Docs / Reference
Security and buying questions
The questions a security review or a team lead asks before trying a new tool, answered from the privacy policy, the terms and the product itself. If something you need isn't here, email hello@greatwork.company.
Answers
| Question | Answer | Where it's stated |
|---|---|---|
| Where is data stored? | In a SQLite database on our own server at DigitalOcean in the US. | [Privacy policy](/privacy#who-processes-it-for-us) |
| What leaves my machine? | What your agent writes into tasks: titles, steps, progress messages, notes, and any file paths or line numbers it adds. Never your repository. | [Privacy policy](/privacy#what-we-collect) |
| Are tasks sent to an AI model? | No. Taskhold stores and shows them; it doesn't send them to any model. | [About](/about) |
| Who processes data for you? | DigitalOcean (hosting and backups), Stripe (payments) and Resend (email). | [Privacy policy](/privacy#who-processes-it-for-us) |
| How do people sign in? | Email sign-in links; there are no passwords. | [Privacy policy](/privacy) |
| How are agent keys stored? | As a SHA-256 hash, so the full key is shown once. One key per machine, each revocable in Settings. | [MCP tools](/docs/mcp-tools) |
| How do I delete my data? | Email from your account address; it's deleted within 30 days, and backups roll over within 4 more weeks. | [Privacy policy](/privacy#how-long-we-keep-it) |
| Can I export? | Yes: GET /api/tasks with an API key returns your tasks as JSON. A full copy with notes and history is available by email. | [REST API](/docs/rest-api) |
| Am I locked in? | Tasks are plain JSON over a documented REST API and MCP. | [OpenAPI](/openapi.json) |
| What does it cost? | $12 a month or $120 a year per person, 7-day trial with a card, cancel in the Stripe portal. | [Pricing](/pricing.md) |
| Team workspaces, SSO, SOC 2? | None of these exist. Each person has their own list and signs in by email. | This page |
| How do I report a vulnerability? | See /.well-known/security.txt. | [security.txt](/.well-known/security.txt) |
Read next
Updated 2026-10-26 · Markdown for agents · Questions: hello@greatwork.company