Privacy policy

1. Data controller

EasyTask (“EasyTask”, “we”) is the project management and CRM platform available at https://easytask.es, operated by Climind.

For any privacy-related question you can reach us at d.tomas@climind.com.

2. Data we process

Depending on how you use EasyTask, we process the following categories of data:

• Account data: name, email, password (encrypted) and avatar when you sign up.
• Usage data: projects, tasks, sprints, notes and other content you create.
• Third-party data you enter as a user: CRM contacts, companies and deals (name, email, phone, role, country). You or your company are the controller of this data and EasyTask acts as processor.
• Data from integrations you voluntarily connect: Google (Gmail, Calendar, Drive), Meta (Lead Ads, WhatsApp), Holded, Stripe, telephony or meeting-recording tools. We only access the data strictly required for the feature you enable.
• Technical data: IP address, device type and activity logs required to keep the service secure.

3. Purposes and legal basis

• Providing the service (contract): creating your account, storing your content and syncing the integrations you enable.
• Operational communications (contract): invitations, task reminders, reports and notifications you configure.
• Billing and legal compliance (legal obligation): invoicing and accounting records.
• Security and abuse prevention (legitimate interest): access and audit logs.
• Product improvement (legitimate interest): aggregated usage metrics — we never sell your data.

4. Google integrations

If you connect your Google account, EasyTask only accesses the permissions you grant (for example, reading email to show messages from your contacts, sending email on your behalf, reading your calendar or saving files to Drive).

EasyTask’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. In particular: we do not transfer this data to third parties except to provide the feature you enabled, we do not use it for advertising, and no human reads it unless you consent, it is required for security, or we are legally obliged to.

You can revoke access at any time from EasyTask’s settings or from your Google account.

5. Recipients and processors

We do not sell your data. To provide the service we rely on providers acting as data processors under GDPR safeguards:

• Supabase (database and authentication) and Vercel (hosting).
• Resend (transactional email and campaigns).
• Stripe (payments).
• Google, Meta, Holded, Telnyx and Recall.ai, only if you enable the corresponding integration.

Some providers may be located outside the European Economic Area; in those cases transfers are covered by standard contractual clauses or other valid GDPR mechanisms.

6. Retention

We keep your data while your account is active. If you delete it, we erase or anonymise your data within a reasonable period, except for records we must keep by law (for example, invoicing).

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to d.tomas@climind.com.

If you believe we have not handled your data correctly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Cookies

EasyTask only uses technical cookies required for the service to work (authentication and session preferences). We do not use advertising cookies.

9. Changes to this policy

We may update this policy to reflect legal changes or new features. The current version will always be published on this page along with its last-updated date.