1. Scope and who is responsible
This Privacy Policy applies to WarpTasks and the services available through warptasks.com, including company registration, employee task management, subscriptions, notifications, reports, uploads, support and mobile or installed-web experiences (collectively, the “Service”).
For company-account, billing, website and platform-administration data, WarpTasks determines why and how the information is processed. For employee records, client information, task content, comments, attachments and other workspace content entered by a subscribing company, that company generally determines the purposes of processing and WarpTasks processes the information to provide the Service. Employees should first direct workplace-data questions to their employer or workspace administrator.
2. Information we collect
Information provided directly
- Names, business email addresses, mobile numbers, usernames, employee identifiers, job titles, departments and joining dates.
- Company name, legal name, address, GSTIN, logo, timezone and subscription selections.
- Tasks, descriptions, deadlines, progress, comments, approvals, client records, categories, reports, internal notes and uploaded files.
- Support communications, privacy requests and feedback sent to us.
Information generated automatically
- IP address, browser and device information, timestamps, session events, login history, failed-login attempts and security logs.
- Task history, notification delivery state, activity records, subscription state, payment references and webhook-processing results.
- Basic website and application usage needed for performance, reliability, fraud prevention and troubleshooting.
Information received from others
Company administrators may provide employee and client information. Razorpay may provide payment status, subscription identifiers, invoice references, payment method type and transaction results. We do not require or intentionally store complete card numbers, CVV values, UPI PINs or internet-banking credentials.
3. How we use information
- Create, verify, administer and secure accounts and company workspaces.
- Deliver task assignment, collaboration, approval, reporting, reminder and notification functions.
- Authenticate users, enforce roles and tenant isolation, prevent abuse and investigate security incidents.
- Process trials, subscriptions, renewals, cancellations and payment reconciliation.
- Send OTPs, invitations, password-reset messages, task notices, billing notices and important service communications.
- Maintain backups, diagnose errors, measure capacity and improve usability and performance.
- Comply with applicable law, respond to lawful requests and establish or defend legal claims.
- Generate aggregated or de-identified operational insights that do not reasonably identify an individual.
We do not use workspace content to advertise to employees, and we do not sell or rent personal data.
4. Grounds for processing
Depending on the relationship and applicable law, processing may be necessary to perform a contract, take requested pre-contract steps, comply with law, protect the Service and its users, pursue legitimate operational interests, or act on consent. Where consent is the applicable basis, it may be withdrawn, although withdrawal does not invalidate processing already performed and may prevent certain features from operating.
WarpTasks intends to handle digital personal data consistently with applicable Indian law, including the Digital Personal Data Protection Act, 2023 and rules brought into force under it.
6. Payments and Razorpay
Subscription payments are processed through Razorpay. When a user opens Razorpay Checkout, payment data is submitted to and processed by Razorpay under its own terms and privacy notices. WarpTasks may receive and store transaction amounts, currency, status, invoice or payment identifiers, subscription identifiers, payment-method category and timestamps for accounting, access control, support and fraud prevention.
WarpTasks does not store full card credentials or authentication secrets. Users should review Razorpay’s Privacy Policy.
8. Data retention
We retain personal data only for as long as reasonably required to provide the Service, maintain security and audit trails, comply with accounting or legal obligations, resolve disputes and enforce agreements. Active workspace content is generally retained while the company account remains active. After termination or a valid deletion request, data may remain for a limited period in backups or legally required records before secure deletion or anonymisation.
Payment and tax-related records may be retained for legally required periods. Security logs, invitation records, OTP records and reset tokens may be retained for shorter operational periods or converted into non-reusable audit records.
9. Security
We use measures designed to protect data, including HTTPS, password hashing, role-based access controls, tenant-level data isolation, CSRF protection, session expiry, account locking, signed payment callbacks, webhook signature checks, restricted uploads and activity logging. Access is limited to those who need it for authorised purposes.
No online service can guarantee absolute security. Users must use strong unique passwords, protect devices and credentials, configure employee access appropriately and notify us promptly of suspected compromise at info@warptasks.com.
10. Access, correction, deletion and grievances
Subject to applicable law and the role of the relevant company, an individual may request information about processing, correction or completion of inaccurate data, deletion of data no longer required, withdrawal of consent where applicable, and grievance resolution. We may need to verify identity and authority before acting.
Employees whose information was supplied by an employer should normally submit the request to their company administrator. WarpTasks will reasonably assist customer companies in responding. Some information may be retained where required by law, necessary for security or needed to establish or defend legal claims.
11. Customer-company responsibilities
Each company using WarpTasks is responsible for having a lawful basis and appropriate notices or permissions for employee, contractor and client information it enters. Companies must limit collection to legitimate workplace purposes, assign appropriate roles, keep account information accurate, respond to their users’ requests and avoid uploading unlawful, excessive or highly sensitive information not required for task management.
12. International processing
Service providers may process information in locations different from a user’s own. Where required, we will use contractual or other safeguards and will not transfer personal data to a country or territory prohibited under applicable Indian law. Customers are responsible for assessing any additional transfer restrictions applicable to their workforce or industry.
13. Children
WarpTasks is a workplace service intended for businesses and authorised working users. It is not directed to children. Companies must not create accounts for children or submit children’s personal data unless legally permitted and all required parental or guardian permissions and safeguards are in place.
14. Changes to this Policy
We may update this Policy to reflect changes in law, technology or the Service. The updated version will be posted with a revised date. Where a change materially affects how personal data is used, we will provide additional notice through the Service or email where reasonably practicable and obtain fresh consent where required.
15. Contact
For privacy questions, rights requests, complaints or security concerns, contact WarpTasks exclusively by email: