1. Scope & Operator

This Privacy Policy explains how personal data is processed in connection with TaskNotify and related services operated under the 17labs brand (the “Service”). TaskNotify is built and hosted in Europe.

2. Data We Collect

We may collect the following categories of data:

pairing data: your Telegram chat identifier and the user identifier provided by the assistant platform you connect from (for example, ChatGPT session metadata), so future messages can reach the right Telegram chat
technical and security-related data, such as request logs, device signals, and IP addresses
support communications and feedback submissions
billing data, for TaskNotify Premium subscribers only: a Paddle customer and subscription identifier, and your subscription status, so the Service knows whether to grant Premium access

We do not store the content of the messages sent through TaskNotify. Message text is relayed directly to Telegram at the moment it is sent and is not logged or persisted on our servers — only the pairing itself (the connection between your account and your Telegram chat) is kept, so the Service knows where to deliver future messages.

TaskNotify offers an optional paid Premium tier. Payments are processed by Paddle, our reseller and merchant of record for Premium subscriptions (see our Refund Policy) — Paddle collects and processes your payment details (such as card or other payment method information) and billing email directly; we never receive or store your card details.

3. How We Use Data

We use data to:

provide and operate the Service, including completing Telegram pairing and delivering messages
maintain functionality, reliability, and security
improve product quality and user experience
provide support and respond to inquiries
detect abuse, misuse, or operational issues

4. Analytics

We may use lightweight, privacy-respecting analytics to understand how the Service is used and to improve onboarding, stability, and reliability. Analytics are used for product improvement and operational measurement, not for advertising.

5. Assistant Platform & Telegram

The Service may receive limited contextual signals from the assistant platform through which you access it (for example, a session or subject identifier), when made available by that platform, in order to keep your Telegram pairing associated with the right account.

Messages you receive are delivered through Telegram. Telegram is a separate service operated by a third party, and your use of Telegram is subject to Telegram’s own privacy policy and terms. We only interact with Telegram’s Bot API to deliver messages to the chat you paired.

6. Emails & Communications

We may send emails related to the Service, including support responses and product updates. You may unsubscribe from promotional emails at any time using the unsubscribe mechanism provided in those emails.

We do not sell or rent personal data. We may share data with service providers that support infrastructure, security, communications, and operations — including Telegram, for message delivery, and Paddle, as merchant of record for Premium subscription billing — subject to appropriate safeguards.

We may also disclose data where required by law or where reasonably necessary to protect the Service, users, or third parties.

8. Retention

We retain pairing data for as long as reasonably necessary to operate the Service, or until you request deletion. We do not retain message content at all — it is never written to persistent storage.

Some operational records and backups may be retained for a limited period for reliability and security purposes.

9. Security

We implement reasonable technical and organizational measures to protect personal data. However, no system is completely secure.

10. Children (13+)

The Service is not directed to children under the age of 13. We do not knowingly collect personal data from children under 13.

11. International Transfers

TaskNotify is built and hosted in Europe. Where a service provider (such as Telegram) processes data outside the EEA, appropriate safeguards are applied where required.

12. Changes

We may update this Privacy Policy from time to time. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact

For privacy-related questions, contact: legal@17labs.ai

REGIONAL PRIVACY ADDENDA

(Supplemental to the Global Privacy Policy of 17labs)

These Regional Privacy Addenda apply only where required by applicable law. If you reside in a jurisdiction listed below, the corresponding addendum supplements and forms part of the Global Privacy Policy.

A. European Economic Area (EEA) & United Kingdom Privacy Addendum

This section applies if you are located in the European Economic Area (EEA) or the United Kingdom.

A.1 Data Controller

For the purposes of applicable data protection laws, including the General Data Protection Regulation (“GDPR”) and the UK GDPR, the data controller is:

17labs, operated under the 17labs brand, built and hosted in Europe Contact: legal@17labs.ai

A.2 Legal Bases for Processing

We process personal data on the following legal bases, depending on the purpose:

Performance of a contract To provide and operate the Service, including Telegram pairing, message delivery, support, and core functionality.
Legitimate interests To maintain security, prevent abuse, ensure system integrity, conduct analytics, and improve the Service, provided those interests are not overridden by your rights.
Consent Where required by law, including for certain promotional communications. You may withdraw consent at any time.

A.3 International Data Transfers

Your personal data is processed in Europe. Where a service provider (such as Telegram) processes data outside the EEA or the UK, appropriate safeguards are applied, such as standard contractual clauses or other lawful transfer mechanisms.

A.4 Data Retention

Pairing data is retained for as long as reasonably necessary to provide the Service, or until you request deletion. Message content is never retained. Operational logs and backups may be retained for limited periods where needed for reliability and security.

A.5 Your Rights

Subject to applicable law, you have the right to:

access your personal data
rectify inaccurate data
request deletion of your data
restrict or object to processing
request data portability
withdraw consent where processing is based on consent

You also have the right to lodge a complaint with your local data protection authority.

To exercise your rights, contact legal@17labs.ai.

A.6 Communications

Operational communications necessary to provide the Service may be sent without opt-out.
Promotional communications are sent only where permitted by applicable law and include a way to unsubscribe.

A.7 Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal data from children under 13.

B. California Privacy Addendum (CCPA / CPRA)

This section applies if you are a California resident, as defined under the California Consumer Privacy Act (“CCPA”) as amended by the California Privacy Rights Act (“CPRA”).

B.1 Categories of Personal Information Collected

Within the last 12 months, we may have collected the following categories of personal information:

identifiers (such as a Telegram chat identifier and assistant-platform account identifier)
internet or electronic activity information
technical and security-related data
support communications and feedback
for Premium subscribers, billing identifiers and subscription status (payment details themselves are collected and processed directly by Paddle, our merchant of record, not by us)

B.2 Purposes of Collection

Personal information is collected for the following purposes:

providing and operating the Service
maintaining security and preventing abuse
improving features and user experience
internal analytics and product development

We do not sell personal information.
We do not share personal information for cross-context behavioral advertising.

B.4 Sensitive Personal Information

We do not collect or use sensitive personal information for purposes beyond those permitted by applicable law.

B.5 Consumer Rights

California residents have the right to:

know what personal information is collected and how it is used
request access to or deletion of personal information
correct inaccurate personal information
opt out of the sale or sharing of personal information (where applicable)
not be discriminated against for exercising privacy rights

B.6 Exercising Your Rights

Requests to exercise your rights may be submitted by contacting:

legal@17labs.ai

We may take reasonable steps to verify your identity before responding to a request.

B.7 Children

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13.

C. Availability of the Service

The Service may not be available in all jurisdictions, and access may be limited or restricted where required by law.

D. Precedence

In the event of a conflict between these Regional Privacy Addenda and the Global Privacy Policy, these Addenda shall prevail for users to whom they apply.

Privacy Policy