Legal
Privacy Policy
Effective date: 7 August 2026
Who operates TaskDispatch
TaskDispatch is operated by DATCRAZY LLP, an Indian Limited Liability Partnership (GSTIN 22AASFD4221E1ZU), registered at 105, MM Silver Plaza, G.E. Road, Raipur, Chhattisgarh - 492001, India. This policy covers the website, the app, and the AI connections you make from it. Questions about it go to hello@datcrazy.co.
What we collect
Only what the service needs to run. Five kinds of data, plainly:
Account details — your name, your email address, and a password stored as a one-way hash. We never see or store your password in plain text.
Content you create — projects, tasks, comments, and file attachments you upload. This is the work itself, and it is only ever used to run the board.
Usage data — server logs: errors, and basic request information (which API endpoint a call hit — the kind a web server records on its own). We keep them only to run the service, find faults, and keep it secure.
MCP connection records — when you connect an AI client, we record which client you authorized (its identifier, and the name it declares itself) and the scopes it was granted, and we hold its access and refresh tokens on our own server while the connection is active. We do not track when or how often the client is used.
Newsletter email — the address you give the product updates form in the footer. We keep it on our own server, with the time you signed up, and use it only to send occasional product updates. It never goes to a third-party email platform. There is no self-service unsubscribe yet — to leave the list, write to hello@datcrazy.co and we will remove your address.
What we do not collect
Payment details. We have no billing system today — everything is free, and nothing here asks for a card.
Location data, your contacts, or any data from files you have not uploaded. What you do not give us, we do not take.
Why we process it
To run the service — authentication, email notifications, dispatching tasks to people and AI.
To improve it — the logs we keep show us where the service breaks, so we can make the board better for small teams.
To keep it secure — error logs and rate limits on sign-in and upload endpoints help us protect your account.
To send product updates — if you are on the newsletter list, we email you a short note when new capabilities land.
We do not sell your data, and we do not use it for advertising.
Where it is stored
Your data is stored on a private VPS in the United States, in a Postgres database. File attachments are stored on the same server. We do not use third-party cloud storage for your data.
Service providers
Cloudflare — our CDN and DNS provider. Cloudflare sees network-level data in transit; see cloudflare.com/privacy for how they handle it.
Resend — our transactional email provider. Verification and notification emails are sent through Resend; see resend.com/privacy for how they handle it.
MCP AI clients you connect — when you connect an AI client (for example Claude Code) to your account, task data is exchanged with that client's provider, under their privacy policy, not ours. This happens only through your own action of connecting the client; we never send your data to any AI provider on our own.
AI connections, explained plainly
TaskDispatch talks to AI through MCP (the Model Context Protocol) using OAuth. When you connect, you authorize one specific AI client. That client can read and create tasks in your account — no more than what you could do yourself — and nothing else. You stay in control: disconnect the client at any time and the connection is revoked immediately.
Cookies and local storage
We store a session token so you stay logged in, and your theme preference (light or dark). Both live in your browser's storage. We set no advertising cookies, and we do not track you across other sites.
Data retention
Your data stays on the service until you delete it. To delete your account, email hello@datcrazy.co and we will remove your projects, tasks, comments, and uploads within 30 days. Backups may retain your data for up to 14 days beyond that, after which it is gone.
Your rights
You can access, correct, export, or delete your data at any time, and you can withdraw consent for any processing at any time — just email hello@datcrazy.co. We honour Indian law, including the Information Technology Act, 2000, and, for users in the EEA, the GDPR — in substance. The rights above apply to everyone, regardless of where you are.
Children
TaskDispatch is not for anyone under 16. If you believe a child's data is on the service, tell us at hello@datcrazy.co and we will remove it.
Security
We encrypt traffic in transit (TLS), store passwords as bcrypt hashes, give the database the least-privilege access that can run the service, and take daily encrypted backups. No system is perfect — if a breach affects your data, we will disclose it as required by law and in plain language.
Changes
If a material change is coming, we will email account holders before it takes effect, so you can decide before it applies to you.
Contact
Privacy questions, data requests, or anything else — write to hello@datcrazy.co. We read everything and reply within two business days.