Assignoo Privacy Policy
1. Overview
Assignoo is a mobile work-management platform that helps individuals, managers, and teams create, assign, monitor, and track work and tasks. This Privacy Policy explains what personal information Assignoo collects, why we collect it, how we use and store it, who we share it with, and the choices and rights you have over your information. By using Assignoo you agree to the practices described here.
2. Information We Collect
We collect only the information required to operate Assignoo and to keep your account and workspace data secure.
a) Account information you provide: full name, email address, mobile number (with country code), password (stored as a bcrypt hash — never in plain text), designation, company / workspace name, and optional profile photo.
b) Verification and authentication data: one-time passwords (OTPs) delivered to your email and mobile for account verification, sign-in step-up, and password / email recovery. OTP codes are stored hashed and expire within 10–15 minutes.
c) Task and workspace data: tasks you create or are assigned to, task titles, descriptions, checklists, due dates, priorities, tags, comments, status changes, proof uploads (attachments you choose to submit), workspace names, workspace member roles and invitations.
d) Session and device data: authentication tokens, refresh tokens, session identifiers, device type, operating system, app version, and IP address at the time of each authentication event. This information is used only for session management, security auditing, and abuse prevention.
e) Presence data: heartbeats that record when your app was last active, so teammates can see Active Now / Last Seen indicators. You can hide your Last-Seen from other users in Settings.
f) Diagnostic logs: minimal server-side logs (request paths, non-personal error traces) used to detect and fix bugs. Logs never contain your password, OTP codes, or full authentication tokens.
3. How We Use Your Information
We use your information to:
• Create and secure your Assignoo account.
• Verify your email address and mobile number via OTP.
• Deliver the core task / workspace / reporting features you use.
• Send transactional communications strictly related to your account — OTPs, security alerts, password recovery, and workspace invites.
• Keep the platform safe: rate-limit abuse, detect fraudulent sign-ins, enforce workspace-level access controls, and respond to security incidents.
• Improve product quality through aggregated, non-identifying usage patterns (for example: how many tasks are created per workspace).
We do NOT use your data for advertising. We do NOT sell your data to third parties. We do NOT profile you for marketing purposes.
5. Data Storage and Security
Your data is stored in secure, access-controlled databases hosted on reputable cloud infrastructure. In transit, all Assignoo traffic is protected by TLS (HTTPS). At rest, the database provider encrypts stored data.
Additional safeguards we apply:
• Passwords are hashed with bcrypt — the plain-text is never known to us.
• OTPs are hashed before storage and expire within minutes.
• JWT access tokens are short-lived; refresh tokens are stored server-side and can be revoked at any time from Profile → Security & privacy.
• Suspicious activity triggers session revocation and email security alerts.
• Rate limits protect authentication endpoints from brute-force attacks.
No online service can guarantee absolute security. We follow industry best practices and continually review our safeguards, but we cannot warrant that unauthorized access will never occur. In the event of a breach affecting your data, we will notify you promptly.
6. Data Retention
We retain your personal information for as long as your account is active and as needed to provide Assignoo services to you and your workspace.
Specific retention periods:
• Account records: retained while your account exists.
• OTPs and short-lived security tokens: deleted after they expire or are used (usually under 15 minutes).
• Session/refresh tokens: retained until they expire or are revoked.
• Audit logs (sign-ins, security events): up to 12 months.
• Aggregated, non-identifying usage statistics: may be retained indefinitely.
When you delete your account (see Section 8), your personal profile data is removed from active systems. Some information may be retained for a limited period to comply with legal obligations, resolve disputes, prevent fraud, or enforce our agreements.
7. Your Rights and Choices
You have the following controls over your information:
• Access: view your profile and the data on your account from Profile → Edit.
• Correction: update your name, mobile, avatar, and privacy settings at any time from Profile → Edit.
• Visibility controls: choose whether other workspace members see your email, phone, or profile photo from Profile → Security & privacy.
• Presence control: hide Last-Seen from other users from Profile → Security & privacy → Hide Last Seen.
• Session control: view active sessions and sign out remotely from Profile → Security & privacy → Sessions.
• Communication choices: transactional messages (OTPs, security alerts) are essential to operating your account and cannot be disabled. Assignoo does not send marketing communications.
8. Account & Data Deletion
You may permanently delete your Assignoo account and associated personal data at any time. Two options are available:
IN-APP:
1. Open the Assignoo app.
2. Go to Profile → Security & privacy → Delete account.
3. Confirm your password when prompted.
4. Your account, profile, personal tasks, sessions, and OTP records will be purged within 7 days. Workspace data you created is transferred to the workspace owner (if you are not the owner) or purged (if you are the sole owner and you choose to delete it).
BY EMAIL:
Send a deletion request from your registered email address to hshubham34@gmail.com with the subject line 'Delete My Assignoo Account'. We will verify your identity and complete deletion within 30 days.
Some records may be retained for a limited period to satisfy legal, accounting, or fraud-prevention obligations, and will be securely deleted when no longer required.
9. Children's Privacy
Assignoo is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us at hshubham34@gmail.com so we can delete the data.
10. International Users
Assignoo is operated from India. If you are accessing Assignoo from outside India, please be aware that your information may be processed in India and in other countries where our service providers operate. By using Assignoo you consent to the transfer of your information to jurisdictions that may have different data-protection rules than your own.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the 'Last Updated' date at the top of this page and, where appropriate, notify you inside the app. Continued use of Assignoo after changes take effect constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions, complaints, or requests regarding your privacy or this policy, contact us at:
Developer / Data Controller: Assignoo (owned and operated by Shubham Hirlekar)
Location: India
General inquiries: hshubham34@gmail.com
Data protection & privacy: hshubham34@gmail.com
Support: hshubham34@gmail.com
We aim to respond to privacy requests within 30 days.