Privacy Policy

This policy explains what EstimateTask does with personal data. EstimateTask is a service of Seventeen Soft d.o.o., Zivka Davidovica 88, 11000 Belgrade, Republic of Serbia, which is the controller and is reachable at hello@estimatetask.com.

Two different relationships are covered here. For your account data (your email address, your name, your sessions) we decide what happens and we are the controller. For the content inside a workspace (projects, tasks, votes, guest names) the workspace's manager decides, and we act on their instructions as a processor. If your data is in someone else's workspace, ask them first; we will help them answer you.

What we collect

Account. Your email address and password, held by our authentication provider, which stores only a hash of the password, never the password itself. Your first name, last name and display name, an optional avatar image, your role in the workspace (manager or member) and your role group.

Workspace. The workspace name, its URL slug, an optional logo, the billing email and default timezone, and the plan it is on.

Work content. Projects, tasks and their descriptions, custom estimation scales, voting sessions and every vote in them: the value, who cast it, and when. Votes are hidden until a manager reveals them, and after the reveal they are shown with the voter's name to everyone in that room, including guests. Statistics, exports and history are computed from the same records.

Invitations and share links. The email address a manager invites, and the guest display name and optional role group someone enters when joining through a share link. Invitation and share-link tokens are stored only as a hash; the raw token exists only in the link itself.

Sessions. Our authentication provider records, per active session, the IP address and the browser user agent, plus when the session started and was last used. You can see and revoke your own sessions in Settings, Security.

Preferences. Your notification, sound and timer preferences, and the workspace theme, which the manager sets for everyone.

Messages you send us. What you write in the contact form, and the email address you give the waitlist. Both are delivered to our inbox by email; the waitlist is not stored in a database.

Analytics. We use Vercel Web Analytics, which counts page views without cookies and without building a profile of you. It does not identify you and we cannot use it to follow you across other websites.

We do not run advertising trackers, we do not sell personal data, and we do not share it for anyone else's marketing.

Payment data

Paid plans are sold by Paddle.com Market Ltd as Merchant of Record. Your card number, billing address and tax identifiers are entered into Paddle's checkout and are held by Paddle as its own controller, under its privacy policy. We never see or store a card number. What we store is the Paddle customer and subscription identifier, the plan, its status and the current period dates, which is what tells the app which features to unlock.

Why we are allowed to use it

Under the GDPR we rely on:

• Performance of a contract, for everything needed to give you an account, run your workspace and keep your plan working.
• Legitimate interests, for keeping the Service secure and abuse-free, for aggregate analytics, and for answering the messages you send us. We keep this narrow: session IP and user agent exist so you can spot a session you do not recognise and revoke it.
• Consent, for browser notifications, which your browser asks you about separately and which you can withdraw at any time in your browser or in Settings, and for the waitlist email.
• Legal obligation, for records our accounting and tax rules require, and Paddle's own invoicing and tax duties as the seller.

Who else processes it

Where a provider processes data outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses under that provider's data processing agreement.

Images are served publicly

Avatars and workspace logos are stored in public buckets so that they load for teammates, for guests in a shared room and on the invite page, without a sign-in. The URL is long and unguessable, but anyone who has it can open the image without being logged in. Do not use a photo you would not put on a public page.

How long we keep it

• Voting history is visible for as long as your plan allows: 30 days on Free, 90 days on Mid, and indefinitely on Top and during the trial.
• Account and workspace data are kept while the account exists.
• Invitations are kept until they are accepted, revoked or expire.
• Share links expire on the date the manager set and can be revoked earlier.
• Contact and waitlist messages stay in our mailbox until we no longer need them, and at most 24 months.
• Billing records are kept by Paddle for as long as tax law requires it, typically 10 years.
• Backups of the database roll over within 30 days, so deleted data can survive that long in a backup before it is overwritten.

Deleting your data

You can delete your own account in Settings, Security. That removes your profile and your login, and your votes are deleted with it. It is immediate and cannot be undone. A manager cannot delete their account while they still manage a workspace: they must first make someone else a manager, or delete the workspace, which deletes its projects, tasks, voting history, share links and member profiles.

Guests do not have an account. A workspace manager can remove a guest voter and their votes from the project.

Your rights

If the GDPR or Serbian data protection law applies to you, you may ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or receive it in a portable format, and you may withdraw a consent at any time. Some of this is already self-service in the app: your profile and preferences are editable, sessions are revocable, history is exportable to CSV, and the account is deletable.

Write to hello@estimatetask.com and we will answer within 30 days. If the data lives in a workspace someone else manages, we will pass the request to them. You can also complain to your national supervisory authority, or in Serbia to the Commissioner for Information of Public Importance and Personal Data Protection.

Security

Tenant isolation is enforced in the database itself with row level security, not only in the application, so one workspace cannot read another's rows even if the application is wrong. Invitation and share-link tokens are stored hashed. All traffic runs over HTTPS. Passwords are hashed by our authentication provider and are never visible to us. Administrative database access is limited to a small set of server-side operations, such as creating a workspace, accepting an invitation, the billing webhook and the nightly trial job.

No system is perfectly secure. If a breach affects your personal data and is likely to be a risk to you, we will notify you and the supervisory authority as the law requires.

Cookies

The Service sets only the cookies its authentication needs to know that you are signed in, plus a short-lived cookie during a password reset or an invitation. There are no advertising or profiling cookies, and our analytics does not use cookies at all. Clearing these cookies signs you out.

Children

The Service is for work, and is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child has given us data, write to us and we will delete it.

Changes

We may update this policy. The "Updated" date above is always the current version, and if a change matters to you we will tell you by email or in the app before it takes effect.

Contact

hello@estimatetask.com, or Seventeen Soft d.o.o., Zivka Davidovica 88, 11000 Belgrade, Republic of Serbia.