Privacy policy
Effective October 7, 2026
This policy explains what happens to the messages you send to the assistant on this site and on the sites we build for our clients. We wrote it so it’s easy to understand, not to protect ourselves.
Data controller: Vortex Labs, Uruguay. Taskia is our product. For any question about this policy, email info@taskia.chat.
- Trade name: Vortex Labs
- Tax ID (RUT): 221051150013
- Address: Calle Esmeralda, Maldonado 20000, Uruguay
What information we collect
Only what we need to help you:
- What you type in the chat. The questions and answers in your conversation are saved.
- The name and contact information you leave, if at some point you ask to be contacted. Depending on the business, that’s an email address or a phone number. We never ask for it before it’s needed.
- Your IP address, but never in readable form. We store it as an irreversible code (a hash created with a secret key). This lets us count how many conversations start from the same place and stop abuse. That record is deleted after two days. Your actual IP address is never stored.
- A random number that identifies your browser. Your browser creates it the first time you open the chat and keeps it between visits. We use it to count how many conversations start from the same device. Without it, we’d have to count by IP address, and because thousands of people on mobile networks share the same one, we could end up cutting off your conversation because of something someone else did. We store it as an irreversible code, the same way as the IP address, and it’s also deleted after two days. It isn’t linked to your name, to what you type, or to the contact information you leave, and it’s different on each business’s site.
We don’t ask for ID or card details, and we don’t build an advertising profile about you. We don’t sell or share your information with anyone outside the list below.
How we use it
For two things only:
- To answer you. The assistant reads the business’s information and your question, and replies.
- To let the business owner know you’d like to be contacted. Once the conversation goes quiet, the owner gets an email with the chat and the contact information you left, so they can get back to you without you having to repeat everything.
If you ask for a website preview
When you fill out the form to see your website before you pay, we keep what you type (your business details, your email and, if you add it, your phone number) along with the photos and logo you upload. Your answers and photos are sent to Google’s AI model (Gemini) through Vercel for two things. First, the AI checks that they describe a real business, and if something doesn’t fit, the form tells you what to fix. Then it builds that first version of your website, and the finished preview is emailed to you. We use all of it only to build your website and talk with you about it, and we keep it until you ask us to delete it.
If you connect your Google Calendar
This part only applies to businesses that sign up for Taskia and choose to connect their Google Calendar. If you just chatted with the assistant on a website, it doesn’t apply to you.
When you connect it, you give us two permissions and nothing more:
- See when you’re busy. We check your main calendar. We can tell a time slot is taken, but we can’t see the title, description or guests of your events. This keeps the assistant from offering a customer a time you’ve already booked.
- Create a separate “Taskia” calendar and manage only that one. Every appointment the assistant books goes there, and we move or cancel it when you change it in your dashboard. We never touch your other calendars or their events.
We store the authorization Google gives us, encrypted, along with the ID of each event we create so we can update it later. We don’t keep a copy of your calendar.
What we receive from Google is used for this and nothing else. We don’t sell it, we don’t use it for advertising or to train AI models, and we don’t share it with anyone except the services in the table below that are needed to make it work. No one on our team looks at it unless you ask us to, to fix a problem, or the law requires it.
Taskia’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can disconnect it at any time from your dashboard or from your Google Account permissions. When you do, we delete the stored authorization. The “Taskia” calendar and the appointments already on it stay in your account, because they’re yours.
Who else processes it
The assistant relies on third-party services, and several of them process information outside Uruguay, mainly in the United States, with the answers from the preview form stored in Brazil. Here is the complete list, with what each one does:
| Service | What it does | Where it processes data |
|---|---|---|
| Vercel | Hosts the assistant and routes requests to the AI model, including the ones that check the form and build your website preview | United States |
| The AI model that writes the reply (Gemini 3 Flash) and the one that checks the form and builds your website preview (Gemini) | United States | |
| Google Cloud (Firebase) | Receives the preview form and stores your answers and photos | Your answers in Brazil (São Paulo). Your photos and logo in the United States (Iowa) |
| Supabase | The database where the conversation is stored | United States |
| Resend | Sends the notification email to the business owner, and the link to your preview | United States |
| Upstash | The timer that sends that notification once the chat goes quiet | United States |
| Cloudflare | Delivers any PDF documents the assistant sends you, and checks that the person filling out the preview form is a real person (Turnstile) | Global network |
If you sign up for Taskia, your payment is processed by Paddle, the Merchant of Record for our orders (Paddle.com Inc. in the United States, Paddle.com (Canada) Ltd. in Canada, and Paddle.com Market Limited, based in the UK, everywhere else). Paddle collects and stores your card details. We never see them. From Paddle we receive your name, email, country and payment status. Paddle handles that data under its own privacy policy.
What you type in the chat is sent to Google’s AI model so it can write the reply. The assistant can’t work any other way, and we’d rather tell you plainly in this table than tuck it away in a sentence.
Form verification
When you fill out the preview form, Cloudflare’s security check (Turnstile) confirms that a real person, not a program, is on the other end. To do that, Cloudflare sees your IP address. We use this check because without it, anyone could use our form to send automated emails in your name.
We chose Turnstile on purpose. It doesn’t make you pick out traffic lights or stairs, and it doesn’t set advertising tracking cookies.
Fonts
Our fonts are served from our own domain. Until August 26, 2026, the chat window loaded them from Google’s servers, and that connection let Google see your IP address. That connection is gone. The font files now come from the same server that delivers this page.
Cookies
The assistant doesn’t use cookies. It saves two items in your browser’s storage, and neither one is used for advertising:
- Your conversation number, which lets you pick up the chat where you left off if you move to another page. It’s deleted automatically when you close the tab.
- The random number that identifies your browser (described above), which helps us stop abuse without cutting off people who did nothing wrong. This one stays between visits until you clear the site’s data in your browser.
There’s no cross-site tracking and there are no advertising cookies. And because the browser number is different on each business’s site, it can’t be used to tell that the same device visited two of our clients.
How long we keep it
- The IP address and browser number records, both stored as irreversible codes: two days.
- The conversation and your contact information: for as long as the business remains our client, because these are its inquiries and its customers. If you email us asking us to delete your information, we’ll delete it.
- Your Google Calendar authorization: until you disconnect it, or until you stop being a client.
Your rights
Uruguay’s personal data protection law (Law 18.331) gives you the right to know what information we have about you, correct it, and ask us to delete it. To make a request, email info@taskia.chat and tell us which site you chatted on and roughly when, so we can find it. We’ll reply within five business days.
If you’d like to file a complaint, the supervisory authority in Uruguay is the Personal Data Regulatory and Control Unit (Unidad Reguladora y de Control de Datos Personales, URCDP).
If you’re writing from the European Union or the United Kingdom, the same rights apply to you, and you can use the same email address to exercise them.
Children
The assistant is designed to answer business inquiries from adults. We don’t ask for or seek information from minors. If we learn that a minor’s information was submitted, we’ll delete it.
Changes
If this policy changes, the date at the top will change. We don’t send email notices about updates, because we don’t have your email address unless you left it with us.