# Data Privacy & Your Rights

## Find The Data Controls

1. Open **Settings → Privacy and Data**.
2. Review the main session-data control.
3. Review company-specific controls when your account contains company workspaces.
4. Save only after the selected scope is correct.

![Session data sharing control](https://neotask-marketing-assets-417007889150.s3.us-east-1.amazonaws.com/docs/product/2026-08-13-r3/privacy-consent-1280.webp)

Neotask is built so you stay in control of your data. This page summarizes the personal data we process and the rights you can exercise. The full legal detail is in our [Privacy Policy](https://neotask.ai/privacy-policy). For our security controls see [Trust & Security](trust-and-security).

## What we process

- **Account data**, your email, name, and login identifiers.
- **Billing data**, subscription and payment references (processed by Stripe; we don't store full card numbers).
- **Product content**, the prompts, tasks, files, and configurations you create in the app.
- **Connected-service data**, only what you authorize when you connect an integration (e.g. Google, Slack, X).
- **Usage & diagnostics**, feature usage and error diagnostics, with personal data minimized and IP addresses anonymized.

We collect only what we need to run the service, and we do not sell your personal data.

## Your rights (GDPR Articles 15, 22)

You can exercise these rights at any time:

| Right | What it means | How |
|---|---|---|
| **Access** | Get a copy of the personal data we hold about you | Request export below |
| **Portability** | Receive your data in a portable format | Export below |
| **Rectification** | Correct inaccurate data | Edit in-app or contact us |
| **Erasure ("right to be forgotten")** | Delete your account and associated data | In-app account deletion, or contact us |
| **Restriction / Objection** | Limit or object to certain processing | Contact us |
| **Withdraw consent** | Turn off optional processing (e.g. analytics) | Tracking honors Do-Not-Track / Global Privacy Control; manage in settings |

### How to exercise them

- **In the app:** delete your account and connected data from **Account → Danger Zone → Delete Account**; export your data from your account settings.
- **By email:** **privacy@neotask.ai**. We verify your identity and respond within **one month** (extendable for complex requests, as GDPR allows).

## Deletion & retention

- When you delete your account, we remove your personal data across all of our systems and revoke the access tokens for any services you connected, except where we must retain limited records to meet legal, tax, or security obligations.
- We keep operational data only as long as needed and apply documented retention periods; financial and audit records follow their required statutory retention.

## Consent & tracking

Company workspaces have their own data controls below the account-level choice. Review the company list before changing a company-specific setting.

![Company-specific data controls](https://neotask-marketing-assets-417007889150.s3.us-east-1.amazonaws.com/docs/product/2026-08-13-r3/privacy-company-controls-1280.webp)

- Analytics and non-essential tracking respect **Do-Not-Track** and **Global Privacy Control** signals and are not collected when you opt out.
- We anonymize IP addresses before any geo-lookup and minimize what location data we keep.

## International transfers & subprocessors

We use the vendors listed on the [Subprocessors](subprocessors) page. Where data is transferred outside your region, we rely on appropriate safeguards (such as Standard Contractual Clauses). A Data Processing Agreement is available to customers on request at **compliance@neotask.ai**.

## Contact

- Privacy / data-rights requests: **privacy@neotask.ai**
- Security: **security@neotask.ai**
- Compliance / DPA / reports: **compliance@neotask.ai**