Privacy Policy

1. Introduction

Welcome to Your Order is Up ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our task management service (the "Service").

By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: When you create an account, we collect your email address and password (encrypted).
• Task Data: We collect and store the tasks you create, including task titles, descriptions, categories, action types, priorities, time estimates, completion status, and scheduled dates.
• Payment Information: When you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your full credit card information; we only retain your Stripe customer ID and subscription status.
• Communication Data: If you contact us for support, we may collect your name, email address, and the content of your messages.

2.2 Automatically Collected Information

• Usage Data: We collect information about how you interact with the Service, including pages visited, features used, and time spent on the platform.
• Device Information: We may collect information about your device, including IP address, browser type, operating system, and device identifiers.
• Cookies and Similar Technologies: We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can control cookie preferences through your browser settings.

3. How We Use Your Information

We use the information we collect for the following purposes:

• Provide and Maintain the Service: To create and manage your account, store your tasks, and deliver the core functionality of our task management platform.
• Process Payments: To process subscription payments and manage billing through our payment processor, Stripe.
• Send Transactional Emails: To send you important service-related emails, including welcome messages, payment confirmations, subscription updates, and payment failure notifications.
• Improve the Service: To analyze usage patterns, identify bugs, and enhance the user experience.
• Customer Support: To respond to your inquiries and provide technical assistance.
• Security and Fraud Prevention: To detect, prevent, and address technical issues, fraudulent activity, and security threats.
• Legal Compliance: To comply with legal obligations, enforce our Terms of Service, and protect our rights and the rights of our users.

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share information with trusted third-party service providers who assist us in operating the Service, including:
  • Stripe: For payment processing and subscription management
  • Resend: For transactional email delivery
  • Cloud Hosting Providers: For data storage and application hosting
• Legal Requirements: We may disclose your information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of passwords using industry-standard hashing algorithms
• Secure HTTPS connections for all data transmission
• Regular security audits and updates
• Access controls and authentication mechanisms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

Your data is stored on secure servers located in the United States. By using the Service, you consent to the transfer and storage of your information in the United States.

6. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

6.1 General Rights

• Access: You can request access to the personal information we hold about you.
• Correction: You can update or correct your account information at any time through your account settings.
• Deletion: You can request deletion of your account and associated data. Note that some information may be retained for legal or legitimate business purposes.
• Data Portability: You can request a copy of your task data in a portable format.
• Opt-Out: You can opt out of non-essential cookies through your browser settings.

6.2 GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to restrict processing of your personal data
• Right to object to processing of your personal data
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

6.3 CCPA Rights (California Users)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected, used, shared, or sold
• Right to delete personal information held by us
• Right to opt-out of the sale of personal information (we do not sell your information)
• Right to non-discrimination for exercising your CCPA rights

To exercise any of these rights, please contact us at [email protected].

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our Service:

• Essential Cookies: Required for the Service to function properly, including authentication and session management.
• Analytics Cookies: Help us understand how users interact with the Service to improve functionality and user experience.
• Preference Cookies: Remember your settings and preferences, such as language and display options.

You can control cookie preferences through your browser settings. However, disabling certain cookies may limit your ability to use some features of the Service.

8. Third-Party Services

Our Service integrates with the following third-party services:

• Stripe: Payment processing and subscription management. Stripe's privacy policy is available at stripe.com/privacy.
• Resend: Transactional email delivery. Resend's privacy policy is available at resend.com/legal/privacy-policy.
• Google Calendar: Optional integration for exporting tasks to your calendar. Google's privacy policy is available at policies.google.com/privacy.

These third-party services have their own privacy policies, and we encourage you to review them. We are not responsible for the privacy practices of these third parties.

9. Data Retention

We retain your personal information for as long as necessary to provide the Service and fulfill the purposes outlined in this Privacy Policy. Specifically:

• Account Data: Retained until you delete your account or request deletion.
• Task Data: Retained until you delete individual tasks or your entire account.
• Payment Records: Retained for 7 years to comply with tax and accounting regulations.
• Usage Logs: Retained for up to 90 days for security and analytics purposes.

After you delete your account, we may retain certain information for legal compliance, fraud prevention, or legitimate business purposes, but it will no longer be associated with your identity.

10. Children's Privacy

Our Service is not intended for children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from the laws of your country. By using the Service, you consent to the transfer of your information to the United States and other countries where we operate.

For users in the EEA, we ensure appropriate safeguards are in place for international data transfers, including standard contractual clauses approved by the European Commission.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on this page and updating the "Last Updated" date.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: