Legal
Privacy Policy
Effective date: 7 August 2026
Who operates TaskDispatch
TaskDispatch is operated by DATCRAZY LLP, an Indian Limited Liability Partnership (GSTIN 22AASFD4221E1ZU), registered at 105, MM Silver Plaza, G.E. Road, Raipur, Chhattisgarh - 492001, India. This policy covers the website, the app, and the AI connections you make from it. Questions about it go to hello@datcrazy.co.
What we collect
Only what the service needs to run. Four kinds of data, plainly:
Account details — your name, your email address, and a password stored as a one-way hash. We never see or store your password in plain text.
Content you create — projects, tasks, comments, and file attachments you upload. This is the work itself, and it is only ever used to run the board.
Usage data — which pages and endpoints are used, error logs, and the technical data needed to keep the service working.
Connection metadata for MCP — when you connect an AI client, we record which kind of client it is, the client name you choose to show, and timestamps of when it connected and worked.
What we do not collect
Payment details. We have no billing system today — everything is free, and nothing here asks for a card.
Location data, your contacts, or any data from files you have not uploaded. What you do not give us, we do not take.
Why we process it
To run the service — authentication, email notifications, dispatching tasks to people and AI.
To improve it — we look at usage patterns to make the board better for small teams.
To keep it secure — error logs and abuse detection help us protect your account.
We do not sell your data, and we do not use it for advertising.
Where it is stored
Your data is stored on a private VPS in the United States, in a Postgres database. File attachments are stored on the same server. We do not use third-party cloud storage for your data.
Service providers
Cloudflare — our CDN and DNS provider. Cloudflare sees network-level data in transit; see cloudflare.com/privacy for how they handle it.
Resend — our transactional email provider. Verification and notification emails are sent through Resend; see resend.com/privacy for how they handle it.
MCP AI clients you connect — when you connect an AI client (for example Claude Code) to your account, task data is exchanged with that client's provider, under their privacy policy, not ours. This happens only through your own action of connecting the client; we never send your data to any AI provider on our own.
Analytics — optional usage analytics via Google Analytics if you enable it in your account settings. It is off by default.
AI connections, explained plainly
TaskDispatch talks to AI through MCP (the Model Context Protocol) using OAuth. When you connect, you authorize one specific AI client. That client can read and create tasks in your account — no more than what you could do yourself — and nothing else. You stay in control: disconnect the client at any time and the connection is revoked immediately.
Cookies and local storage
We store a session token so you stay logged in, and your theme preference (light or dark). Both live in your browser's storage. We set no advertising cookies, and we do not track you across other sites.
Data retention
Your data stays on the service until you delete it. To delete your account, email hello@datcrazy.co and we will remove your projects, tasks, comments, and uploads within 30 days. Backups may retain your data for up to 14 days beyond that, after which it is gone.
Your rights
You can access, correct, export, or delete your data at any time, and you can withdraw consent for any processing at any time — just email hello@datcrazy.co. We honour Indian law, including the Information Technology Act, 2000, and, for users in the EEA, the GDPR — in substance. The rights above apply to everyone, regardless of where you are.
Children
TaskDispatch is not for anyone under 16. If you believe a child's data is on the service, tell us at hello@datcrazy.co and we will remove it.
Security
We encrypt traffic in transit (TLS), store passwords as bcrypt hashes, give the database the least-privilege access that can run the service, and take daily encrypted backups. No system is perfect — if a breach affects your data, we will disclose it as required by law and in plain language.
Changes
If a material change is coming, we will email account holders before it takes effect, so you can decide before it applies to you.
Contact
Privacy questions, data requests, or anything else — write to hello@datcrazy.co. We read everything and reply within two business days.