Tasktra Privacy Policy

Tasktra collects information you provide directly, information generated from your use of the platform, and information from third-party services integrated with your account. This includes: identity and contact data such as your name, email address, phone number, and country when you register, apply as a creator, or contact support; authentication and session data including OAuth tokens, session tokens, and device information managed through Supabase Auth; creator profile data including platform handles for Reddit, Quora, TikTok, YouTube, Instagram, and X, payout method details, bio information, verification statuses, tier levels, and onboarding progress; task and submission data including claimed tasks, submitted content, submission URLs, review feedback, moderation notes, timestamps for each workflow step, and any files uploaded as proof of completion; wallet and payout data including wallet balances, lifetime earnings and payouts, ledger entries, payout request history, payout method preferences, and associated metadata; administrative data including creator application reviews, warning records, rejection reasons, admin notes, audit event logs, and system-generated flags; and usage and technical data including IP addresses, browser type, operating system, pages accessed, time spent on pages, referring URLs, crash reports, and platform feature interactions.

If you correspond with Tasktra by email, Telegram, Discord, or through the platform's contact forms, we may collect and retain those communications and their contents for platform operations and dispute resolution purposes.

Tasktra does not collect sensitive financial instrument data such as full bank account numbers or credit card numbers. Payout method details are stored as structured metadata through integrated payment processors, and full payment credentials are never held by Tasktra's servers.

We use collected information to operate the platform, enforce platform rules, process payments and payouts, communicate with users, maintain the security and integrity of the platform, and comply with our legal obligations. Specifically, we use identity and contact data to create and manage your account, authenticate your access, respond to your support requests, and send you legally required notices and operational updates. We use creator profile data to evaluate creator applications, assign eligibility tiers, match creators with compatible tasks, enforce platform and campaign-specific restrictions, display your public or semi-public creator profile to Tasktra administrators, and calculate payout eligibility.

We use task and submission data to route assignments to eligible creators, track submission status through the review and approval workflow, store proof of delivery for audit and dispute purposes, calculate payouts upon approval, and maintain an immutable audit trail for each task's lifecycle. We use wallet and payout data to calculate available balances, process payout requests, generate financial reports for tax and reconciliation purposes, detect and prevent fraudulent payout claims, and issue welcome bonuses or promotional credits where applicable.

We use administrative and moderation data to review creator applications, issue warnings and suspensions, log administrative decisions, investigate fraud or abuse, detect coordinated account manipulation or task farming, and maintain platform-wide quality standards. We use usage and technical data to detect and diagnose platform errors, identify security threats and unauthorized access patterns, understand how users interact with platform features for product improvement, and generate aggregated analytics that do not identify individual users.

We do not sell, rent, or trade your personal information to third parties for marketing purposes. Any sharing of your data with third parties is limited to the specific purposes described in this policy and our contracts with those processors.

Tasktra processes personal data under the following legal bases where applicable: performance of a contract — we process creator application data, task routing data, submission records, and payout data to fulfill our contractual obligations to you under the creator agreement and platform terms; consent — we may process certain communication preferences, optional profile fields, and third-party integration data where you have affirmatively consented; legitimate interests — we process usage data, fraud detection signals, moderation records, and audit logs under our legitimate interest in maintaining platform security, preventing fraud, enforcing platform rules, and improving our services, provided these interests are not overridden by your rights; and legal obligation — we retain certain financial records, KYC-adjacent data, and administrative records as required by applicable law.

Where we rely on legitimate interests, you may have the right to object to processing of your data on grounds relating to your particular situation. Contact us at the address in the Contact section to exercise this right.

Tasktra shares your information only in the following circumstances and with appropriate restrictions on further use. We share your data with Supabase, our cloud database and authentication provider, which processes data under a data processing agreement that restricts use to the operation of the Tasktra platform and requires appropriate security measures. We share your data with our third-party payment and payout processing partners, who process financial data under their own privacy policies and applicable financial regulations. We share your data with our email and notification delivery services, which handle operational and transactional emails under confidentiality agreements.

In certain circumstances, Tasktra may be required by law to disclose your data to courts, law enforcement agencies, regulatory authorities, or other legal processes. We will only disclose the minimum data necessary to comply with the specific legal request and will challenge overly broad or inadequately supported requests where appropriate.

If Tasktra is involved in a merger, acquisition, asset sale, or bankruptcy proceeding, user data may be transferred to the acquiring entity or new operator under the same privacy protections described in this policy, with advance notice provided to affected users where required by law.

We do not share creator payout details, internal moderation notes, administrative review records, or proof-of-submission files with other creators or the general public.

Tasktra retains your personal information for as long as your account is active and for a period thereafter as described in this section. Account and profile data is retained while your account is active and for a period of up to five years after account closure to support dispute resolution, regulatory compliance, financial reconciliation, and fraud prevention. Task and submission records are retained for a minimum of seven years from the date of submission to satisfy accounting, tax, legal hold, and audit requirements.

Wallet ledger entries and payout records are retained for a minimum of seven years per financial recordkeeping requirements applicable to our operations. Creator application records, including rejection reasons and review notes, are retained for five years from the date of the final decision to support appeals, fraud detection, and platform integrity investigations. Audit event logs are retained for a minimum of three years from the date of each logged event.

After the applicable retention period, data that is no longer required for its original purpose may be securely deleted, aggregated into anonymized statistical datasets, or archived in restricted-access storage consistent with our data security measures. Retention periods may be extended where a legal hold, regulatory investigation, active dispute, or fraud investigation requires extended preservation.

Tasktra implements technical and organizational security measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit using TLS, encryption of sensitive data at rest where supported, role-based access control limiting data access to authorized personnel on a least-privilege basis, server-side authorization checks enforced for every API route and database query, multi-factor authentication requirements for administrative access, audit logging of access and changes to sensitive records, and regular security review of our infrastructure and access controls.

No security measure is completely impenetrable. If you become aware of a security vulnerability in the Tasktra platform, report it immediately to the contact address published on the platform. Tasktra will acknowledge receipt within 72 hours and provide an initial assessment within 30 days.

In the event of a data breach that affects your personal information, Tasktra will notify affected users and relevant regulatory authorities as required by applicable law, within the timeframe prescribed by applicable data protection regulations.

Depending on your jurisdiction and applicable law, you may have the following rights regarding your personal information held by Tasktra. Right to access — you may request a copy of all personal data Tasktra holds about you, which we will provide in a structured, commonly used, and machine-readable format within 30 days of a verified request. Right to correction — you may request correction of inaccurate or incomplete personal data in your account profile, which we will process within 30 days. Right to erasure — you may request deletion of your personal data, subject to our legal retention obligations for financial records, tax records, and active disputes, which may require us to retain certain data even when you request deletion. Right to data portability — you may request export of your personal data in a machine-readable format, which we will provide within 30 days of a verified request.

Right to object — you may object to processing of your personal data based on our legitimate interests, and we will cease processing unless we demonstrate compelling legitimate grounds that override your rights. Right to restrict processing — you may request that we restrict processing of your data in certain circumstances, such as while a dispute about data accuracy is being resolved. Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, contact Tasktra through the support channels published on the platform. We will verify your identity before processing rights requests to prevent unauthorized access. We do not discriminate against users who exercise their privacy rights.

Tasktra uses cookies and similar tracking technologies to maintain authenticated sessions, remember your preferences, understand platform usage patterns, and deliver secure authentication through Supabase Auth. Our platform may use essential cookies required for platform functionality, authentication cookies to maintain your logged-in session, and analytics cookies to understand how users navigate and use the platform.

We do not use advertising cookies or cross-site tracking pixels. Third-party services integrated into the Tasktra platform, such as Calendly for scheduling, may set their own cookies under their respective privacy policies. Supabase's authentication system may set session and refresh tokens as part of its normal authentication flow.

You can control cookie preferences through your browser's privacy settings. Disabling essential cookies may prevent you from logging into or using the platform. The Tasktra platform supports Do Not Track signals from browsers, though our platform may continue to collect usage data in aggregate for security and operational purposes.

Tasktra's platform, creator workspace, and services are not intended for or directed at individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as soon as possible. If you believe a child under 18 has provided us with personal information, contact us through the support channels published on the platform.

Tasktra's primary infrastructure is hosted through Supabase, and your data may be processed on servers located in regions determined by Supabase's infrastructure configuration. When we transfer your data across jurisdictions, we ensure appropriate safeguards are in place, including Standard Contractual Clauses, data processing agreements with our service providers, and verification that our providers maintain at least an equivalent level of data protection as described in this policy.

Users outside their home jurisdiction should be aware that data may be subject to access by law enforcement and national security authorities in the jurisdiction where the data is stored or processed, in addition to their home jurisdiction's protections.

Tasktra may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will update the effective date at the bottom of this policy, post a notice within the platform, and where required by applicable law, obtain your consent or provide you with the opportunity to object before the new policy takes effect.

If you do not agree with a revised Privacy Policy, you may close your account and request deletion of your personal data by contacting us through the support channels published on the platform. Continued use of the Tasktra platform after a revised Privacy Policy takes effect constitutes acceptance of the revised terms.

For privacy-related requests, data access or deletion requests, security concerns, or questions about this Privacy Policy, contact Tasktra through the support channels published at support@tasktra.com or through the contact page on the Tasktra website. For EU and UK users, you may also have the right to lodge a complaint with your local data protection authority if you believe your data protection rights have been violated.