Privacy boundaries in the current build.

taskmanagr is designed to keep workspace ownership, authentication, and agent configuration explicit.

Current data handling

Supabase provides authentication and PostgreSQL storage. Organization data is protected by API permissions and row-level security. Service credentials are server-only and are never exposed to browser code.

Milestone 1 limitations

Agent execution, file uploads, messaging, payments, and generated outputs are not active. Preview records shown in the interface are clearly labeled and are not customer data.

Before public launch

A complete legal privacy policy, retention policy, support contact, and production security review must be approved before customer onboarding.