Privacy Policy

This Privacy Policy explains what information PangOffice TaskHub (the "Service") collects, how we use it, and the choices you have. By using the Service you agree to this policy.

1. Information we collect

• Account data — your name, email address, and password (stored only as a salted hash).
• Workspace content — the projects, tasks, documents, and comments you create.
• Authentication data — if you sign in with Google, we receive your verified email, name, and a stable account identifier; we do not receive your Google password.
• Usage & technical data — log entries, IP address, and timestamps used for security and reliability.

2. How we use information

We use your information to provide and secure the Service, authenticate you, send transactional emails (such as verification and password-reset links), enforce plan limits, and improve reliability. We do not sell your personal information.

3. Email

We send transactional emails via a third-party email provider (Zoho ZeptoMail). These are limited to account-related messages such as email verification and password resets.

4. Data isolation

Each workspace's data is logically isolated. Members of one workspace cannot access another workspace's projects, documents, or members. API tokens are scoped to a single workspace.

5. Data retention & deletion

We retain your data while your account is active. A workspace admin can export or permanently delete a workspace at any time, which removes its projects, documents, members, and tokens.

6. Security

Passwords are hashed with Argon2, sessions and API tokens are stored only as hashes, and traffic is encrypted in transit. No method of storage or transmission is 100% secure, but we work to protect your data.

7. Your rights

You may access, correct, export, or delete your data. To make a request, contact us at privacy@pangoffice.com.

8. Changes

We may update this policy from time to time. We will post the new version here and update the "last updated" date.

This document is a general template and not legal advice. Please have it reviewed by counsel and tailored to your jurisdiction (e.g. GDPR / CCPA) before relying on it.