Privacy Policy
Tacto (“the Power-Up”, “we”) lets Trello users log time on cards, see reports and connect an AI assistant through the Model Context Protocol (MCP). This page explains what data the Power-Up stores, why, for how long, and how to remove it. The Power-Up is operated by CustomApp. Questions and requests: [email protected].
What we store
The Power-Up stores data on its own servers (chrono.customapp.tech). Nothing is written into Trello card descriptions or comments.
| Data | Why | Kept |
|---|---|---|
| Your Trello member ID, username, full name and avatar URL | To sign time entries and show who logged what | While you use the Power-Up; removed or anonymised on request or when Trello reports your account deleted |
| Board, list and card names, card links, labels and custom field values of boards where the Power-Up is enabled | To attach time entries to cards and build reports | From the first time Tacto is opened on the board, even if no time is ever logged there. Not removed automatically over time: we delete a board's or a whole workspace's data on request at [email protected] |
| Your role on the board and in its workspace (admin, member, guest or not a member), as signed by Trello with each request | To let board members track time right away and keep board guests and outsiders out | Not stored as such; only the resulting board and workspace membership is kept, as described above and below |
| Workspace (organization) ID and its member list | To tell workspace members from board guests, show a workspace's boards to its members and apply the guest-visibility setting | Refreshed from Trello about every 6 hours while someone in the workspace has Trello access connected |
| Change history: who created, edited, deleted or restored a time entry and when (before and after), changed a card estimate, imported entries, and admins' actions | So everyone can see the history of their own entries and restore a deleted one, and an admin can see changes in their workspace, including backdated ones | Kept with the workspace's data and deleted on request together with it. A snapshot of a deleted entry (with its comment) stays in the history after the entry itself is purged at 30 days. On account deletion the person's actions are removed from the history (their edits of imported entries stay without a name, so undoing that import keeps them); “Remove personal settings” erases the text of their comments from it |
| Who is a workspace admin: according to Trello and those appointed in Tacto (with who appointed them) | So that only admins open time tracking to guests, share the workspace boards, log time for colleagues and appoint admins | Trello admin status is refreshed whenever a board is opened or the member list is synced, and lapses after 30 days without confirmation; an appointment lasts while the person is in the workspace and is removed by an admin. Deleted on account deletion |
| Time entries: card, member, start time, duration, comment, whether the time is billable, who created the entry | This is the product: the time your team logs | Until deleted by their author; deleted entries are purged after 30 days (for their snapshot in the history, see the change history row) |
| Finance data of a workspace, if its admins set it up: clients (name, currency, contact email, address, tax ID, note), which boards belong to which client and how they are billed, hourly rates with their start dates | To show workspace admins billable amounts and to build invoices | Until an admin changes or deletes them, or with the workspace's data on request. Rates are the company's prices for the client: they stay after a person removes their personal settings or account, so past invoices still add up. Amounts are not stored: they are calculated from rates when a report is opened |
| Timers and estimates | Running timers and card estimates shown in the card section | Timers until stopped; estimates until removed, or until the board's data is deleted |
| Your time zone (from the browser) | To group daily summaries in your local day | While you use the Power-Up |
| A Trello REST API token, only if you click “Grant Trello access” or “Confirm via Trello” | To create, move and rename cards on your behalf, read the workspace member list and confirm board membership | Encrypted at rest (AES-256-GCM); removed when you disconnect, when Trello reports it revoked, or on account deletion. A token that does not confirm you belong to the board's workspace is checked once and not stored |
| Support requests from the Support tab: kind, subject, text, attached files (up to three, such as screenshots), the reply email (only if you entered one), your Trello name and username, the name and id of the board you wrote from, your language, Tacto version and browser | To reply to you and sort out the problem. The whole request, files included, reaches the Tacto owner in Telegram | The request: until you remove your personal settings or ask us to delete it. Files: only until they reach the Tacto owner, a week at most; after that we keep only their names and sizes. The Telegram copy stays with the Tacto owner: we delete it on request by email |
| Apps you connect without a key (claude.ai, ChatGPT and other OAuth clients): the app's name and address, when you connected it and last used it, and its access tokens | To let the app log and read time in your name | Tokens are stored only as hashes; an access token lives one hour, a refresh token 60 days. Signing in with Trello only confirms who you are — that Trello token is not kept. Disconnected by you at any time, or on account deletion; an app not used for 60 days is removed |
| API keys you create for scripts or an AI assistant | To let external tools log and read time in your name | Only a hash is stored, plus when Trello last confirmed you're on a board: a key pauses after 30 days without that. Revoked by you at any time, or on account deletion |
| Saved report views and export presets: name, settings, who saved them and whether they are shared with the workspace | So you and your team can reopen a report or export in one click | Until deleted; shared ones stay with the workspace |
| Imports: the file name, who imported, when, and which entries came from that file | To undo an import as a whole and bring it back within 30 days | Kept with the workspace's data and deleted on request; the entries follow the time entries row |
| When Trello last confirmed you on a board (a sign-in timestamp) | To pause API keys and app connections of people who have left the team | While you use the Power-Up |
| Server log: IP address, request method and URL, response code and time, error messages | To investigate failures and protect against abuse. Log lines with server errors are sent to the CustomApp team in Telegram (without time entries or comments) | 14 days |
What we do not do
- We do not sell, rent or share your data with third parties. Data is used only to provide the Power-Up and passes only through the service providers listed under “Hosting and service providers” below.
- We do not use advertising or tracking pixels, and we do not build profiles across services.
- We do not read boards where the Power-Up is not enabled. A connected Trello token is used only for the actions listed above.
- An AI assistant connected through MCP receives only what your own API key can see; we do not send your data to any AI provider ourselves.
Who can see time entries
Time entries on a board are visible to that board's members who belong to the board's Trello workspace. Board guests from outside the workspace do not see time tracking unless a workspace admin explicitly allows a specific guest in the settings; card estimates (the work plan, without entries or names) are visible to board guests. A workspace may additionally choose to share all its tracked boards with all its members; new workspaces start with this off.
Rates, amounts and clients' contact details are visible only to workspace admins. Members see the name of a board's client and whether their entries are billable. Board guests see none of it.
Removing your data
- From Trello: open the Power-Up's menu on a board and choose “Remove personal settings”. This deletes your Trello token (on our server and in your browser), API keys, guest allowances, timers, personal estimates, your own saved views and export presets (ones you shared with the workspace stay with the team, without your name), the file names of your imports, your support requests with their files, sign-in records, report filters saved in this browser and profile details. Time entries stay with the team but no longer carry your name — until you open Tacto again yourself, which brings back the name from your Trello profile.
- Account deletion: we poll Trello's privacy journal at least every 14 days and apply the same removal automatically when Trello reports your account deleted, and refresh or blank your profile when Trello reports it changed.
- By email: write to [email protected] from the address linked to your Trello account to have your data removed, exported or corrected.
Security
All traffic uses HTTPS. Trello tokens are encrypted at rest; API keys are stored as hashes and shown only once at creation. Access to the servers is limited to the CustomApp team. Database backups are made daily, kept for 10 days and contain the same encrypted tokens and hashed keys. Data you delete, or that is erased with your personal settings, is gone from the backups within those 10 days. Updates are tested on a staging environment on the same server whose database is an anonymised copy: people's names, board and card names and comments are replaced.
Hosting and service providers
The Power-Up's servers and database are on one dedicated virtual server rented from VDSina, located in Amsterdam, the Netherlands. The staging environment runs on the same server. Nightly database backups are also copied to cloud object storage of two providers in Russia, including Yandex Cloud, and kept there for 10 days. To run the service we rely on these providers:
| Provider | What it does | Data it handles |
|---|---|---|
| VDSina | Hosting of the server and database | All data described on this page, stored on our server |
| Yandex Cloud and one more cloud storage provider in Russia | Storage of nightly database backups | A copy of the database, kept for 10 days; Trello tokens in it stay encrypted and keys stay hashed |
| Cloudflare | Network in front of chrono.customapp.tech: encryption, caching of static files, protection against attacks | All requests to the Power-Up pass through it, including your IP address and the data sent to and from the server; it does not store time entries |
| Telegram | Delivery of support requests and server error alerts to the CustomApp team | Support requests with their files; log lines with server errors (without time entries or comments) |
| Google Workspace | Email for [email protected] | Emails you send to support and our replies |
| Trello (Atlassian) | The platform the Power-Up runs in; source of board, card and member data | Requests made with your Trello token on your behalf; Trello's own privacy policy applies to data in Trello |
An AI assistant you connect (claude.ai, ChatGPT and others) is chosen and controlled by you: it receives data only through your own key or connection, under its provider's terms.
Legal basis
Data is processed to provide the service you enabled on your board (performance of a contract) and, for optional features such as Trello access, on the basis of your explicit consent, which you can withdraw at any time in the settings. We follow the Atlassian Developer Terms and Trello's data policies for Power-Ups.
Changes
If this policy changes, the date above is updated and the new version is published at this address. Material changes are announced in the Power-Up's listing.
Contact
CustomApp · [email protected]