Company

Privacy Policy

Last updated October 19, 2026

Tasset files live on your computer, not on our servers. Your data is stored in your files on your computer. Your data and your files are yours. Tasset never copies, stores or uses the data in your files: the only time any of it leaves your computer is when you ask AI for help, and then it passes straight through to the AI you chose (see AI).

What we never collect

  • The text in your files. It is never stored on our servers.
  • Where your files are on your computer. We never record a file's folder path.
  • Your card details. Stripe takes your payment. We never see or receive your card number, in full or in part.
  • Your AI key. If you bring your own AI key, it stays in your Account file; we never store it.

What Tasset keeps to run your account

Your account

  • your email address and password, held by our sign-in service;
  • the organization name you enter;
  • your plan, subscription status and billing period dates.

Billing

When you check out, Stripe receives your email address and your Tasset account ID. We keep your billing name and email from Stripe, your Stripe customer ID and a payment history: amount, status, date and receipt link.

Your files

Every Tasset file has a file ID linked to your account. That's how your files know you're signed in and licensed. When you open a Tasset file while signed in, we record:

  • which file IDs belong to you, and the file's type;
  • the file's name (for example My notes.html) and its last-modified time. We keep the name, never the contents;
  • a fingerprint of the folder the file is in, never the folder itself: the file turns the folder path into a one-way code (a SHA-256 hash) on your computer before anything is sent;
  • when the file was first and last opened from that folder, and each time it is opened;
  • a random device ID the file creates in your browser, and the Tasset version it runs, so updates reach the right file;
  • the outcome of each update to your files.

When we make your files, our file service receives your name, your organization name and your file IDs to put them in the files.

AI

AI only sees your data when you ask it something. Nothing is sent by default.

  • When you ask, your question and the parts of the document sent with it pass through Tasset's server to the AI you chose, and the answer comes back the same way. This is how we check the file is licensed and keep usage within your plan.
  • We don't store or log that text. We keep only a usage record for each answer: the model, the provider, whose key was used, the number of tokens, the cost and how the answer ended. We also count calls per file for two days, to stop abuse.
  • Encrypted on the way: every connection is encrypted in transit (HTTPS), from your browser to Tasset and from Tasset to the AI. Tasset's server reads the text only to pass it on.
  • Tasset AI is answered by Google Gemini, under Tasset's agreement with Google.
  • Your own key sends your request to that provider (Anthropic, OpenAI or Google), under your own agreement with them.
  • Local AI (Ollama) runs on your computer: nothing goes to Tasset or anyone else.

Email

We send email through Resend: today, that is your welcome email. Our own error alerts can include your account ID, but never your content, keys or passwords.

This website and cookies

  • Necessary: your cookie choice is kept in your browser, and when you sign in on tasset.ai your sign-in session is kept in your browser. These are needed for the site to work.
  • Analytics: PostHog (uses cookies) and Cloudflare Web Analytics (no cookies) count visits so we can see which pages help. They see your visits to tasset.ai, never your files or your account.
  • Turn analytics off any time with Cookie settings at the bottom of every page. If your browser sends Global Privacy Control, analytics stay off.
  • Fonts are served from tasset.ai itself, not from a third party.

Services that run Tasset

We don't sell your personal information, and we don't share it for advertising. To run Tasset, a few services store or process it for us, under contract and only to provide Tasset:

  • Supabase: your account, sign-in and our database;
  • Stripe: payments;
  • Resend: email;
  • Render: hosts tasset.ai, and the service that makes your files, which receives your name, organization name and file IDs to put them in your files;
  • Google: runs Gemini for Tasset AI.

If you use your own AI key, that provider processes only what you send when you ask AI for help (see AI). Website analytics are described under Cookies.

How long we keep account records

We keep your account records for as long as your account is open and we provide Tasset to you. When you close your account, or ask us to delete your data, we delete it or make it anonymous, except for records we must keep to meet our legal, tax and accounting duties, to prevent fraud and abuse, to resolve disputes, or to enforce our terms. We keep those records only as long as the law requires.

Your rights

Wherever you live, you can ask us to:

  • see the personal information we keep about you and get a copy you can take elsewhere;
  • correct it;
  • delete it;
  • turn off analytics (Cookie settings, at the bottom of every page).

Email support@tasset.ai from your account email. We confirm it's you, then answer within 30 days. Using your rights never changes your price or your service.

EU, EEA and UK (GDPR and UK GDPR)

  • Who is responsible: Advanced GP AI Solutions Inc., 395 Carroll Street No. 604, Brooklyn, NY 11231. Email contact@tasset.ai.
  • Why we use your data: to provide Tasset under our contract with you (account, billing, licensing your files, answering your AI requests); our legitimate interests in security, stopping abuse and seeing which pages help (analytics, which you can turn off); and legal duties such as tax records.
  • More rights: you can also ask us to restrict or stop using your data, and you can complain to your local data protection authority. Tasset makes no automated decisions with legal effects about you.

California (CCPA, as amended by the CPRA)

  • What we collected in the last 12 months: identifiers (email, name, account and device IDs); commercial information (plan and payments); internet activity (file opens, and website visits if you accept analytics). Sources: you, your files and Stripe. Purpose: providing Tasset. How long we keep each: see above.
  • We do not sell or share your personal information (as the CCPA defines "sell" and "share"), and we have not in the last 12 months. Your password is used only to sign you in.
  • Your rights: to know, delete and correct, and not to be treated differently for using them. You can use an authorized agent. We honor Global Privacy Control.

Other US states

Residents of states with consumer privacy laws (for example Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island) can confirm, see, correct, delete and get a copy of their personal information, and opt out of targeted advertising, sale and profiling. Tasset does none of those three. If we turn down a request, reply to our answer to appeal; we answer an appeal within 60 days, and you can then contact your state attorney general.

New York

We protect your information with reasonable safeguards, and we will tell you if a breach affects it, as New York's SHIELD Act requires.

Tasset is for users 18 and older. We do not knowingly collect information from anyone under the age of 18.

Changes

When this policy changes, we update the date at the top of the page. [PLACEHOLDER: how subscribers are told about a change that matters].

Contact

Questions about privacy: support@tasset.ai. See also our Terms of Service and Support.