Data Security & Trust

1. Per-account isolation (Row-Level Security)

Every account can only ever access its own data. This is enforced at the database level with Supabase Row Level Security (RLS) — tested and verified. Your plans, the details you enter, and uploaded company logos are walled off to your account.

2. Private by default

Plans and company logos are stored privately, per account — never public.

3. Encryption

Your data is encrypted in transit (TLS) and at rest.

4. Infrastructure

The service is hosted on Supabase, which is built on AWS infrastructure. We rely on Supabase and AWS for the underlying infrastructure; we do not directly manage low-level AWS services ourselves.

5. AI processing & your content

Plan generation and the Safety Assistant use a third-party AI provider (Anthropic’s API). To generate output, the input you provide is sent to that provider for processing. Your content is not used to train AI models, and we do not sell your data.

6. Payments

Subscriptions are processed by Stripe. We do not store full payment card numbers — Stripe handles payment-card data.

7. Your control over your data

You can access, export, and delete your own data at any time. To request deletion, contact privacy@pretaskplanner.com.

8. Responsible disclosure

If you discover a security concern, please report it to us at privacy@pretaskplanner.com so we can look into it. We appreciate responsible disclosure.

9. What we don’t claim

In the interest of transparency: we do not currently hold formal security certifications such as SOC 2.

We do not currently meet CMMC, NIST SP 800-171, or FedRAMP requirements, and the service is not intended for Controlled Unclassified Information (CUI), classified information, or other federally regulated data. Please do not enter such data into the service.

Related

For more detail, see our Privacy Policy and Terms of Service.