Privacy

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

JJO-Labs
Jan Jonas
Pemöllers Weg 20
22941 Delingsdorf
Deutschland

The provider is a sole proprietor and a small business within the meaning of Section 19 German Value Added Tax Act (UStG); no value-added tax is shown. Details on prices and invoicing: Terms, Section 7, and the legal notice.

Email: hallo@tasktopus-ai.de
Web: jjo-labs.de

2. Overview

We process personal data only to the extent necessary to operate this website, handle your inquiries or meet legal obligations. We do not pass data on to third parties for advertising purposes.

The legal bases may in particular be:

• Art. 6(1)(b) GDPR (steps prior to entering into a contract, or a contract),
• Art. 6(1)(f) GDPR (legitimate interest, e.g. secure operation of the website),
• Art. 6(1)(a) GDPR (consent, where you have expressly given it).

3. Hosting and server log files

When you access this website, the hosting provider automatically processes technical data in server log files, e.g. IP address, date and time of access, requested URL, referrer URL, browser type and operating system.

This data is required for technical operation, system security and error analysis. It is stored for short periods and then deleted or anonymized, unless statutory retention obligations require otherwise.

This website is hosted by:

ALL-INKL.COM – Neue Medien Münnich
Inhaber: René Münnich
Hauptstraße 68
02742 Friedersdorf
Deutschland

The servers are located exclusively in Germany. A data processing agreement pursuant to Art. 28 GDPR is in place with the hosting provider. The legal basis for the processing is Art. 6(1)(f) GDPR (legitimate interest in the secure and efficient operation of the website).

4. Contact and email

If you contact us by email or via a form, we process the data you provide (in particular your name, email address and message) to handle your inquiry and any follow-up questions.

The purpose of the processing is to handle your inquiry and communicate with you. The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract) or Art. 6(1)(f) GDPR (legitimate interest in responding to inquiries).

We store inquiries only as long as necessary for processing, follow-up or statutory retention, and delete them afterwards unless further obligations exist.

5. Fonts (locally hosted)

For a consistent appearance we use the font "Nunito". It is served exclusively from our own server and is not loaded from external providers.

There is no connection to Google servers (Google Fonts) or other third parties. Consequently, no data – in particular not your IP address – is transmitted to third parties.

6. Visitor counting without cookies

We want to know which pages are read and whether visitors find the pricing, for example. For this we count page views with our own data-minimizing solution. It runs on our server at ALL-INKL.COM, without third-party providers.

When you open a page, your browser sends a short message to our server. It contains the page you opened and the domain of the page you came from (e.g. "google.com", without the exact address). We also count a few clicks: on "Pricing", on links to registration and on "Show all 16 modules". In that case the browser additionally transmits the section of the page in which you clicked. We also count once per page view whether the pricing section appeared on your screen.

From the technical identifier of your browser (user agent) we determine only the device type: phone, tablet or desktop computer. This happens at the moment of the request. We filter out requests from search engine robots.

We store only daily counts, such as "home page, from google.com, phone: 12 views". We do not store your IP address or user agent for this. We set no cookies and create no profiles or browsing histories. We store something in your browser only if you switch off counting yourself (see below). It is not possible to identify individual persons.

If you have enabled "Do Not Track" or "Global Privacy Control" in your browser, we do not count your visits.

You can also switch off counting for your browser yourself. To do so, we place a marker in your browser's local storage that contains only "off". It is not transmitted to us. With the same button you switch counting back on and remove the marker.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is a clear and user-friendly website. The hosting provider's server log files (Section 3) remain unaffected.

7. Use of Tasktopus AI (SaaS)

Use of the cloud-based software "Tasktopus AI" as a customer is additionally governed by the Terms. They stipulate that processing in the course of platform use takes place in accordance with this privacy policy and – where required – a data processing agreement pursuant to Art. 28 GDPR (see DPA).

Within the platform we process the company, user and project data entered by the customer exclusively to provide the agreed scope of services.

7.1 AI features and sub-processors

For the AI-supported features (e.g. prioritization, summaries, risk detection, chat assistant), Tasktopus AI uses a language model from the following provider:

OpenAI, L.L.C.
3180 18th Street
San Francisco, CA 94110
USA

Only the data required for the respective AI feature (e.g. task titles, project descriptions, chat input) is transmitted to OpenAI via an encrypted API. The transmission is limited to the purpose of providing the AI service; OpenAI does not use the data for any further purpose.

No training with your data: project data, tasks, chat input and other content processed via the platform or the API are not used by Tasktopus AI or by OpenAI to train AI models. OpenAI processes the data exclusively to fulfill the request and stores it only for the contractually agreed abuse detection (maximum 30 days).

7.2 Third-country transfer (USA)

OpenAI is based in the USA. Data is transferred to the USA on the basis of standard contractual clauses (Art. 46(2)(c) GDPR) and supplementary technical and organizational measures (encrypted transmission, pseudonymization where possible, minimization of the data transmitted). A Data Processing Addendum (data processing agreement) that reflects the requirements of the GDPR is in place with OpenAI.

7.3 API

Where Tasktopus AI provides an application programming interface (API) for customers, the above principles apply accordingly: data processed via the API is used exclusively to provide the agreed service, is not used for model training and is subject to the same security measures as platform use. Use of the API requires authentication; rate limits and terms of use are governed by the Terms (Section 2).

7.4 Transparency under the AI Act

With the AI assistant "Tako", Tasktopus AI uses an AI system within the meaning of Regulation (EU) 2024/1689 (AI Regulation / EU AI Act). Tako supports project planning, prioritization, risk detection and report creation.

Labeling: interactions with Tako are labeled as AI-supported in the platform. Content generated by Tako (project plans, summaries, analyses) is identified as AI-generated.

No autonomous decisions: Tako only makes suggestions. Data is created, changed or deleted only after explicit confirmation by the user. Tako makes no independent decisions about people, resources or budgets.

AI model used: Tako uses the OpenAI API (see Section 7.1). There is no training with customer data (see Section 7.1). Data transmission and the third-country transfer are described in Sections 7.1 and 7.2.

7.5 Cookies and browser storage (application)

This section applies only to the Tasktopus AI application at software.tasktopus-ai.de, i.e. the area after login. Section 6 applies to this website. The application stores on your device only what is necessary for login and operation. We do not set advertising or analytics cookies or third-party cookies there.

Cookies of the application:

• TASKTOPUS_SESSION: keeps you logged in while you use the application and protects forms against misuse. It is valid until you close your browser. The session on our server ends when you log out or after a longer period of inactivity.
• TASKTOPUS_REMEMBER: only if you select "Stay logged in" when logging in. It contains a random key that logs you in on this device without entering your password again. On our server we store a random identifier, a hash of the key – not the key itself –, your user account and the times of login, last use and expiry. It is valid for 30 days from the last use, at most 6 months. It ends earlier if you log out (on this device), change your password (on your other devices) or reset it (on all devices). We delete expired entries daily.
• tasktopus_news_seen: remembers which news item in the application you saw last, so that the notice about new posts disappears. It contains only the identifier of the post and is valid for 400 days.

Browser local storage: the application stores display settings there, such as light or dark theme, collapsed sidebar, list or board view and expanded key figures. This information is not transmitted to us and remains until you delete it in your browser.

Installed as an app: if you install the application on your home screen, your browser additionally stores a notice page for missing internet connection and the app icon. We do not store project data or page content on your device in the process.

The legal basis for storing and reading this information on your device is Section 25(2) no. 2 German Telecommunications Digital Services Data Protection Act (TDDDG): it is strictly necessary for us to provide the application you use and the features you have chosen. No consent is required for this. The associated processing of personal data is carried out to perform the user agreement (Art. 6(1)(b) GDPR).

8. Waiting list (Founding Member) and launch email

Before the launch of Tasktopus AI on October 1, 2026, you could sign up on this website as a "Founding Member". The form is now closed; the following applies to existing sign-ups.

8.1 Data processed

• your email address and – if selected – the desired plan,
• the times of sign-up, sending of the confirmation email, your confirmation, an unsubscription and sending of the launch email,
• a randomly generated code for your personal confirmation and unsubscribe link,
• as proof of your consent, a pseudonymized hash (keyed hash) of your IP address at sign-up and confirmation – we do not store the IP address itself – as well as the identifier of your browser (user agent).

8.2 Confirmation (double opt-in)

After signing up you receive an email with a confirmation link. Your sign-up only becomes effective once you open it; without confirmation we will not contact you. We are notified internally by email of a confirmation.

8.3 Purposes and legal bases

We use your data to

• inform you about the launch of Tasktopus AI (one-time launch email),
• grant you the promised Founding Member status: if you register in Tasktopus AI with the same email address by Dec 31, 2026, the application matches your address against the waiting list and activates the status automatically. The matching takes place within our own systems at the same hosting provider; the list is only read and not passed on to third parties,
• be able to prove your consent and any unsubscription.

The legal basis for sign-up, confirmation email and launch email is your consent (Art. 6(1)(a) GDPR). Activation of Founding Member status upon your registration is carried out to perform the user agreement on the promised terms (Art. 6(1)(b) GDPR). We keep proof of consent and unsubscription on the basis of our legitimate interest (Art. 6(1)(f) GDPR) and our accountability obligation (Art. 7(1) GDPR).

8.4 Email delivery

We send the emails via the mail server of our hosting provider ALL-INKL.COM (see Section 3) from the address hallo@tasktopus-ai.de. We do not use an external newsletter service and measure neither opens nor clicks (no tracking pixels, no click tracking).

8.5 Unsubscription and withdrawal

You can withdraw your consent at any time with effect for the future – via the unsubscribe link in every email, the unsubscribe function of your email program or by message to hallo@tasktopus-ai.de. After that we will no longer contact you, and the reserved Founding Member place lapses. The lawfulness of the processing carried out until withdrawal remains unaffected. You can use Tasktopus AI at any time regardless of this.

8.6 Retention period

We delete unconfirmed sign-ups no later than 30 days after sign-up. We store confirmed sign-ups until you unsubscribe, at the latest until Mar 31, 2027 – three months after the deadline for the Founding Member place expires. After an unsubscription we keep only your email address and the times of sign-up, confirmation and unsubscription for up to three years, so that we can prove that we honored your unsubscription; we delete all other details immediately. If you have registered, the rules on the use of Tasktopus AI (Section 7) apply to your account.

9. Retention period

Personal data is deleted as soon as the purpose of storage no longer applies and no statutory retention obligations (e.g. under commercial or tax law) require otherwise. Statutory retention periods may, for example, be ten years pursuant to Section 147 German Fiscal Code (AO) or Section 257 German Commercial Code (HGB).

10. Your rights

You have the following rights towards us regarding the personal data concerning you:

• access (Art. 15 GDPR),
• rectification (Art. 16 GDPR),
• erasure (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR),
• withdrawal of consent given, with effect for the future (Art. 7(3) GDPR).

To exercise your rights, a message to hallo@tasktopus-ai.de is sufficient.

You also have the right to lodge a complaint with a data protection supervisory authority. As a rule, the authority at your place of residence or at our registered office is competent.

11. Data security

We use technical and organizational measures to protect your data against loss, misuse and unauthorized access (including HTTPS encryption, access restrictions on servers and mailboxes, spam protection in forms).

12. Changes

We update this privacy policy when our website, forms or legal requirements change. The current version can always be found on this page.

← Back to the home page