How we handle your data.

Last updated 3 October 2026

1. Who we are

TaskSync is a project, time and team management platform operated by Salasar eCommerce Total Solutions Pvt. Ltd., trading as Arena Softwares, with its registered office at 235, Old Bagadganj Layout, Shastri Nagar Chowk, Nagpur – 440008, Maharashtra, India, and an office in Singapore.

In this policy, “we”, “us” and “TaskSync” mean that company. “You” means anyone who visits this website or uses the TaskSync application.

2. The two roles we play

This matters, because it changes who decides what happens to a given piece of data.

• We are the controller of the data you give us directly: your account details, your billing details, the messages you send us through this website, and how you use our marketing pages. We decide why and how that data is processed, and this policy governs it.
• We are a processor for the content your organisation puts inside its TaskSync workspace — projects, tasks, comments, time entries, files and the personal data of your own team members and clients. Your organisation decides what goes in and what happens to it; we act on its instructions. If you are a member of someone else’s workspace and want your data changed or removed, ask that organisation’s administrator first.

3. What we collect

Data you give us

• Account data: first and last name, email address, hashed password, and — if you choose to provide them — a phone number and country. Phone and country are optional on the sign-up form and the account works without them.
• Company data: your company name and the name of the first team or department you create.
• Profile preferences: time zone, language, avatar image and display settings.
• Enquiries: whatever you type into a form on this site — typically name, email, company, team size, region, website and your message — plus the topic you selected and the page you sent it from.
• Workspace content: everything you or your colleagues create inside the product.

Data we generate

• Usage and log data: IP address, browser and device type, pages viewed, and timestamps of sign-in and key actions. This is used for security, abuse prevention and diagnosing faults.
• Subscription data: your plan, trial start and end dates, and payment status.

Payment data we deliberately do not hold

Card payments are handled entirely by our payment processors. We never receive or store your full card number, expiry date or CVV. The only card information stored on our systems is the card brand and the last four digits, so you can tell which card is on file.

4. Why we use it

Purpose	Data used	Our basis
Creating and running your account, and providing the service	Account, company, profile, workspace content	Performance of our contract with you
Taking payment and issuing invoices	Subscription and billing data	Performance of contract; legal obligation for tax records
Service email — verification, password resets, trial and billing notices	Name, email	Performance of contract
Answering your enquiry	Whatever you submitted in the form	Your consent, given when you tick the box on the form (see below)
Keeping the service secure and preventing abuse	Log and usage data	Our legitimate interest in a safe service
Understanding how the website is used so we can improve it	Analytics data	Your consent, given through the cookie banner
Meeting our legal and accounting obligations	Billing and transaction records	Legal obligation

We do not sell your personal data, and we do not use it to build advertising profiles.

E-mail communications

Some e-mails we send about your TaskSync account and product updates contain a small image that tells us whether the e-mail was opened. You can turn this off by unsubscribing from product e-mails; security and billing e-mails never contain it.

The tick box on our forms

Our contact, demo, partner, careers and migration forms ask you to tick: “I agree that TaskSync (Arena Softwares) may store these details and contact me by email or phone about this enquiry, as set out in the Privacy Policy.” By ticking it you agree that we may keep what you sent and reply to you about that enquiry only, by email or by phone if you gave a number. It does not sign you up to newsletters or marketing. You can withdraw it at any time by writing to us; we then stop contacting you about the enquiry and delete it unless the law requires us to keep it.

5. Cookies and analytics

Essential cookies keep you signed in and protect our forms; they are always set because the service cannot work without them. Analytics is optional: nothing analytics-related loads until you accept it in the cookie banner, and declining changes nothing about how the site works. The full detail is in our Cookie Policy.

6. Who we share it with

We share personal data only with the service providers we need in order to run TaskSync, and only as much as each of them needs.

Provider	What for	What they receive
Stripe and Razorpay	Processing card payments and subscriptions	Name, email, billing details, payment amount
OVHcloud (servers in Mumbai, India)	Running the servers and databases	All data, at rest and in transit
Our email delivery provider	Sending verification, reset and notification email	Name, email, message content
Google (Analytics)	Understanding website usage	Pseudonymous usage data — only after you accept

The typefaces on this site and in the app are served from our own servers, so no font provider receives your IP address.

TaskSync does not send your data to AI providers. If you choose to give a TaskSync link to an AI assistant of your own, that assistant's provider handles what it reads under its own terms.

We may also disclose data where the law requires it, where it is necessary to establish or defend a legal claim, or as part of a merger or acquisition — in which case we will tell you before your data becomes subject to a different policy.

7. Where it is stored

Hosted on OVHcloud servers in Mumbai, India, with nightly encrypted backups kept off-site. Enterprise customers can ask for hosting that meets their country's requirements, confirmed in writing.

TaskSync is operated from India and Singapore. Where personal data from the EEA or the UK is transferred to India, we rely on standard contractual clauses.

8. How long we keep it

• Account and workspace data: for as long as the account is open. After an account is closed we keep it for 90 days so it can be restored if the closure was a mistake, then delete it.
• Backups: deleted data can persist in encrypted backups for up to a further 30 days before those backups rotate out.
• Invoices and payment records: retained for eight years, as required of us under Indian tax and companies legislation.
• Enquiries sent through this website: 24 months from your last contact with us.
• Security and access logs: 12 months.

9. How we protect it

• All traffic to and from TaskSync is encrypted in transit using TLS.
• Passwords are stored only as salted one-way hashes. Nobody at TaskSync can read your password.
• Each customer’s workspace is logically isolated, and access inside a workspace is governed by roles and permissions its administrators set.
• Administrative access to production systems is limited to the people who need it and is logged.

No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you and the relevant regulator within the time limits the law sets.

10. Your rights

Wherever you are, you can ask us to give you a copy of your personal data, correct it, delete it, or stop a particular use of it. Depending on where you live, some of these are statutory rights:

• India (Digital Personal Data Protection Act, 2023): access, correction, completion, updating, erasure, grievance redressal, and the right to nominate someone to exercise your rights if you die or become incapacitated. You may withdraw consent at any time.
• Singapore (Personal Data Protection Act): access and correction, and withdrawal of consent.
• EEA and UK (GDPR): access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions with legal effect. We make no such automated decisions.

To exercise any of these, write to us using the details below. We will verify who you are and respond within 30 days. Using these rights is free, and we will not treat you differently for exercising them.

11. Children

TaskSync is a workplace tool and is not directed at children. We do not knowingly collect the personal data of anyone under 18. If you believe a child has given us personal data, tell us and we will delete it.

12. Changes to this policy

We will update this page when our practices change, and the “last updated” date at the top will change with it. If a change materially affects how we handle your personal data, we will email account holders before it takes effect.

13. Contact and complaints

Questions, requests and complaints about privacy go to our Grievance Officer:

Grievance Officer, Arena Softwares
Salasar eCommerce Total Solutions Pvt. Ltd., 235, Old Bagadganj Layout, Shastri Nagar Chowk, Nagpur – 440008, Maharashtra, India
Email: support@arenasoftwares.com

If we cannot resolve your complaint, you may take it to the Data Protection Board of India, to Singapore’s Personal Data Protection Commission, or to your local supervisory authority in the EEA or the UK.