Privacy notice

1. Who is responsible

The controller for the processing described here is:

• [Company legal name and legal form]
• [Registered address, postcode, city, country]
• Company register: [register court / KRS or equivalent, number]; VAT ID: [VAT ID]
• Privacy contact: privacy@task.cloud
• Data protection officer: [not appointed / name and contact, if Art. 37 GDPR applies]

Full company details are in the imprint.

2. What we collect and why

2.1 Visiting this website

The site is static HTML. It loads no analytics, no advertising or social media scripts, and no third-party fonts: fonts and images are served from our own domain. Our web server (or hosting provider) records technical access logs: IP address, date and time, requested URL, HTTP status, referrer and browser user agent.

• Purpose: delivering the site, detecting abuse and fixing errors.
• Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).
• Retention: [14] days, then deleted, unless needed to investigate a specific security incident.

2.2 Joining the waitlist

When you submit the waitlist form we store: your email address, and optionally your company name, the kind of workload you selected, the expected number of concurrent VMs and the free-text description you entered. We also store that you gave consent, which version of the consent text you saw, the page you submitted from and the time of submission.

• Purpose: contacting you about the private beta (invitation, onboarding questions) and understanding which workloads to prioritise.
• Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time by emailing privacy@task.cloud; withdrawal does not affect processing before it.
• Not stored: your IP address is used only in memory for a few minutes to limit repeated submissions (spam protection) and is not written to the waitlist file.
• No marketing newsletter. We do not add you to a newsletter or share the list with anyone. If we ever want to send you anything beyond the beta, we will ask separately.

2.3 Emailing us

If you write to us, we process your email address, name and the content of your message to answer you (Art. 6(1)(b) GDPR where it concerns a contract or pre-contract steps, otherwise Art. 6(1)(f)).

2.4 Using the service (once accounts open)

When you create an account we will process account data (name, email, organisation, authentication data), billing data (handled by our payment provider; we do not store full card numbers), usage records (VM IDs, start/pause/stop times, sizes, storage) needed for per-second billing, and support communication. Legal basis: performance of the contract (Art. 6(1)(b)) and legal obligations such as tax and accounting (Art. 6(1)(c)).

Data that you or your users put inside sandboxes (files, memory snapshots, logs) is processed by us on your behalf as a processor. That is governed by our data processing agreement, not by this notice.

3. Cookies and local storage

This website sets no cookies and uses no tracking technologies. The waitlist form uses your browser's local storage for two things only:

• remembering that you already signed up, so the form is not shown again;
• if our server cannot be reached when you submit, keeping your entry in your browser and re-sending it the next time you open the site.

This data stays on your device until it is sent or you clear your browser's site data. It is not read by any third party. We consider it strictly necessary to provide the form you asked to use. [Legal review: confirm assessment under Art. 5(3) ePrivacy Directive / national implementation.]

4. Service providers (processors)

We use a small number of providers who process data on our behalf under Art. 28 GDPR contracts:

We will keep this list current and announce changes for customers as described in the DPA.

5. Transfers outside the EU/EEA

Our servers are in the EU. If a provider transfers personal data outside the EU/EEA (for example a payment provider's group companies), we rely on an adequacy decision (such as the EU–US Data Privacy Framework for certified companies) or the European Commission's Standard Contractual Clauses. [Confirm per provider.]

6. How long we keep data

• Waitlist entries: until you withdraw consent, or at the latest [12 months] after the public launch of paid plans, whichever comes first.
• Web server logs: [14] days.
• Account and usage data: for the duration of the contract, then deleted within [30] days, except records we must keep for tax and accounting ([5 years in Poland / per applicable law]).
• Emails: as long as needed to handle the matter, at most [2 years] after the last contact unless a contract requires longer.

7. Your rights

Under the GDPR you have the right to access your data, have it corrected or deleted, restrict or object to processing, receive it in a portable format, and withdraw consent at any time. To exercise any of these, email privacy@task.cloud. We answer within one month.

You can also lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where the controller is established ([e.g. Prezes Urzędu Ochrony Danych Osobowych, Poland — confirm]).

We do not use your data for automated decision-making or profiling with legal or similarly significant effects.

8. Security

The waitlist file is stored on EU servers with access limited to the team, transmitted only over HTTPS, and backed up encrypted. Our approach to isolating customer workloads is described on the security page.

9. Changes

We will update this notice when our processing changes and change the date at the top. Material changes affecting waitlist members will be announced by email.