Privacy Policy

Last updated: 15 October 2026

1. Who processes your data

Company Task Management (CTM) — the web app, the desktop app and the Android mobile app — is operated by gaming.sk s.r.o., Company ID: 53011040, registered in the Slovak Republic. Privacy contact: info@gaming.sk.

We process account and billing data as a controller. Content your organization puts into CTM (projects, tasks, messages, meetings, time off) we process on the organization's behalf as a processor — its administrator decides who can access it.

2. What data we process

Account: name, email, password (stored only as a one-way hash), role in the organization; optionally a photo, phone, position, department and other profile details you fill in.

Content: projects, tasks, comments, attachments, messages, chat, notes, meetings and minutes, time-off and absence requests (including the type, e.g. sick leave — never a diagnosis), meeting room bookings.

Billing: company name, Company ID, VAT ID, address, invoice email. Payment cards are handled by Stripe; card numbers never reach us.

Technical data: IP address, sign-in and change logs (audit), time of last activity.

The mobile app additionally stores: the device address for push notifications, the device model and the app language. The sign-in token is kept only in the phone's secure storage. The app does not collect location, contacts or advertising identifiers and does not track activity in other apps. It uses the camera and files only when you add an attachment or a photo yourself.

Website: Google Analytics and Microsoft Clarity run only with your consent in the cookie bar.

3. Why we use data and on what legal basis

Providing the service and customer support — performance of the contract.

Invoicing and accounting — legal obligation.

Security, abuse prevention and change audit — legitimate interest.

Push and email notifications about activity in CTM — performance of the contract; you can turn them off any time in settings and on your phone.

Website analytics — consent, which you can withdraw at any time.

We do not sell data and do not use it for advertising.

4. Who we share data with

These providers process data on our behalf, each only to the extent needed for its task:

• Vercel — application hosting and file storage

• Neon — database

• Stripe — payments and subscriptions

• email service provider — email delivery

• Expo and Google Firebase Cloud Messaging — delivering push notifications to the mobile app (notification text)

• 8x8 (Jitsi as a Service) — video calls

• Anthropic — AI meeting minutes and weekly report, only if your organization uses them

• Crisp — support chat on the website

• Google Analytics, Microsoft Clarity — website analytics, only with consent

• Google, Microsoft and Slack — only if you connect your calendar or Slack yourself

Some of them are based outside the European Union (mainly in the US). Transfers rely on an adequacy decision (EU–US Data Privacy Framework) or the European Commission's standard contractual clauses.

5. How long we keep data

We keep account data and content for as long as the account and organization exist. When you delete your account, your personal data is deleted immediately; projects, tasks and meetings you created for the organization stay with the organization. Backups created by the organization may contain data until its administrator deletes them. Accounting records are kept for 10 years as required by law.

6. Your rights

You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You can withdraw consent to analytics at any time in the cookie bar.

You can delete your account yourself in your profile — see /account/delete. Send other requests to info@gaming.sk; we handle them within 30 days. If you are an employee of an organization using CTM, also contact its administrator about the organization's content.

You also have the right to lodge a complaint with a data protection authority, in Slovakia the Office for Personal Data Protection (dataprotection.gov.sk).

7. Security

Connections to the app are always encrypted (HTTPS). Passwords are stored only as a one-way hash. Each organization's content is separated from the others and attachments are available only to signed-in members.

8. Changes to this policy

We will notify you in the app or by email about any material change. The date of the last change is shown at the top.