Privacy policy
Effective date: 16 September 2026
Version: 1.0
1. Who is responsible
| Controller | ITTOR LTD |
| Registration number | 17000531 |
| Registered office | 128 City Road, London, EC1V 2NX, United Kingdom |
| Privacy contact | support@task-era.com |
| Data Protection Officer | Not appointed. Contact the privacy address above. |
This policy explains how we handle personal data on Taskera. It covers Clients, Creators and visitors.
2. What we collect
2.1 Everyone
Name, email address, hashed password, account settings, interface and notification language, and the date, version and IP address recorded for each consent.
2.2 Clients — verification
Collected before the first payment: full name as shown on the identity document, date of birth, telephone number, country, city, address, postcode, and a copy of a passport, national ID card or driving licence.
2.3 Creators — verification
Full name, date of birth, email address, telephone number, address, and three document images: the front of the identity document, the reverse, and a photograph of you holding it.
2.4 Creators — profile and financial
Competency questionnaire answers (fields of work, experience, specialisation, style, working conditions), portfolio items, tax residence, tax identification number and tax status, payout method, account holder name, masked card number (first six and last four digits), card expiry, IBAN, BIC, bank country and payout currency.
2.5 Transactional
Briefs, Tasks, Requests, Invoices, Additional Assignments, payments, credits, Commission, withdrawal requests, dispute records, ratings and comments given at Acceptance.
2.6 Communications
Messages exchanged in dialogues between Clients and Creators, and correspondence with our support and compliance teams, including attachments.
2.7 Technical
IP address, browser and device information, access logs, and cookie data as described in the Cookie Policy.
3. Our legal bases
| Purpose | Basis |
|---|---|
| Operating your account, matching, Tasks, Invoices, payments and payouts | Performance of a contract |
| Verifying identity and age | Legal obligation, and our legitimate interest in preventing fraud and in meeting the requirements of our payment partners |
| Processing identity documents and the photograph of you holding the document | Necessary for the establishment, exercise or defence of legal claims, and for the prevention of fraud. Where local law requires consent for this, we ask for it separately |
| Limits, alerts and fraud detection | Our legitimate interests in protecting the Platform and its users |
| Tax reporting under DAC7 and equivalent rules | Legal obligation |
| Retaining financial records | Legal obligation |
| Responding to enquiries and complaints | Performance of a contract and our legitimate interests |
| Marketing emails and non-essential cookies | Consent, withdrawable at any time |
Where we rely on legitimate interests we have assessed that they are not overridden by your rights. You may object (clause 9).
4. Identity documents — how we handle them
4.1 Identity documents and the photograph of a Creator holding their document are sensitive by nature and we treat them accordingly.
4.2 They are used only to verify identity and age and to meet our legal and contractual obligations. They are not used for marketing, are not used to train any model and are not disclosed to other users.
4.3 They are accessible only to designated compliance personnel. Our finance staff do not have access to verification documents. Access is logged.
4.4 They are retained as set out in clause 10 and then deleted.
5. How we use your data
To operate your account and authenticate you.
To match Briefs to Creators and to explain each match.
To route Requests, host dialogues, issue Invoices, process payments and maintain Balances.
To verify identity and age before payment and before payout.
To apply limits, to detect fraud and connected accounts, and to review flagged activity.
To handle disputes between Clients and Creators.
To meet our accounting, tax and reporting obligations.
To respond to your enquiries and complaints.
To improve the Platform and the matching algorithm.
With your consent, to send you news about the Platform.
6. Automated processing and matching
6.1 Matching. When you submit a Brief, our system filters and scores Creators against the attributes in the Brief and presents five results with an explanation for each. This is an automated process. It does not produce a legal or similarly significant effect: it presents options, and both the Client's choice and the Creator's acceptance are human decisions.
6.2 Alerts. Automated rules flag payments, withdrawal requests and account activity for review. The effect of a rule is referral for review. The decision that follows is taken by a member of our team.
6.3 We do not take decisions producing legal or similarly significant effects for you based solely on automated processing. You may ask for human intervention, express your point of view and contest any decision by contacting us.
7. Who we share data with
| Recipient | What they receive |
|---|---|
| The other party to a Task | A Creator receives the Brief, the Task parameters and dialogue content. A Creator does not receive the Client's personal data. A Client receives the Creator's profile, portfolio and dialogue content |
| Payment and payout providers | The details necessary to process a payment or a payout |
| Identity verification providers | Verification documents, where such a provider is engaged |
| Hosting, infrastructure and communication providers | Data processed on our behalf under written contract |
| Tax authorities | Information required under DAC7 and equivalent rules |
| Professional advisers | Accountants, auditors and lawyers, where necessary |
| Authorities | Where required by law, court order or a regulator |
| A purchaser of our business | Subject to equivalent protection |
We do not sell personal data and do not share it with advertisers or data brokers.
8. International transfers
Where we transfer personal data outside the United Kingdom, we rely on UK adequacy regulations or on the International Data Transfer Agreement or Addendum, together with additional safeguards where required. Details are available on request.
9. Your rights
You have the right to access your data, to rectification, to erasure in certain circumstances, to restriction of processing, to object to processing based on our legitimate interests and to object to direct marketing absolutely, to data portability, and to withdraw consent at any time without affecting processing carried out beforehand.
To exercise any of these, contact support@task-era.com. We will respond within one month.
You may complain to the Information Commissioner’s Office (ico.org.uk, 0303 123 1113) at any time. If you are in the EU, you may complain to the supervisory authority in your country of residence.
10. How long we keep data
| Data | Retention |
|---|---|
| Account data | While the account is open, then deleted subject to the rows below |
| Identity documents and verification images | 5 years from the end of the relationship, then deleted |
| Verification decisions and the reasons for them | 5 years |
| Transactions, Invoices, credits, Commission and payouts | 6 years from the end of the relevant financial year |
| Tax reporting records | As required by the applicable tax rules, at least 6 years |
| Dialogues and Task files | 3 years from completion of the Task, then deleted |
| Alert and fraud records, including connected-account records | Up to 6 years where necessary to defend claims or prevent recurrence |
| Support correspondence | 3 years |
| Declined Creator applications | 12 months, then deleted |
| Marketing consent records | Until withdrawal, plus 3 years as evidence |
Retention periods are configurable parameters. The current values are published here and any change is reflected in an updated version of this policy.
11. Closing your account
Closing your account removes your profile from the Platform and from matching. Records we are required to retain under clause 10 are kept for the periods stated and are not deleted on request. Where retained for financial or reporting purposes only, they are separated from your profile.
12. Security
We use access controls, role separation (finance staff cannot access verification documents), encryption in transit, hashed password storage, session management, two-factor authentication for Creators, masked storage of payment details, and logging of access to sensitive records. No system is completely secure; you are responsible for keeping your password confidential.
13. Children
The Platform is not available to anyone under 18. Age is verified against the identity document. Any account found to belong to a person under 18 is closed and the data deleted.
14. Changes
Each version of this policy is numbered and archived. Where a change materially affects how we use your data we will notify you by email and on the Platform before it takes effect.