Security & Privacy
Independent verification,
not just our word
Any AI email tool asks for a lot of trust. Taskify answers that ask with an external audit, read-only access, and an architecture where your data physically can't be misused.
CASA Verified
CASA (Cloud Application Security Assessment) is Google's third-party security audit for apps that connect to Gmail and Workspace data. An independent, Google-authorised lab assessed Taskify's authentication, session handling, access controls, encryption, and data handling — and issued a Letter of Validation. Re-assessed every 12 months; verification can't be self-awarded.
What CASA means for your data →Read-only OAuth
Taskify connects to Gmail, Outlook, and Google Calendar through OAuth 2.0 read-only scopes. Your password is never seen or stored, and Taskify cannot send, delete, or modify your email. Access is revoked at the provider — Google or Microsoft — not through a support request.
No raw email stored
Raw email content never becomes a server-side asset. The AI receives anonymised task summaries — who asked for what and when — never message bodies. OAuth tokens live on your device, not on Taskify servers.
Local processing
Files you share — Excel, Word, PDFs — are parsed on your device. Raw file contents are never uploaded to Taskify's cloud.
Full deletion on request
Disconnect your account and all stored tokens are deleted instantly and permanently. Data-subject deletion is a product feature, not a support ticket.
UAE PDPL & GDPR aligned
Taskify was designed around UAE PDPL (Federal Decree-Law No. 45 of 2021) and GDPR before the first line of product code — lawful basis, minimisation, and deletion rights are architectural decisions, not policy text.
Our practical read of UAE PDPL →What we never do with your data
- ✓No AI model training on your email, calendar, or documents
- ✓No raw message bodies sent to AI — anonymised summaries only
- ✓No passwords stored, ever — OAuth tokens only
- ✓No data sold or shared with advertisers or data brokers
- ✓No permission requests beyond what each feature needs
Procurement and compliance teams
If your IT or legal team is reviewing Taskify, the relevant artefacts are: the CASA Letter of Validation, the read-only OAuth scope list, and the Privacy Policy's data-processing sections. We share security documentation during vendor review — email info@taskify.ae.
Read more
Why Taskify Is CASA Verified and What It Means for Your Data
What the independent audit covers, why Google requires it, and why it's re-assessed annually.
UAE PDPL and your inbox: what compliance actually requires
A practical read of the federal data protection law for teams putting AI tools near email.
Privacy Policy
The full legal document — data handling, retention, cookies, and your rights.
Try it — access is revocable anytime
Connect read-only, see your tasks in two minutes, disconnect in one click if it's not for you.
Get started free