open the Compass. He receives your harbor's counts: signals sent, the on-time percentage, how many tasks are drifting. Not the tasks themselves.
- You talk to him in the Skipper panel. He receives what you write, and a short summary of your harbor: its name, your designation, how much work is open.
Nothing else is sent. Your files are never sent. Comments are never sent. Other people's tasks are never sent.
Anthropic does not use data submitted through their API to train their models. [verify against Anthropic's current terms]
Why that matters to you
Every one of those features works with the model switched off. Sharpening falls back to a written brief. The Compass falls back to a plain reading of your own numbers. If your work is sensitive enough that you would rather no task text ever left, you lose the polish and keep the product. Ask us and we will turn it off for your harbor.
Bringing a board across from another tool
When you import through Come Aboard, the file you choose is read in your own browser. It is not uploaded to our servers and we never hold a copy of it. We receive only the rows you approve on the preview screen, and only the columns you mapped.
Why that matters to you
A ClickUp or Asana export usually carries far more than you intend to hand over: client names, internal notes, things written years ago by someone who has left. None of that reaches us unless you mapped a column for it and approved it on screen. A column set to do not import is never read.
Each imported task keeps its original title and description exactly as they arrived, alongside anything edited since.
Why that matters to you
Trust in an import dies the first time somebody finds a task that no longer says what they wrote. The original is kept so you can always see what came across.
How long we keep it
Completed work, called off work, and the record of what changed are retained for as long as your harbor exists.
Why that matters to you
This is a design decision, not laziness. A Signal is a claim that work was done and the right people were told. That claim is worthless if the record can be quietly removed later. So finished work stays, and work that was called off keeps the reason it stopped.
A task nobody has touched can be deleted outright. Once it has comments, files, or a Signal on it, deleting is no longer offered and calling it off is offered instead. When a crew member is stood down, their name stays on the work they finished and their account is unlinked so they can return later.
If your harbor is closed, we delete your data within [retention period], other than anything we are required to keep by law.
What you can ask us for
You can ask us to show you the data we hold about you, correct it, export it, or delete it. Write to [email protected] and we will answer within [response window].
Why that matters to you
One honest limit. If you ask us to erase you from a harbor you share with colleagues, we can remove your account and your personal details, but we cannot remove the fact that work was assigned, reviewed, and completed. That record belongs to your company as much as to you, and removing it would take their history with it. We will tell you exactly what we can and cannot remove before we do anything.
Depending on where you live you may have further rights under the GDPR, the UK GDPR, or the CCPA. [confirm which apply with counsel]
Cookies and sign in
We set a session cookie so you stay signed in. We do not use advertising cookies, tracking pixels, or third party analytics that follow you around the internet.
Why that matters to you
There is no cookie banner because there is nothing to consent to beyond keeping you signed in.
Children
Task Harbor is a tool for businesses and is not intended for anyone under 16.
Changes to this policy
If we change what we collect or who we send it to, we will say so in the app rather than only updating this page quietly.
Contact
[email protected]
[legal entity name], [registered address]
Task Harbor, powered by Delegation Intelligence.