Privacy Policy
Last updated 2026-07-26 · taskCNX is operated by sthreelabs LLC.
taskCNX syncs your HubSpot tasks into Microsoft To Do. This policy explains exactly what we access, why, and how we protect it. We keep it short because we collect as little as possible.
If you are reviewing taskCNX for your organization, Security & data handling has the scope-by-scope detail: every permission we hold, a field-level table of what moves, and what we store.
What we access
- HubSpot (with your admin’s consent): your tasks, and the names of the contacts, companies, and deals a task is linked to, so we can show that context in To Do. We read your account’s owners to map each person to their tasks. We write only task completion, due date and priority back to HubSpot.
- Microsoft (with each user’s consent): your To Do tasks and task lists, and your basic profile (name, email) so we know whose tasks to sync.
We never read your CRM notes, emails, deals pipeline, or anything outside the tasks and the linked-record names above.
What we store
- Encrypted OAuth tokens for your HubSpot portal and Microsoft account (needed to keep the sync running).
- A mapping between each HubSpot task and its To Do task, plus a small activity log of sync actions.
- Your name and email.
We do not store the contents of your CRM records beyond what’s needed to render a task.
How we use it
Only to run the sync you asked for and to support you. We do not sell your data, use it for advertising, or train models on it.
Who we share it with
We use a small set of subprocessors to operate the service: our cloud hosting provider, Stripe (billing; they never receive your task data), Postmark (transactional email), and Google Analytics (anonymous visit statistics on our public marketing pages only; it does not run inside the app and never sees your task data). Each only receives what it needs for its function.
Cookies
Our public marketing pages use Google Analytics, which sets a cookie to count visits and show us how people find taskCNX. The app itself sets only the session cookie needed to keep you signed in. No analytics or advertising cookies run once you are inside taskCNX.
If you are visiting from the EU, the UK or Switzerland, no analytics cookie is set until you accept it: we ask first, and declining is a single click. Your choice is remembered in your browser. To change it later, clear this site’s data in your browser and you will be asked again.
Security
All traffic is encrypted in transit (TLS). OAuth tokens are encrypted at rest. Access is limited to the systems that run the sync.
Retention & your choices
Uninstalling the app in HubSpot stops all syncing immediately. Thirty days later we erase your data. Every connected user, task link and sync record for your account is deleted automatically. The thirty days exist so that reinstalling, or fixing a broken connection, doesn’t lose your history; reinstall within that window and everything is exactly as you left it.
After the erasure we retain only your HubSpot portal ID and your billing history, which we need to keep prior invoices accurate and to stop the free trial being claimed repeatedly by the same account. Neither identifies an individual.
To have your data deleted sooner, or to request a copy, email us and we’ll take care of it.
Contact
sthreelabs LLC · [email protected] · Contact form