Privacy Policy

1. Overview

Sigma Software Corp (“we,” “us,” or “our”) is committed to protecting the privacy and confidentiality of the personal and organizational information entrusted to us by our users. This Privacy Policy describes how we collect, use, disclose, and protect information when corporate, educational, or professional users access our mobile application, TaskLoop (the “App”).

We adhere to industry-leading privacy and data protection standards, and comply with applicable regulations including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Family Educational Rights and Privacy Act (FERPA) (where applicable), and other relevant laws.

2. Scope

This policy applies to all users of the App, including employees, educators, students, administrators, and other authorized representatives of our business and institutional clients.

3. Information We Collect

We only collect data necessary to provide our services effectively and securely.

a. Personal Information
  • Name, title, and business contact information (email address, phone number)
  • Organization or institution name
  • Role or department
  • Authentication credentials (hashed passwords, SSO tokens)
b. Institutional and Device Data
  • Organization-specific usage metrics
  • Device identifiers (e.g., IP address, device type)
  • Log data (e.g., access times, pages visited)
c. Optional Information
  • User preferences and feedback
  • Uploaded content (e.g., assignments, project files)

We do not knowingly collect or process sensitive personal information unless contractually required and with appropriate safeguards.

4. How We Use Your Information

We use your information to:

  • Provide support and personalize our services
  • Facilitate user authentication and account management
  • Deliver customer support and service improvements
  • Monitor usage patterns and ensure compliance with institutional policies
  • Fulfill contractual obligations and comply with applicable laws
  • Provide optional integrations and analytics to organizations

5. Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data based on:

  • Contractual necessity – to provide the services you or your organization requested
  • Legitimate interests – for security, service improvements, and usage analytics
  • Consent – where required for certain data uses (e.g., marketing)

6. Data Sharing and Disclosure

We do not sell user or organizational data. We may share data with:

  • Authorized third-party service providers: under binding agreements ensuring confidentiality and data protection
  • Educational institutions or employers: when acting on their behalf as a data processor
  • Legal authorities: when required by law or valid legal process
  • Affiliates and successors: in case of a merger, acquisition, or corporate restructuring

7. Data Security

We maintain a robust security framework to protect data, including:

  • AES-256 encryption of data at rest
  • TLS encryption of data in transit
  • Role-based access controls and audit logging
  • Regular penetration testing and vulnerability scanning
  • Compliance with ISO/IEC 27001 and SOC 2 (if applicable)

8. Data Retention

We retain personal and organizational data only as long as necessary to provide our services, comply with legal obligations, or honor contractual agreements. Upon termination or upon request, data can be deleted or exported in accordance with our Data Processing Agreement.

9. Data Subject Rights

Depending on your jurisdiction, you may have rights to:

  • Access and obtain a copy of your personal data
  • Correct or delete your personal data
  • Restrict or object to processing
  • Port your data to another provider
  • Lodge a complaint with a supervisory authority

To exercise these rights, please contact us at privacy@taskloopapp.com.

10. FERPA and Educational Use

For educational clients, we treat student information as confidential under the Family Educational Rights and Privacy Act (FERPA). We act as a “school official” and do not use student data for any purpose other than those explicitly authorized by the institution.

11. Cross-Border Data Transfers

We may transfer and store your data outside your jurisdiction (e.g., in the United States or EU), in compliance with applicable data protection laws. We use Standard Contractual Clauses (SCCs) and other lawful mechanisms to ensure adequate protection.

12. Use of Cookies and Tracking

Our App may use cookies or SDK-based tracking for:

  • Security and session management
  • Performance analytics
  • Feature functionality

Users may opt out of non-essential tracking via in-app settings or through your organization’s administrative controls.

13. Third-Party Integrations

We may offer integrations with third-party platforms (e.g., LMS, CRM, cloud storage). Use of such integrations is governed by the third party's privacy policies. We recommend reviewing them before use.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be communicated through the App and our website {http://www.taskloopapp.com}, and will be effective upon posting. Continued use of the App after such changes constitutes acceptance of the revised policy.

15. Contact Us

For questions, concerns, or data requests, please contact:

Data Protection Officer
Sigma Software Corp
Email: info@taskloopapp.com