Subprocessors

Last updated: October 16, 2026

These are the companies that process personal data for us so we can run Taskeni. Each one handles only the data it needs for its job, under a contract that limits how it can use that data.

Current subprocessors

Convex

• Purpose: Taskeni's database, file storage, server functions, scheduled jobs, and sign-in.
• Data: all account data and workspace content, including uploaded files.
• Location: United States.

Vercel

• Purpose: hosts and delivers the Taskeni web app and the taskeni.app website, and provides cookieless website analytics.
• Data: technical request data such as IP address, browser type, and requested pages, in service logs. Analytics are aggregated and don't identify visitors.
• Location: United States, with a global network that delivers pages from servers near you.

Resend

• Purpose: sends Taskeni's email (email verification, password reset codes, invitations, notifications, daily digests, and request form receipts) and receives email sent to board addresses for email-to-task.
• Data: recipient email addresses and the content of those emails, emails sent to board addresses (sender, subject, text, and attachments), and delivery events such as bounces.
• Location: United States.

Google (Gemini API)

• Purpose: runs Taskeni's AI helpers. Used only for workspaces where an owner or admin has turned AI helpers on.
• Data: only what a specific AI request needs. Depending on the helper, that can be a task's title and description, its recent comments and history with people's names, the notes you paste in, or the names of a board's members and labels.
• Location: United States and other countries where Google operates.

Apple (Apple Push Notification service)

• Purpose: delivers notifications to the Taskeni iPhone, iPad, and Mac apps.
• Data: the device's push token and the notification itself: the task key and title, and a line such as who commented or assigned it.
• Location: United States.

Browser push services

• Purpose: deliver browser notifications, only if you allow them. The service depends on your browser: Google for Chrome and Android, Mozilla for Firefox, Apple for Safari, and Microsoft for Edge.
• Data: the push address your browser created, and the notification message. The message is encrypted so that only your browser can read it.
• Location: depends on the browser maker, mostly the United States.

Payments

Paid plans and AI credit packs are sold through Polar (polar.sh), which acts as merchant of record. Polar is the seller for your purchase: it collects your payment and billing details, issues invoices and receipts, and handles sales tax and VAT under its own terms and privacy policy. When you start a checkout, we send Polar your name, your email address, the workspace it's for, the plan, and the number of members.

Services you choose to connect

Some data leaves Taskeni because you or your workspace asked for it. These services aren't our subprocessors. They work under their own terms, and you can disconnect them at any time:

• Slack, if a workspace connects it
• GitHub, if a workspace adds Taskeni's webhook to a repository
• AI assistants connected through Taskeni's MCP server
• your own webhook endpoints and REST API clients
• calendar apps that subscribe to your calendar feed

Changes to this list

When we add or replace a subprocessor, we update this page and its date first. Business customers who have signed our data processing agreement get at least 30 days' notice by email before a new subprocessor starts handling their data, and can object. To get these notices, email support@taskeni.app with "Subprocessor updates" in the subject.

See also our Privacy Policy and data processing summary.