Privacy Policy

When you visit our website without creating an account, we collect minimal data:

We do not sell your browsing data.

When you apply for and participate in our beta program, we collect additional data to manage your account and provide support:

When you register for a free trial, we collect the same account information as described in the Beta Testers section above. We store limited trial, activation, and device information to manage access and prevent abuse. Trial information is stored securely on your device.

After your trial, access to the app requires a valid license. Your data remains on your device and is never deleted by us. You may receive a limited number of follow-up emails (see Automated Email Communications below). You can request full account deletion at any time.

When you purchase a PrimeTask license, we collect the same account information as described above, plus:

When you subscribe to our newsletter, sign up for launch notifications, or opt in to product updates, we collect the following:

• •Email address (required)
• •Name (optional, if provided)
• •Consent record: When you agreed to receive communications

We may share public feedback forms (surveys, polls) that anyone can respond to without creating an account. Here's what we collect and why:

You may receive a limited sequence of onboarding or follow-up emails based on your engagement level. We may measure engagement such as opens and link clicks. We may also test different subject lines to improve relevance.

Legal basis: Legitimate interest, sending relevant, timely communications to improve user experience.

The PrimeTask portal includes community features where you can share feedback, vote on features, and interact with other users.

When you activate PrimeTask on a device, we collect limited technical information for license management and fraud prevention. This data is retained for the lifetime of your account and deleted upon account deletion.

You can manage your devices from the app or by contacting support.

PrimeTask may connect to update services when update-related actions are initiated. When you use update-related features, we may store limited technical information such as your current app version, update time, and update source for licence management, security, and support analytics. No productivity data is transmitted as part of this process.

Unsplash is a service by Unsplash Inc. For their privacy practices, see the Unsplash Privacy Policy.

User-selected links and embedded content

PrimeTask lets you choose to add hyperlinks and content from third-party services to your locally stored tasks, notes, projects, and workflows. This can include YouTube videos, X posts, remotely hosted images, and links to other websites. PrimeTask does not select, host, control, or moderate that third-party content.

Your choice and responsibility. You decide which third-party links or content to add and use. You are responsible for ensuring that the content and your use of it comply with applicable law, intellectual-property rights, and the third party's terms. PrimeTask provides the linking and embedding tools but is not responsible for the availability, accuracy, legality, or content of the external service.

External links. A normal hyperlink does not connect to the destination merely because it is stored in PrimeTask. When you choose to open it, the destination service receives the connection from your device and processes information under its own privacy policy.

Embedded content. When an embedded item is displayed or played, PrimeTask loads it from the relevant third-party service. The provider may receive the content identifier or URL requested, your IP address, device or browser information, and technical information associated with the request. Depending on the provider and your settings, it may also use cookies or similar technologies and process your interaction with its content. This processing is controlled by the third-party provider under its own terms and privacy policy.

PrimeTask does not send your PrimeTask account email, tasks, projects, or other locally stored productivity data to these providers as part of the embed request, except for the third-party URL or content identifier that you chose to add and the technical information necessarily transmitted by your device when requesting the content.

For information about two services PrimeTask can display:

• •YouTube content is provided by Google and YouTube under the Google Privacy Policy and YouTube Terms of Service.
• •X content is provided under the X Privacy Policy and X Terms of Service.

If you do not add, open, display, or play third-party content, PrimeTask does not request that content from the relevant provider.

PrimeTask offers optional sync features. These are fully opt-in: if you don't enable them, your data stays on one device only.

Payments are processed securely by Stripe.

Where Stripe Payments Europe Limited is the merchant of record for your purchase, Stripe (not TaskCore LTD) is the counterparty to the sale for tax and consumer-law purposes, and customer billing data is processed by Stripe under its own controller arrangements. See the Sub-Processors section below.

This section applies when you apply to or participate in the PrimeTask Affiliate Program. It also explains the limited referral, attribution, and fraud-prevention information we process when a visitor follows an affiliate referral link, uses an affiliate promo code, or completes an attributed purchase. It supplements the rest of this Privacy Policy and the Affiliate Agreement.

Affiliate and applicant information. If you apply to or join the Program, we process: your name and email address; your application details; payout-provider identifiers; your commission and payout history; our communications with you; your declared tax residence; your tax-form status; and the totals we are required to report to tax authorities.

Referred visitors and customers. When a visitor follows an affiliate referral link, uses an affiliate promo code, or completes an attributed purchase, we process the referral or promo code used, the attribution outcome for that browsing visit, and fraud-prevention signals: IP address, referring URLs, click timing, and limited payment-method risk signals supplied by our payment provider. We do not place an affiliate tracking cookie, and referral-link attribution is limited to the same browsing visit; a later visit is not linked to an earlier referral link. Affiliates are never shown the identity or payment details of referred customers. We do not store card numbers, CVV codes, expiry dates, or billing addresses.

Payout providers. Payouts are made through Stripe, using either Stripe Connect Express or Stripe Global Payouts depending on your account. Stripe collects and holds the identity, bank, and verification information needed to pay you, under Stripe's own privacy documentation.

Tax forms. Where a US tax form is required for your payout route, it is collected and held by a specialist provider rather than by us. Depending on your route, that is Stripe, or the Track1099 service operated by Avalara, Inc. This includes Form W-9 for US persons and Forms W-8BEN and W-8BEN-E used by non-US affiliates to certify non-US status, so Track1099 can hold documentation about non-US affiliates where that form is required. We do not ordinarily receive or store your signed tax form or taxpayer identification number through that integration. What we keep is deliberately limited: whether a valid form is on file, which type of form it is, when it was collected, an opaque reference number for the provider's record, and the payment totals we must report.

Why we process this information. We process affiliate data to operate the Program and pay you (performance of the Affiliate Agreement); to prevent fraud and protect the Program, including the referred-visitor signals above (our legitimate interests); to keep the financial records and perform the sanctions and tax checks UK law requires of us (legal obligation); and to verify tax status and make non-UK information filings where we are the payer (performance of the agreement and our legitimate interests).

How long we keep it. Fraud-prevention signals are kept for up to 3 years. Financial records are kept for at least 6 years, as UK company and VAT law requires. Tax forms and filings held by Stripe or Track1099 are kept for the periods their tax-law obligations require, which may be at least 4 years after the relevant payment or filing.

International transfers. Stripe may process payout, identity, and tax information in the United States or other supported locations, under the UK-US Data Bridge where in force and otherwise under Standard Contractual Clauses with the UK Addendum. Where Track1099 is used, it receives only the tax information described above, under a transfer mechanism permitted by UK data-protection law.

Your rights. Your rights under UK data-protection law, and how to exercise them, are set out in the “Your rights” section of this Privacy Policy. Some affiliate records are subject to the legal retention periods above. Contact privacy@primetask.app.

The affiliate program is invitation-only and governed by a separate Affiliate Agreement.

We use the following sub-processors to deliver the service. Each is bound by a written processing agreement that requires equivalent technical and organisational safeguards.

Retention: Track1099 retains tax-identification documents and 1099-NEC filings for at least 4 years after the last payment, in line with IRS recordkeeping requirements.

Most of your personal data is stored and processed inside the United Kingdom and the European Economic Area. Where a sub-processor (such as Cloudflare or Svix) operates global infrastructure, or where our website hosting and analytics provider is based in the United States, transfers outside the UK and EEA are protected by the EU Standard Contractual Clauses (Commission Implementing Decision (EU) 2021/914) supplemented by the ICO International Data Transfer Addendum (B.1.0, in force 21 March 2022), or by a sub-processor's active self-certification to the UK Extension to the EU-US Data Privacy Framework where in force, with supplementary safeguards where appropriate.

Where your affiliate payouts are processed via Stripe Global Payouts and you are subject to US tax-information-reporting rules, or where a W-8BEN or W-8BEN-E certification of non-US status is required for your payout route, the relevant tax-form information (name, address, taxpayer identification number where applicable, aggregate annual commission amount, and the tax-form record itself) is shared with Track1099 (Avalara, Inc., United States) for the sole and limited purpose of preparing, filing, and delivering the applicable IRS documentation, and holding the certification form. This includes affiliates who are not US persons where a W-8BEN or W-8BEN-E is required. No personal data of affiliates whose payouts are processed via Stripe Connect Express (where Stripe handles the tax-form flow directly) is transferred to Avalara, Inc. for these purposes. That transfer is made under the EU Standard Contractual Clauses (Modules 1 and 2 as applicable) supplemented by the ICO International Data Transfer Addendum executed with Avalara, Inc. We have completed a transfer risk assessment (the data protection test under Article 45A of the UK GDPR, inserted by the Data (Use and Access) Act 2025 and in force from 5 February 2026, which continues and supersedes the framework formerly contained in section 17A of the Data Protection Act 2018) for this transfer. We will move this transfer to the UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) if Avalara, Inc. becomes actively self-certified and that certification covers the relevant data categories.

When you request a refund, we collect and process the following data to operate our refund workflow (described in our Refund Policy):

Anti-abuse signals: We maintain a record of refunds you have received in order to enforce the refund frequency limit stated in our Refund Policy. This record contains minimal numerical data and does not include refund reasons or details.

Legal basis: Contract performance (operating the refund process) and legitimate interests (preventing refund abuse). Retention follows the financial-records timeline below.

We are legally required to keep records of every purchase, refund, chargeback, and affiliate payout for a minimum period under UK accounting law:

Emails sent to refunds@primetask.app are processed through Resend (our email delivery provider) into our admin support queue. The body of your email, your sender address, and any attachments are stored alongside the corresponding transaction so support staff can review the request.

Retention: Inbound emails are retained alongside the related transaction record for the financial-records retention period (6 years). They are pseudonymised at the same time as the parent transaction if you exercise your right to erasure.

You can request account deletion at any time. Trial and unlicensed accounts can complete deletion directly through the portal dashboard or an account-deletion link in an applicable email. If your account holds an active Standard or Pro licence, we route the request through support for identity verification and confirmation of the consequences for your licence. You can also contact privacy@primetask.app. For your protection, self-service deletion from the portal requires password verification and an email confirmation code.

Under the UK General Data Protection Regulation (UK GDPR), you have the following rights: