Privacy policy

1. Controller

The controller for data processing is the operator of tasketeer.com, reachable via https://www.tasketeer.com and by email at system@tasketeer.com. Further details are in the imprint.

2. Purpose of the application

tasketeer.com is used to analyse SEO and website metrics and to organise related work processes. This includes in particular:

• Display of search performance from Google Search Console
• Display of usage and traffic data from Google Analytics
• Rankings, tasks, editorial planning and internal SEO helpers

3. Which data we collect

Account and sign-in

Access is via a magic link to a previously enabled email address. Email address, time of sign-in and session-related authentication data are processed. A password is not stored.

Google account (OAuth)

Users can optionally link their Google account to tasketeer.com. In that case the app obtains the following data via Google OAuth:

• Google user ID, name, email address and profile picture
• OAuth access token and refresh token for later API use
• Read-only Google Search Console data, in particular properties, queries, pages, clicks, impressions, CTR, positions, countries and devices
• Read-only Google Analytics data, in particular property mapping and traffic metrics

No write access to Google accounts, Search Console properties or Analytics properties is requested. tasketeer.com does not publish, delete or change Google data on behalf of users.

Usage data in the app

In addition, work data created in the app itself may be stored, for example tasks, tickets, selected properties, ranking settings or internal comments. Technical logs may include IP address, browser and time of requests to the extent required for operation and security.

4. Purposes of processing

Data is used exclusively to operate tasketeer.com:

• Sign-in and access control for invited users
• Mapping of the Google account to the respective tasketeer.com user
• Display and analysis of Search Console and Analytics metrics
• Storing the selected website/property for later sessions
• Carrying out internal SEO, content and project tasks

There is no use for advertising, no sale of data and no profiling for third parties.

5. Legal bases

Where the GDPR applies, processing is based in particular on Art. 6(1)(b) GDPR (performance of the usage contract or invitation to the app) and on Art. 6(1)(a) GDPR where users link their Google account via the OAuth consent screen or allow optional cookies via the consent banner. Storing and accessing non-essential information on the end device is also based on Section 25(1) TDDDG. Technical operational data and necessary cookies may be based on Art. 6(1)(f) GDPR or Section 25(2) TDDDG (legitimate interest in secure operation).

6. Storage, recipients and services

Account, token and work data are stored in the database used for tasketeer.com and provided via the app hosting infrastructure. The following processors or service providers may be used:

• Google Ireland Limited / Google LLC: authentication and API access
• Stripe Payments Europe Limited: payments, subscriptions and invoices
• Email delivery for magic links and notifications
• Hosting, database and file storage of the app infrastructure

Google data is retrieved only to the extent required for display in tasketeer.com. Access tokens are stored server-side so the app can query Search Console and Analytics on behalf of the user again without asking for permission each time. With whom Google user data is shared, transferred or disclosed, and which protection measures apply, is described in sections 7 and 8.

7. Sharing, transfer and disclosure of Google user data

This section states with whom we share, transfer or disclose Google user data. We do not sell Google user data. We do not transfer or disclose your information to third parties for purposes other than the ones provided here, namely providing and improving the functionality of tasketeer.com.

Google user data in this policy means the data obtained via Google OAuth (Google user ID, name, email address, profile picture), OAuth access tokens and refresh tokens, and the read-only Search Console and Analytics data that the app retrieves on the user's behalf.

This Google user data is shared, transferred or disclosed only with the following recipients:

• Google Ireland Limited / Google LLC: We send the OAuth tokens granted by the user back to the Google APIs in order to retrieve Search Console and Analytics data on the user's behalf. Without this transfer to Google, the connection cannot work.
• Hosting and database processors: Account, token and retrieved Google data are stored and processed on the infrastructure that operates tasketeer.com: Vercel Inc. (hosting, serverless functions and file storage) and Neon Inc. (PostgreSQL database). These service providers process the data solely on our instructions and not for their own purposes.
• AI providers, only upon the user's explicit request: If a user triggers an AI analysis in the app, selected Search Console or Analytics metrics may be transferred to Anthropic PBC (Superagent) or OpenAI, LLC (optional traffic reports) so that the requested analysis can be shown in tasketeer.com. This transfer is solely for that user-facing feature.
• Team members of the same tasketeer account: If the account owner shares properties with invited team members, those members can see the related Search Console and Analytics metrics in the app. OAuth tokens remain with the connecting account and are not disclosed to team members.

Stripe and email providers do not receive Google user data. We do not share, transfer or disclose Google user data to advertisers, data brokers, credit agencies or information resellers. There is no use or transfer for targeted, personalized, retargeted or interest-based advertising, and no use for determining credit-worthiness or lending. Google user data is not used to develop, improve or train non-personalized AI and/or ML models.

8. Data protection mechanisms for Google user data and sensitive data

Security procedures are in place to protect the confidentiality of your data. We use encryption to protect your information. Sensitive data in this policy includes in particular OAuth tokens, Google profile details, and Search Console and Analytics data retrieved via the Google APIs.

The following data protection mechanisms apply:

• Encryption in transit: All communication with tasketeer.com uses HTTPS/TLS.
• Encryption at rest: OAuth access tokens and refresh tokens are stored server-side in the database, not in the user's browser. The database and hosting infrastructure encrypt data at rest.
• Access control: Only signed-in, invited users can access the app. Google data for a property is visible only to the connecting user and to team members the account owner has enabled for that property. Administrative access to the infrastructure is limited to operating the application.
• Data minimisation: Only read-only permissions are requested. No write access to Google accounts, Search Console properties or Analytics properties is requested.
• Revocation and deletion: Users can disconnect Google in settings at any time. Tokens and linked profile data are then deleted or made unusable. Users can also revoke consent in their Google account under third-party app permissions.

9. Retention and withdrawal

Account data remains stored as long as the user has access to tasketeer.com. Google tokens and linked profile data are deleted or made unusable when the user disconnects Google in settings or their account is removed. Users can also revoke Google consent in their Google account under third-party app permissions. After revocation, tasketeer.com can no longer load Search Console or Analytics data.

10. Rights of data subjects

Data subjects may request access, rectification, erasure, restriction of processing, data portability and objection where the legal requirements are met. Please send requests to system@tasketeer.com. There is also a right to lodge a complaint with a data protection supervisory authority.

11. No obligation to link Google

Signing in to tasketeer.com is possible without a Google account. Linking Google is optional and only needed if Search Console or Analytics data should be shown in the app. Without that link, the remaining functions of the work platform remain usable insofar as they do not require Google data.

12. Cookies and consent

When you visit the website, a banner may inform you about cookies and similar technologies. Optional statistics or marketing scripts are not loaded without consent.

Necessary cookies

Necessary cookies are required for operation, security and sign-in (Art. 6(1)(f) GDPR, Section 25(2) TDDDG). They include in particular:

• Session and CSRF cookies for sign-in (NextAuth)
• Storage of the cookie choice itself (tasketeer_consent, 6 months)
• In the app: stored property selection and display preferences

Optional cookies

Statistics and marketing technologies are used only if you consent in the banner (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

After consent to the “Statistics” category we load Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; and where applicable Google LLC, USA). We use it to understand how pages and features are used, for example page views, device type, approximate region and time on page. IP addresses are truncated before storage. Data may be transferred to Google servers, including in the USA; Google relies on standard contractual clauses. Without consent or after withdrawal, Google Analytics is not loaded.

No marketing service is configured at the moment.

You can withdraw or change consent at any time via the “Cookie settings” link in the footer. Withdrawal applies for the future and does not affect the lawfulness of processing up to that point.