GDPR

MicTask is built and operated from the European Union, and the GDPR applies to everything we do. This page explains what we process, why we are allowed to, who else sees it and what you can demand from us.

1. Data controller

The controller for the data described here is the operator of MicTask.dev. For any question about this page, or to exercise any of the rights below, write to hola@mictask.dev.

2. What we process

• Account: email address and the name you give us when signing up.
• Linking: your Telegram chat ID, so we know which account a voice note belongs to.
• Content: the titles of the tasks we extract from your voice notes, and the business context and custom instructions you write in Brain settings.
• Usage: how many seconds of audio you process, to enforce plan limits.
• Billing: your Stripe customer and subscription identifiers. Card details never reach our servers.
• Technical: your IP address, used briefly as a rate-limiting key to stop abuse of the sign-in and bot endpoints.

3. Legal bases

• Performance of a contract: running the service — transcribing your audio, extracting tasks, writing them to Notion, and billing you.
• Consent: analytics cookies. You can withdraw it at any time from our Cookie Policy.
• Legitimate interest: keeping the service secure and preventing abuse, including rate limiting; measuring how our public pages are used, which runs without cookies and without storing anything on your device unless you accept them; and recording sessions inside the signed-in dashboard to find and fix problems in the product. Those recordings only happen if you accepted analytics cookies, they never cover the public pages, and every input field is masked.
• Legal obligation: keeping invoicing records for as long as tax law requires.

4. Who else processes your data

We rely on specialist providers to run the service, and share with each one only what it needs to do its job. By category:

We can give you the named list of providers behind these categories — write to hola@mictask.dev and we will send it.

5. International transfers

Some of the providers above are outside the European Economic Area. Those transfers rely on the safeguards each provider offers, such as the European Commission's Standard Contractual Clauses or an adequacy decision for their country.

6. Audio and transcripts

This is the part people ask about most, so to be precise: your audio is processed in memory and is never written to our database. The transcript is not stored either — we keep only the resulting task titles, so you can see your history in the dashboard.

Two things do leave our systems, and you should know about both: the audio and the full transcript are sent to our AI provider to be processed, and the bot replies in Telegram with a short excerpt of what you said, which means that excerpt lives in your Telegram chat like any other message.

7. How long we keep things

Account data and task history are kept for as long as your account exists. Invoicing records are kept for the period tax law requires. Rate-limiting keys expire within minutes.

8. Your rights

Under the GDPR you can ask us for access to your data, correction of anything wrong, erasure, restriction of processing, portability of what you gave us, and you can object to processing based on legitimate interest. You can also withdraw consent for analytics at any time without giving a reason.

Some of this you can do yourself right now, without asking anyone: disconnect Notion or unlink Telegram from the Integrations page, and change your analytics choice from the Cookie Policy. For everything else — including account and data deletion — email hola@mictask.dev and we will respond within one month.

9. Complaints

If you think we have handled your data badly, please tell us first — we would rather fix it. You also have the right to complain to your national data protection authority. In Spain that is the Agencia Española de Protección de Datos (AEPD).