Privacy Policy

We collect personal information so we can run the marketplace — let you post tasks, make and accept offers, pay safely through escrow, communicate, stay safe, and improve the service. We ask for your consent where the law requires it, and we collect only what we reasonably need for the purposes described here.

“Personal information” means information about an identifiable individual. This policy covers the Taskly website, apps, and related services.

Account & profile. Name, email, phone number, password or sign-in identifier, and profile photo. For Taskers: skills and services, experience, rates, availability, and service area.

Identity (Taskers). With your consent, government-issued photo ID and information needed for identity verification, carried out by us and/or a third-party verification provider. We may also collect relevant licences or certifications (for example trade licences or a food-handler certificate).

Task content. Task descriptions, budgets, photos, addresses, schedules, offers, and messages — including text you submit that is processed by automated safety tools.

Payment information. Billing details and payout information are processed by Stripe. We receive limited transaction data (such as amounts, status, and the last digits/brand of a card) but do not store full card numbers.

Location data. Service addresses and approximate location for matching nearby tasks. During an active, in-progress task, a Tasker’s live location may be shared with the relevant Poster so they can see arrival progress.

Communications. In-app messages, support requests, and the metadata of masked calls (such as time and duration). Where call recording is enabled for safety, you’ll be notified at the start of the call, and a recording may be retained.

Device & usage. IP address, browser and device type, pages viewed, referring URLs, and interaction patterns collected automatically (see Cookies & Analytics).

Referrals & promotions. Referral codes and related activity to administer credits.

Third-party imports. If you choose, information from a connected account such as Google (sign-in) or LinkedIn (name and photo for a Tasker profile).

We use your personal information to:

• Create and manage your account and profile
• Power the marketplace — posting tasks, matching, offers, bookings, and messaging
• Process payments, hold funds in escrow, and pay out Taskers
• Verify identity to support trust and safety
• Connect masked calls and send service messages, confirmations, and alerts
• Screen and moderate tasks, reviews, and conduct to keep the Platform safe
• Provide support and resolve disputes
• Detect, prevent, and investigate fraud, abuse, and security incidents
• Analyze usage, improve the Platform, and build new features
• Comply with legal, tax, and regulatory obligations, and enforce our Terms

To keep the marketplace useful and safe, some features use automated processing — including AI models — for example to suggest a category or budget, check task and comment text against our safety policies, and power search.

When you submit a task or comment, the relevant text may be sent to an AI provider (Groq) to classify it and flag potential policy issues; flagged posts may be held for human review before going live. These tools assist our team — a person reviews meaningful decisions such as removing content or restricting an account. We do not use this processing to make legally significant decisions about you without human involvement.

With other users. To make a task work, limited information is shared between Posters and Taskers — such as a first name and last initial, profile and ratings, offer details, approximate location, and messages. Full contact details are kept private where possible (for example through masked calling).

With service providers. We share information with trusted providers who process it on our behalf, under contracts that limit their use of it:

For legal reasons. We may disclose information to comply with the law, a lawful request, or court order, or to protect the rights, safety, and property of Taskly, our users, or the public.

Business transfers. If Taskly is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

We do not sell your personal information, and we do not use it for third-party targeted advertising.

Some of our service providers (such as Stripe, Groq, Resend, and aspects of Supabase and Google) may store or process information outside Canada, including in the United States. When personal information is handled in another country, it may be accessible to that country’s courts, law-enforcement, and regulatory authorities under their laws.

We use contractual and other safeguards to require these providers to protect your information at a level comparable to PIPEDA. By using the Platform, you acknowledge that your information may be processed outside Canada.

We send transactional messages you need to use the service — confirmations, receipts, reminders, security and account notices — by email, SMS, push, or WhatsApp.

We send marketing or promotional messages only with consent, consistent with Canada’s Anti-Spam Legislation (CASL). You can withdraw consent and unsubscribe from marketing at any time using the link in the message or by contacting us. We may still send essential service messages after you opt out of marketing.

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Platform, and understand how it’s used (including Google Analytics). Some cookies are essential; others are optional.

You can manage optional cookies through our cookie preferences and your browser settings. We do not use cookies for third-party targeted advertising. Analytics data is used to improve the Platform.

We keep personal information only as long as needed for the purposes in this policy, to provide the service, and to meet legal, tax, and accounting obligations. In general:

• Account and profile data — for the life of your account, and a reasonable period after closure for legal and fraud-prevention purposes
• Identity verification data — only as long as needed for verification and your active Tasker status, then deleted or de-identified; ID images are kept only as long as necessary to verify you
• Payment and transaction records — retained as required by Canadian tax and financial law (generally up to 7 years)
• Messages and call metadata — for a reasonable period to support disputes, safety, and the service
• Usage and analytics data — generally retained in aggregated or de-identified form

We use reasonable technical and organizational safeguards to protect personal information, including:

• Encryption of data in transit (TLS) and at rest
• Authentication and row-level access controls that limit who can see what
• PCI-DSS-compliant payment handling through Stripe (we don’t store full card numbers)
• Masked calling so phone numbers aren’t exposed between users
• Monitoring and regular reviews for unauthorized access

No method of transmission or storage is completely secure, so we can’t guarantee absolute security. If a breach affecting you occurs, we will notify you and the appropriate authorities as required by law.

Under PIPEDA and applicable provincial law, you have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Withdraw consent to the collection or use of your information, subject to legal or contractual limits
• Request deletion of your personal information, subject to records we must keep by law
• Ask how your information is handled, and challenge our compliance
• File a complaint with the Office of the Privacy Commissioner of Canada

To exercise any of these rights, email [email protected]. We may need to verify your identity, and we’ll respond within the timeframe required by law (generally 30 days).

The Platform is intended for adults aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we learn that we have, we will delete the account and associated data.

The Platform may link to or rely on third-party services (such as Stripe, mapping, or sign-in providers). Their privacy practices are governed by their own policies, and we’re not responsible for them. We encourage you to review the privacy policy of any third party you interact with.

We may update this Privacy Policy to reflect changes in our practices or the law. For material changes, we’ll post a notice on the Platform or email you. The “Last updated” date above shows when it last changed. Continued use after an update means you accept the revised policy.

For questions, requests, or complaints about this policy or your personal information, contact our Privacy Officer:

You may also contact the Office of the Privacy Commissioner of Canada at priv.gc.ca.