Privacy, in plain language.

1. Who we are

machtask is operated by A.C.N. 693 677 191 PTY. LTD, an Australian proprietary company. This policy explains how we handle personal information, in line with the Australian Privacy Principles. Privacy questions and requests: contact@machtask.com.

2. What we collect

We collect only what the service needs:

• Console account: your email address, used to sign you in (magic links — we never store a password).
• Access requests: the details you submit on the request form — name, position, company, country, email, and your preferred workspace name.
• Workspace content: the requests, fields and files your team puts into your workspace. Each workspace lives in its own dedicated database, and its content is controlled by the customer who owns the workspace — we process it only on their behalf, to provide the service.
• Technical data: IP addresses and request logs, used for security, abuse prevention and rate limiting.

3. Cookies and bot protection

We use a session cookie to keep you signed in. We also use PostHog, a product analytics service, to understand how the site is used: pages visited, what is clicked, and how you interact with a page (which may include session replays of your visit). This sets analytics cookies and similar identifiers in your browser so repeat visits can be told apart, and PostHog receives technical data such as your IP address, browser and device details. We use this only to improve machtask — never for advertising, and we never sell it. Our public forms are protected by Cloudflare Turnstile, which processes connection data to tell humans from bots — see Cloudflare's and PostHog's privacy documentation for how they handle data.

4. How we use information

We use the information above to:

• provide, secure and support the service;
• review access requests and set up workspaces;
• send transactional email — sign-in links, workspace setup, deadline alerts your workspace is configured to send;
• prevent abuse of the platform.

5. Who else touches it

We do not sell personal information. We share it only with the providers needed to run the service: our hosting infrastructure, our email delivery provider, Cloudflare (DNS and bot protection), and PostHog (usage analytics). When paid plans launch, a payment provider will process billing details — they will never touch your workspace content.

6. Storage and security

Every workspace has its own database — your records are not rows in a shared customer database. Backups run daily and are encrypted. Access to production infrastructure is limited to the operator of the service.

7. Retention and deletion

We keep account and workspace data while your workspace is active. If your workspace is closed — by you or by us — its data is deleted after an export window. Access-request records for declined requests are kept only as an operational record; email us to have yours removed.

8. Your rights

You can ask us what personal information we hold about you, ask us to correct it, or ask us to delete it — email contact@machtask.com and we will respond within a reasonable time. If you believe we have mishandled your information, contact us first; you can also complain to the Office of the Australian Information Commissioner (OAIC).

9. Breaches and changes

If a data breach is likely to result in serious harm, we will notify affected people and the OAIC as required by the Notifiable Data Breaches scheme. We may update this policy; material changes will be notified to the email on your account. Effective 19 August 2026.