Privacy Policy

What ThinkTask is

ThinkTask is a project management and social media publishing platform for digital marketing agencies. Agencies use it to plan client work, publish approved posts to their clients' social channels, and report on how those posts performed. This policy explains what data we collect, why, and how it is handled — including data we receive from Meta (Facebook and Instagram), Google (YouTube, Google Business Profile, Calendar and Meet) and LinkedIn.

Information we collect

Account information (name, email, phone number, role) provided when you or your workspace admin creates an account. Work data your team enters: clients, projects, tasks, files, comments, schedules, and reports. Usage data needed to run the product, such as sign-in times, notification preferences, and the basic technical logs (IP address, browser type) our hosting providers record for security.

Data from connected social channels

A workspace owner or admin can connect a client's Instagram professional account, Facebook Page, LinkedIn Page, YouTube channel or Google Business Profile. The platform then gives us an access token (and, where the platform issues one, a refresh token) and basic account details: account ID, name, username and profile picture. We use platform data only to:

• Publish the posts your team creates and approves, at the times you schedule, to the channels you connected — and check that they went live.
• Report on performance: we import the posts published on the connected account and read post and account numbers such as reach, views, likes, comments, shares, saves and follower counts. These appear in ThinkTask's analytics and in your client reports.

Platform data is shown only to members of your workspace who have access to that client. We do not read inboxes or private messages, do not collect follower lists or details about individual followers, do not use platform data for advertising, and do not sell it or share it with anyone other than the service providers listed below that run ThinkTask for us.

Facebook and Instagram (Meta)

We use Facebook Login for Business and Instagram Login. With your permission we list the Facebook Pages you manage (including Pages shared with you through a Business portfolio) so you can choose the client's Page; publish photos, videos, carousels, Reels and Stories; and read Page, post and Instagram insights — reach, views, engagement and follower counts — for reporting. We also receive your name and Facebook ID to record who connected the Page. Our use of this data follows the Meta Platform Terms.

YouTube

ThinkTask uses YouTube API Services. When you connect a YouTube channel, we upload the videos your team schedules, read the channel's uploads and video statistics (views, likes, comments), and read YouTube Analytics (daily views and subscriber count) for reporting.

By using ThinkTask's YouTube features you agree to be bound by the YouTube Terms of Service. How Google handles data is described in the Google Privacy Policy.

You can revoke ThinkTask's access to your YouTube data at any time on Google's security settings page, in addition to disconnecting the channel in ThinkTask. When you disconnect a YouTube channel in ThinkTask, or ask us to delete your data, we delete the YouTube data we stored within 7 days.

Google Business Profile

When you connect a Google Business Profile, we list the locations you manage so you can choose the client's, publish posts to it, import its posts, and read its daily profile views for reporting.

Google Calendar and Meet

If you connect Google Calendar, we request only the scopes needed to create and manage meeting events and Google Meet links on your behalf, and to show your upcoming meetings inside ThinkTask.

How we use Google user data

We use data from Google APIs (YouTube, Google Business Profile, Calendar) only to provide the features described above. We do not use it for advertising, do not sell it, and do not use it to train AI models. People at ThinkTask do not read it unless you ask us to for support, it is needed for security, or the law requires it.

ThinkTask's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. You can revoke access at any time on Google's security settings page or by disconnecting inside ThinkTask.

LinkedIn

When you connect a LinkedIn Page, you sign in with LinkedIn and we get access to the Company Pages you administer. We list those Pages so you can choose the client's, publish posts (text, images and video) to it, import its posts, and read post statistics, follower counts and daily page impressions for reporting. Your LinkedIn name and member ID are used only to complete the connection, and we do not store profile data of other LinkedIn members. Our use follows the LinkedIn API Terms of Use.

Cookies and device storage

The ThinkTask app uses only essential cookies, which keep you signed in and protect your session. It also uses your browser's local storage to remember display preferences such as views and filters. We do not use advertising cookies or third-party tracking or analytics cookies, and this website sets no cookies. When you connect a channel, the sign-in page you see is run by Meta, Google or LinkedIn and is covered by their own cookie policies.

Ads and third-party content

ThinkTask shows no advertising. No third party serves ads or content inside ThinkTask, other than your own posts and profile pictures loaded from the platforms you connected.

Where data lives and who processes it

Data is stored with Supabase (database, sign-in and file storage, hosted in India) and served through Vercel. Depending on the features your workspace uses, data is also processed by Meta, Google and LinkedIn (when you connect those channels), Razorpay (billing), Resend (email) and the WhatsApp Business Platform (notifications). These providers process data on our behalf in India and the United States. We do not sell personal data to anyone.

Retention and deletion

Workspace data is kept while your account is active. When an owner or admin disconnects a channel, ThinkTask deletes its tokens and the data fetched from that platform — account numbers, post numbers and imported posts — straight away. Posts your team created in ThinkTask stay in your workspace until you delete them.

You can ask us to delete your account and all associated data at any time — see our data deletion instructions. We complete deletion within 30 days (YouTube data within 7 days), except records the law requires us to keep, such as invoices.

Security

Data travels over HTTPS and is stored in databases that are encrypted at rest. Each agency's data is kept separate by database row-level security, and only people your workspace admins invite can see it.

Your rights

You may request a copy of your personal data, ask us to correct it, or ask us to delete it. For these requests, and for any privacy question or complaint, email info@thinktask.in. We respond within 30 days.

Changes to this policy

If we change how we use your data, we will update this page and the date above and tell workspace owners before the change takes effect. We will not use data from a connected platform for a new purpose without asking first.

Contact

Thinkster Creativity Nexus LLP
2nd Floor, Matoshree Building, Opposite Siddhivinayak Mandir, Bavdhan, Pune, Maharashtra 411021, India
GSTIN: 27AAVFT7003M1ZI
info@thinktask.in · +91 90960 85157
Part of Thinkster, a digital marketing agency.