Privacy policy
Last updated 13 October 2026
Task Floor runs AI coding agents on your own Macs, with the Claude and Codex plans you already have. This page says what personal data we handle, why, and what you can ask of us. It covers this site (taskfloor.xyz) and the Task Floor hub you sign in to when someone invites you to their team.
Who we are
Task Floor is operated by Digital Flow Pte. Ltd., UEN 202350828Z, 68 Circular Road, Singapore 049422 (“we”, “us”). For anything on this page write to [email protected].
What stays on your own computers
The agents run on your Mac, signed in to your own Claude or Codex subscription. Your code, your conversations with the agents and your subscription sign-ins stay on your computers and go to Anthropic or OpenAI under your own account and their terms. We do not receive them, and we do not use your work to train any model.
What we collect
On this site. If you join the waitlist: your email and the answers you choose to give (such as your team size). To stop abuse we keep a one-way hash of your IP address, never the address itself, and delete it after a day. If you allow analytics in the cookie banner, Google Analytics measures visits and which buttons are used; until you allow it, nothing is sent and no analytics cookies are set. You can change your choice at any time under “Cookie settings” at the bottom of the page.
When you sign in to a Task Floor hub. The team you join holds, on its hub:
- your name and email, and your GitHub login and account number, which prove who you are when you join;
- the sign-in methods you add: a password, stored only as a salted hash; passkeys, stored only as their public keys; never the password itself or a private key;
- sign-in sessions (a cookie that lasts up to 30 days) and a log of what you did on the hub and when, which the team keeps for a year to see who changed what;
- the projects, rights and computers that belong to your work with the team.
When you sign in with GitHub or Google, we ask only for your login or your email address. We read it once to recognise you and do not keep the token GitHub or Google hands back.
Who else handles it
- Cloudflare serves this site and the hub's public address, and stores the waitlist.
- Google provides Analytics (only with your consent) and “Continue with Google”.
- GitHub provides “Continue with GitHub”.
- Resend delivers sign-in emails, when a hub sends them.
- DigitalOcean hosts a hub that runs on a server rather than on the owner's Mac.
We do not sell personal data and do not share it for advertising.
Why we use it
To run the waitlist and tell you when Task Floor opens; to let you sign in and keep your account secure; to keep a record of changes the team can rely on; and, with your consent, to understand how the site is used. The legal bases are your consent (analytics, waitlist), the service you or your team asked for (signing in and working on the hub), and our legitimate interest in keeping it secure.
How long we keep it
- Waitlist entries until Task Floor opens to you or until you ask us to delete them.
- Sign-in sessions up to 30 days; the activity log a year.
- When a team removes you, your sessions and sign-in methods are deleted at once and your personal projects 30 days later; what you did for the team stays in its history.
Your choices
You can ask us for a copy of your data, to correct it, to delete it, or to stop using it for a purpose, and you can withdraw consent at any time. Write to [email protected]; we answer within 30 days. If you are in the EU, the UK or Singapore you can also complain to your data protection authority.
Security
Passwords are stored only as salted hashes and passkeys as public keys; sign-in attempts are limited; every change on a hub is logged. No method is perfectly secure, and we will tell you without undue delay if a breach affects you.
Children
Task Floor is not meant for anyone under 16, and we do not knowingly collect their data.
Changes
If this page changes in a way that matters, we will say so here and, if you have an account, tell you before it takes effect.