Privacy policy

Effective September 30, 2026. Operator: Excel Error LLC.

Who we are

Task Scrubber is operated by Excel Error LLC, 20406 Stone Falls Ct, Cypress, TX 77433, USA.

This policy is effective September 30, 2026.

This policy describes Task Scrubber, the site at https://taskscrubber.com and the Task Scrubber iPhone app. It applies alongside Excel Error LLC's company pages: privacy at https://excelerror.com/privacy/ terms at https://excelerror.com/terms/ and contact at https://excelerror.com/contact/

Questions and deletion requests: help@excelerror.com.

Who the product is for

Task Scrubber is a task board for people who sign in with a Microsoft account.

It is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has signed in, email us and we will delete that workspace.

Microsoft account

When you sign in, Microsoft gives us the account email (the preferred username, user principal name, or email on the sign-in token) and the display name on that token. We store the email and name on your profile and in a signed session cookie so the app can open your workspace.

We do not collect a separate Task Scrubber password.

Sign-in asks Microsoft for these scopes: User.Read, Mail.Read, Mail.ReadWrite, and Files.Read. Microsoft's sign-in library also uses the reserved scopes offline_access, openid, and profile so the sign-in can refresh. We store the Microsoft token cache, including refresh tokens, in your workspace so connected mail and files keep working until you disconnect or we delete the workspace.

Work or school accounts often need an IT administrator to consent before those scopes are granted. If consent is refused, mail and file features do not run.

Tasks, projects, and files you add

We store the tasks and projects you create in Task Scrubber, including tasks added from the iPhone app or Siri.

We store files you import and the tasks extracted from them: Excel workbooks and other registers, sheet lists, and meeting minutes you paste or upload (including word-processing files, PDFs, and saved email files).

If you point Task Scrubber at a OneDrive file, Files.Read is used to download that file into your workspace. We do not browse OneDrive for files you did not point at.

When you import minutes from an email you select, we read that message's subject and body so the text can be turned into tasks. That text is stored in your workspace as part of the import.

Outlook data we read

Outlook is optional. Nothing is read from a mailbox until you connect it. There are two ways to connect, and both are limited to building your task list or saving a draft you asked for.

Microsoft Graph, after you sign in on the web or in the iPhone app, reads mail to find follow-up items. For messages we turn into tasks we request: id, subject, categories, flag (status and due or start time), received time, sent time, From (name and address), To recipients (name and address), body, and web link. We also read the mailbox address on your profile (mail or user principal name) to label the account.

From the body we keep a short plain-text preview, about the first 280 characters, on the task. We do not keep the full message body on that task row. The task stores the subject, the people names used to show who it is from or to, the categories, the flag dates, the message id, the web link, and the mailbox label.

We look at flagged follow-ups, including flagged messages in Sent Items. A follow-up flag is enough for some connected mailboxes. Others also need a category the board recognizes before the message becomes a task. A category on the message can set the project. Categorized messages that do not have an open follow-up flag are counted so the board can say they were skipped. We do not add those unflagged messages as tasks. The count request includes id, subject, categories, and flag. We store the counts, not those messages.

The optional PC Outlook Bridge is a program you run on a Windows PC where Outlook is open. It reads flagged Outlook items on that PC (subject, sender, categories, flag, and dates) and sends the resulting task rows to your workspace. When you choose Load selected Outlook email for minutes, it reads the subject and body of the message you selected. It does not run unless you install it and point it at your account.

Drafts, which are never sent

My Day can save a chase email as a draft in the Outlook mailbox you pick. On Microsoft Graph that is a create in your Drafts folder (POST /me/messages). On the PC Outlook Bridge the draft is saved in Outlook on that PC. Both paths call save. Neither path sends the message.

A draft can include the subject, an HTML body built from your task list, the recipient address you set, and an optional logo image you uploaded. A later save in the same week replaces the previous draft.

If the recipient is a name rather than an email address, Graph may try a people search to fill the address. People.Read is not one of the scopes we request. When that lookup is not allowed, the draft is saved without a recipient so you can fill it in. The PC Outlook Bridge can resolve a name with the Outlook address book on that PC. It still only saves the draft.

Drafts stay in your Microsoft mailbox. Deleting your Task Scrubber workspace does not delete those drafts unless you delete them in Outlook.

Settings

We store settings you choose: time zone (the default is America/Chicago), which projects are hidden on the board, name aliases used to recognize tasks assigned to you, and a default owner label.

My Day email settings can include a subject template, accent color, title, footer text, an optional logo image, a per-person email address and alias, and which mailbox to draft from.

Siri and quick-add tokens

A signed-in person can keep more than one quick-add token. Each phone and each shortcut has its own. Generating a new token does not turn the others off. The iPhone app adds a token labeled iPhone. We store only a SHA-256 hash of each token, plus a label, the times it was created, last used, and revoked, and, when the token has one, its scope list. The plaintext is shown once when you generate it in the browser. On iPhone the token is stored in the Keychain. It is not written to the server.

A token whose scope list is missing, or is only add, stays add-only. It can only add a task (POST /api/quick-add). The label on the token does not change that. It cannot read the board, the mailbox, files, imports, registers, or settings.

The iPhone app's token also has the device scope. That scope can turn shared text into suggested tasks, add tasks from Share and from Apple Reminders, and read and update life tasks: the open ones, and the ones marked done in the last 30 days, so Reminders stays in step. It still cannot read mail, files, imports, registers, or settings.

Revoke one token while signed in: open More, choose Add tasks with Siri, and choose Revoke on that token's row. The other tokens keep working. On iPhone, revoking the iPhone row also clears that phone's Keychain token. Revoking a different row does not. Lock (sign out) revokes this phone's token and removes it from the Keychain. It does not revoke the other tokens on the account. Revoking stops that token from adding tasks. It does not delete tasks already added. A revoked token stays revoked. If the stored list grows past its cap, the oldest revoked records are dropped first and active tokens are kept.

iPhone Share and Apple Reminders

The iPhone app can take text you share from Notes, Messages, or another app, or text you paste into Add task. That text is sent when you ask for suggested tasks. The reply is a list drawn from that text. Nothing is saved until you choose Add. If the phone is offline, the add stays on the phone and is sent the next time the app can reach the service.

Apple Reminders sync is off until you turn it on in the app. The app reads the Reminders lists you choose (a Task Scrubber list by default). Lists you don't choose are not read.

While sync is on, a new reminder in that list is sent as a life task. Open life tasks, and life tasks marked done in the last 30 days, are sent to that list, including a later change to the title, the due date, or the done mark. The app does this when you open it, when that list changes while the app is open, after you add a task, and when iOS runs a background refresh. When that refresh runs is up to iOS.

Turn sync off under Apple Reminders in the app. The reminders stay on the phone, and the link between those reminders and the board is cleared. Lock, or sign out, turns sync off the same way and removes this phone's quick-add token from the Keychain.

iPhone sign-in codes

The iPhone app finishes Microsoft sign-in with a one-time code bound to a PKCE S256 challenge the app created. The exchange must send the matching code verifier, so a code seen by another app cannot open a session. The code lasts 90 seconds, works once, and is kept only as a SHA-256 hash in server memory, together with the challenge. The verifier is checked and not stored. None of this is written to disk. The code is not a quick-add token.

The server log records the account email when a code is issued or exchanged, and it records rejected or rate-limited attempts without the code.

Cookies and on-device storage

The only cookie we set is taskscrubber_session. It holds the signed-in email and display name. It is signed, HttpOnly, lasts 14 days, uses SameSite=Lax, and is marked Secure on Azure. It is not an advertising cookie. Signing out clears it. Clearing it does not delete your tasks.

The color theme (light, dark, or match the device) is stored in this browser under the localStorage key taskscrubber-theme. It is not an account record.

The iPhone app stores the quick-add token in the Keychain, shared with the Share extension and Siri through an App Group, and a small on-device flag in UserDefaults. Reminders sync settings and the on-device link between a life task and a reminder stay in that App Group. The board inside the app uses the same session cookie. The app can use the camera or photo library only when you choose a photo to import a sheet. It does not ask for the microphone. Siri dictation is the system, not a recording we store.

Logs

The application logs operational events. Mobile sign-in logs include the account email. Quick-add logs include the account email, the length of the text, and the project and due date that were parsed. They do not include the task sentence or the token. Logs do not include mail bodies.

Microsoft Azure may keep platform logs for the App Service under Azure's own retention. We use logs to run the service. We do not use them for advertising.

The app does not include an analytics or advertising tracker. There is no third-party analytics SDK in the product.

Where data is stored

The public service runs on Microsoft Azure App Service in South Central US, United States. Customer accounts each get their own separate workspace for the profile, tasks, imports, settings, My Day email settings, the hashed quick-add tokens, and the Microsoft token cache.

If you run the optional Windows program, that PC also keeps a local copy of the data for that Windows user.

Mail, drafts, and OneDrive files remain in the Microsoft 365 tenant you signed in to. We do not move your mailbox to a different mail host.

Retention

Workspace data is kept until you ask us to delete it or the service is closed. We do not run a separate analytics archive.

The session cookie expires 14 days after it is issued, and it is refreshed while you use the site.

iPhone sign-in codes expire after 90 seconds and are then dropped from memory.

Quick-add hash records stay in the workspace until you delete the workspace, except the oldest revoked records, which can be dropped when the stored list is past its cap. Active tokens are not dropped that way.

Deleting your data

Delete my account, under Account, removes that account's workspace from our storage: profile, tasks, imports, settings, the quick-add token hashes, and the stored Microsoft token cache. You can also email help@excelerror.com from the Microsoft address you use with Task Scrubber and ask us to delete that data.

Deleted account data is removed within 30 days, including backups.

Lock, or sign out, ends the session on that browser or phone. It does not delete tasks and it does not disconnect Microsoft. On iPhone it also removes that phone's quick-add token from the Keychain. It does not revoke tokens for other phones or shortcuts.

Revoking one Siri token stops that token. It does not delete tasks, and it does not revoke the other tokens.

Disconnecting a mailbox stops new mail reads. Tasks already copied onto the board stay until you remove them or ask us to delete the workspace.

Drafts already saved in Outlook stay in your mailbox until you delete them there.

We do not sell data or track you

We do not sell personal information. We do not share it for cross-context advertising. We do not use it to track you across other companies' apps or websites. There is no advertising profile.

Subprocessors

Microsoft provides sign-in (Microsoft Entra ID), Microsoft Graph, Outlook, and OneDrive. Mail and files you connect are processed by Microsoft because that is where those accounts live.

Microsoft Azure hosts Task Scrubber and stores workspace data in South Central US, United States.

Apple distributes the iPhone app and provides the device Keychain, the system browser used for Microsoft sign-in, and Siri. The app sends board and sign-in traffic to Task Scrubber's servers. The app does not send a tracking identifier to Apple for advertising.

Stripe is not connected. We do not collect payment card numbers. If paid subscriptions go live, Stripe would process payment as a subprocessor, and this policy will be updated before that happens.

• Microsoft — identity, Graph, Outlook, and OneDrive.
• Microsoft Azure — hosting and storage in South Central US.
• Apple — the iPhone app, on the device.
• Stripe — not in use. Planned only if subscriptions go live.

Security

The public site uses HTTPS. The session cookie is signed. Customer accounts each get their own separate workspace. Quick-add tokens and iPhone sign-in codes are stored only as hashes, and the sign-in codes are memory-only. A private deploy can require an allow-list of Microsoft addresses.

No method of transmission or storage is perfectly secure. Keep your Microsoft account protected, and revoke that phone's quick-add token if the phone is lost.

Changes

We will post changes on this page and change the effective date. If you keep using Task Scrubber after the new date, the updated policy applies.

Contact

Excel Error LLC, 20406 Stone Falls Ct, Cypress, TX 77433, USA.

Email help@excelerror.com.

Company privacy policy: https://excelerror.com/privacy/

Company terms: https://excelerror.com/terms/

Company contact: https://excelerror.com/contact/