Privacy notice

Who we are and what this notice covers

TaskReply is developed by MASALTECH LTD., a company registered in England and Wales (company number 11601973), registered office 124 Barnfield Avenue, Kingston upon Thames, KT2 5RF, United Kingdom. For the data described here, we decide why and how it is used: we are the “controller” (in Türkiye’s data protection law, KVKK: the “veri sorumlusu”).

This notice covers taskreply.com, the free demo at demo.taskreply.com and the TaskReply service at app.taskreply.com. It does not cover the content that organisations put into their own TaskReply account (their mailboxes, emails, tasks, companies and contacts): there we act on their behalf, under our agreement with them, and they decide how it is used.

What we collect

• When you write to us through the contact form: your name, company, email address, phone number (if you give it) and your message.
• When you ask for a demo at demo.taskreply.com/try: your name, email address, phone number, organisation, team size, sector, what you would like to solve (if you write it), whether you want product news (and when you said yes), and the country your connection comes from (two letters, for example “TR”). To stop the same person or computer making many demos, we also count sign-ups per internet address and per email domain for one day, using only a one-way code that cannot be turned back into the address.
• When you use the demo: your sign-in details (name, email address, your password as a one-way code, your two-step sign-in method, and your phone number if you choose codes by text message), the internet address and browser name of each sign-in, everything you type into the demo (for example emails, notes and settings), and a record of each AI request, including the AI’s answer.
• Emails we send you about your demo: the invitation, a reminder if you have not signed in after 2 days, and a reminder before the demo ends.
• When you use the TaskReply service: your account details (name, email address, your password as a one-way code, your two-step sign-in method, and your phone number if you choose codes by text message), the internet address and browser name of each sign-in, a record of important actions in your organisation’s access log, a record of each AI request and the AI credits used, the requests you send to our support, and the service emails we send you (for example invitations, password resets and notices).

We collect this data directly from you, through the forms and while you use the demo or the TaskReply service.

Why we use it and on what legal basis

• To answer your message and to set up and run your demo: because you ask us to (steps before a possible contract).
• To follow up with you about your demo, and to protect the demo from misuse (the daily limits above): our legitimate interest in offering TaskReply and keeping the service safe.
• To provide the TaskReply service to your organisation, keep accounts secure and answer support requests: our agreement with your organisation, and our legitimate interest in a safe and working service.
• To send you product news: your consent, only if you tick the box. You can withdraw it at any time by writing to us.

We do not sell your data and do not use it for advertising.

Who receives it

• Our team in the United Kingdom, to answer you and to follow up about your demo. When a demo is made, our team gets an email with your name, organisation, sector, team size and what you would like to solve; your email address and phone number are shown only in our admin console.
• Our website host, which runs this website and receives the contact form, then sends it to our team by email.
• Our email provider, which holds the mailboxes where contact messages and the emails about new demos arrive.
• Our cloud hosting provider, which runs the demo and the TaskReply service: their servers, databases, stored files and emails.
• The AI model provider, which processes the text of an AI request (for example an email to summarise or translate) only to answer it. It does not use it to train AI models.

Transfers outside your country

The service providers above may process your data outside the United Kingdom and the European Economic Area. Where that happens, we protect it with safeguards the law recognises, such as the European Commission’s standard contractual clauses together with the UK Addendum. You can ask us for a copy by writing to info@masaltech.com.

How long we keep it

• A demo lasts 14 days and can be extended once by 14 days. If nobody signs in, the demo and your sign-up details are deleted 3 days after sign-up. Otherwise the demo, your sign-up details and everything in the demo are deleted 30 days after it ends.
• The one-way codes used for the daily limits expire after one day.
• In the TaskReply service: your account and its sign-in details for as long as you are a member of an organisation using TaskReply. When an organisation closes its account, its data is deleted 30 days later. Your organisation’s access log is kept for 2 years, our own record of support access for 5 years. The record of service emails we send is kept for 30 days. Support requests are kept for as long as we need them to help you.
• Deleted data also leaves our database backups once they expire: after 35 days for the TaskReply service and 7 days for the demo.
• Contact messages are kept for as long as we need them to answer you and to follow up, and are then deleted from our website host and our mailboxes.

Cookies and browser storage

• This website stores one cookie, “lang”, for one year, but only when you choose a language with the language switcher. It remembers your language.
• The demo stores one sign-in cookie, “sid”, which keeps you signed in and ends when you sign out or your session expires. In your browser’s storage it also keeps your screen settings, such as language and theme.

These are needed for the site and the demo to work. We use no analytics, advertising or tracking cookies.

How we protect it

• All pages and forms use encrypted connections (HTTPS).
• Signing in to the demo needs a password and a second step (an authenticator app, a passkey or a text-message code).
• Passwords are stored only as one-way codes.

Your rights

Under the UK GDPR, the EU GDPR and Türkiye’s personal data protection law (KVKK) you have the right to:

• know whether we hold data about you, see it and get a copy
• have it corrected, or deleted
• ask us to limit how we use it, or object to it
• receive the data you gave us in a common format
• withdraw your consent at any time
• know who we have shared it with, in Türkiye or abroad

Write to us to use any of these rights; we answer within one month (within 30 days for requests under KVKK). You can also complain to a data protection authority: the Information Commissioner’s Office (ICO) in the United Kingdom, the Personal Data Protection Board (Kişisel Verileri Koruma Kurulu) in Türkiye, or the authority in your EU country.

Service providers we use

• We use a cloud hosting provider, an AI model provider, a website host and an email provider, as described under “Who receives it”. The list of our current service providers (sub-processors) is available to customers on request: write to info@masaltech.com.

Changes to this notice

When we change this notice we update the date at the top of this page.

How to contact us

For any question about your data, or to use your rights, write to us at info@masaltech.com or use our contact form.