Taskera

Privacy policy

Effective date: 16 September 2026

Version: 1.0

1. Who is responsible

ControllerITTOR LTD
Registration number17000531
Registered office128 City Road, London, EC1V 2NX, United Kingdom
Privacy contactsupport@task-era.com
Data Protection OfficerNot appointed. Contact the privacy address above.

This policy explains how we handle personal data on Taskera. It covers Clients, Creators and visitors.

2. What we collect

2.1 Everyone

Name, email address, hashed password, account settings, interface and notification language, and the date, version and IP address recorded for each consent.

2.2 Clients — verification

Collected before the first payment: full name as shown on the identity document, date of birth, telephone number, country, city, address, postcode, and a copy of a passport, national ID card or driving licence.

2.3 Creators — verification

Full name, date of birth, email address, telephone number, address, and three document images: the front of the identity document, the reverse, and a photograph of you holding it.

2.4 Creators — profile and financial

Competency questionnaire answers (fields of work, experience, specialisation, style, working conditions), portfolio items, tax residence, tax identification number and tax status, payout method, account holder name, masked card number (first six and last four digits), card expiry, IBAN, BIC, bank country and payout currency.

2.5 Transactional

Briefs, Tasks, Requests, Invoices, Additional Assignments, payments, credits, Commission, withdrawal requests, dispute records, ratings and comments given at Acceptance.

2.6 Communications

Messages exchanged in dialogues between Clients and Creators, and correspondence with our support and compliance teams, including attachments.

2.7 Technical

IP address, browser and device information, access logs, and cookie data as described in the Cookie Policy.

3. Our legal bases

PurposeBasis
Operating your account, matching, Tasks, Invoices, payments and payoutsPerformance of a contract
Verifying identity and ageLegal obligation, and our legitimate interest in preventing fraud and in meeting the requirements of our payment partners
Processing identity documents and the photograph of you holding the documentNecessary for the establishment, exercise or defence of legal claims, and for the prevention of fraud. Where local law requires consent for this, we ask for it separately
Limits, alerts and fraud detectionOur legitimate interests in protecting the Platform and its users
Tax reporting under DAC7 and equivalent rulesLegal obligation
Retaining financial recordsLegal obligation
Responding to enquiries and complaintsPerformance of a contract and our legitimate interests
Marketing emails and non-essential cookiesConsent, withdrawable at any time

Where we rely on legitimate interests we have assessed that they are not overridden by your rights. You may object (clause 9).

4. Identity documents — how we handle them

4.1 Identity documents and the photograph of a Creator holding their document are sensitive by nature and we treat them accordingly.

4.2 They are used only to verify identity and age and to meet our legal and contractual obligations. They are not used for marketing, are not used to train any model and are not disclosed to other users.

4.3 They are accessible only to designated compliance personnel. Our finance staff do not have access to verification documents. Access is logged.

4.4 They are retained as set out in clause 10 and then deleted.

5. How we use your data

To operate your account and authenticate you.

To match Briefs to Creators and to explain each match.

To route Requests, host dialogues, issue Invoices, process payments and maintain Balances.

To verify identity and age before payment and before payout.

To apply limits, to detect fraud and connected accounts, and to review flagged activity.

To handle disputes between Clients and Creators.

To meet our accounting, tax and reporting obligations.

To respond to your enquiries and complaints.

To improve the Platform and the matching algorithm.

With your consent, to send you news about the Platform.

6. Automated processing and matching

6.1 Matching. When you submit a Brief, our system filters and scores Creators against the attributes in the Brief and presents five results with an explanation for each. This is an automated process. It does not produce a legal or similarly significant effect: it presents options, and both the Client's choice and the Creator's acceptance are human decisions.

6.2 Alerts. Automated rules flag payments, withdrawal requests and account activity for review. The effect of a rule is referral for review. The decision that follows is taken by a member of our team.

6.3 We do not take decisions producing legal or similarly significant effects for you based solely on automated processing. You may ask for human intervention, express your point of view and contest any decision by contacting us.

7. Who we share data with

RecipientWhat they receive
The other party to a TaskA Creator receives the Brief, the Task parameters and dialogue content. A Creator does not receive the Client's personal data. A Client receives the Creator's profile, portfolio and dialogue content
Payment and payout providersThe details necessary to process a payment or a payout
Identity verification providersVerification documents, where such a provider is engaged
Hosting, infrastructure and communication providersData processed on our behalf under written contract
Tax authoritiesInformation required under DAC7 and equivalent rules
Professional advisersAccountants, auditors and lawyers, where necessary
AuthoritiesWhere required by law, court order or a regulator
A purchaser of our businessSubject to equivalent protection

We do not sell personal data and do not share it with advertisers or data brokers.

8. International transfers

Where we transfer personal data outside the United Kingdom, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with additional safeguards where required. Details are available on request.

9. Your rights

You have the right to access your data, to rectification, to erasure in certain circumstances, to restriction of processing, to object to processing based on our legitimate interests and to object to direct marketing absolutely, to data portability, and to withdraw consent at any time without affecting processing carried out beforehand.

To exercise any of these, contact support@task-era.com. We will respond within one month.

You may complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113) at any time. If you are in the EU, you may complain to the supervisory authority in your country of residence.

10. How long we keep data

DataRetention
Account dataWhile the account is open, then deleted subject to the rows below
Identity documents and verification images5 years from the end of the relationship, then deleted
Verification decisions and the reasons for them5 years
Transactions, Invoices, credits, Commission and payouts6 years from the end of the relevant financial year
Tax reporting recordsAs required by the applicable tax rules, at least 6 years
Dialogues and Task files3 years from completion of the Task, then deleted
Alert and fraud records, including connected-account recordsUp to 6 years where necessary to defend claims or prevent recurrence
Support correspondence3 years
Declined Creator applications12 months, then deleted
Marketing consent recordsUntil withdrawal, plus 3 years as evidence

Retention periods are configurable parameters. The current values are published here and any change is reflected in an updated version of this policy.

11. Closing your account

Closing your account removes your profile from the Platform and from matching. Records we are required to retain under clause 10 are kept for the periods stated and are not deleted on request. Where retained for financial or reporting purposes only, they are separated from your profile.

12. Security

We use access controls, role separation (finance staff cannot access verification documents), encryption in transit, hashed password storage, session management, two-factor authentication for Creators, masked storage of payment details, and logging of access to sensitive records. No system is completely secure; you are responsible for keeping your password confidential.

13. Children

The Platform is not available to anyone under 18. Age is verified against the identity document. Any account found to belong to a person under 18 is closed and the data deleted.

14. Changes

Each version of this policy is numbered and archived. Where a change materially affects how we use your data we will notify you by email and on the Platform before it takes effect.