Privacy Policy

    Last updated: January 2026

    Your privacy is important to us. This policy explains how we collect, use, and protect your personal information under Canadian privacy laws and under United States federal and state privacy laws.

    Canada & United States Privacy Compliance

    Canada: SaskTask operates in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation including Saskatchewan's Freedom of Information and Protection of Privacy Act (FOIP), Alberta's Personal Information Protection Act (PIPA), British Columbia's Personal Information Protection Act (PIPA), and Quebec's Law 25.

    United States: For US users we follow the California Consumer Privacy Act as amended by the CPRA, and the comprehensive state privacy laws of Virginia, Colorado, Connecticut, Utah, Texas and other states as they come into force, together with the CAN-SPAM Act and the TCPA for email and text messaging, and the Fair Credit Reporting Act where background checks apply.

    PIPEDA's 10 Fair Information Principles

    SaskTask adheres to PIPEDA's 10 Fair Information Principles:

    1. Accountability

    We're responsible for your personal information

    2. Identifying Purposes

    We tell you why we collect your data

    3. Consent

    We get your permission to collect and use data

    4. Limiting Collection

    We only collect what's necessary

    5. Limiting Use, Disclosure, Retention

    We only use data for stated purposes

    6. Accuracy

    We keep your information accurate and current

    7. Safeguards

    We protect your information with security measures

    8. Openness

    We're transparent about our practices

    9. Individual Access

    You can access and correct your data

    10. Challenging Compliance

    You can question our privacy practices

    1. Information We Collect

    Information You Provide Directly

    • Account Information: Name, email address, phone number, password
    • Profile Information: Bio, skills, experience, profile photo, location preferences
    • Verification Documents: Government ID, insurance certificates, professional certifications, background check authorization
    • Payment Information: Bank account details (for payouts), billing address (processed securely through Stripe)
    • Task Information: Task descriptions, pricing, availability, requirements
    • Communications: Messages between users, support inquiries, reviews and ratings

    Information Collected Automatically

    • Device Information: Device type, operating system, browser type, unique device identifiers
    • Usage Data: Pages viewed, features used, time spent, click patterns
    • Log Data: IP address, access times, referring URLs, error logs
    • Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see our Cookie Policy)

    Location Information

    • Precise Location: With your consent, for Instant Work, task matching, and navigation
    • Approximate Location: Derived from IP address for service area determination
    • Address Information: Saved addresses for task locations

    2. How We Use Your Information

    PurposeTypes of Data
    Provide our servicesAccount, profile, task, location data
    Process paymentsPayment, billing information
    Verify identityID documents, verification data
    Enable communicationContact info, messages
    Match tasks with usersSkills, location, availability
    Prevent fraudDevice info, usage patterns, IP addresses
    Improve our platformUsage data, feedback, analytics
    Send notificationsContact info, preferences
    Comply with lawsAll relevant data as required

    4. Information Sharing and Disclosure

    We Share Information With:

    • Other Users: Task Givers and Doers can see each other's public profile information, ratings, and relevant task details
    • Service Providers: Companies that help us operate our platform (hosting, email, analytics)
    • Payment Processors: Stripe for payment processing (see Stripe's Privacy Policy)
    • Background Check Providers: For identity verification and safety screening
    • Legal Authorities: When required by law, court order, or to protect rights and safety
    • Business Transfers: In connection with a merger, acquisition, or sale of assets

    Third-Party Service Providers

    ProviderPurposeData Shared
    SupabaseDatabase & AuthenticationAccount data, app data
    StripePayment ProcessingPayment details, identity
    VercelWeb HostingIP address, usage logs
    Google MapsLocation ServicesLocation, addresses

    5. Data Retention

    We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

    Data CategoryRetention PeriodReason
    Account InformationDuration of account + 3 yearsLegal obligations, disputes
    Transaction Records7 yearsTax and financial regulations
    MessagesDuration of account + 1 yearDispute resolution
    Verification DocumentsDuration of account + 5 yearsCompliance requirements
    Location Data (Real-time)24 hoursInstant Work feature
    Analytics Data2 years (anonymized)Service improvement
    Support Tickets3 yearsCustomer service quality

    After the retention period, data is securely deleted or anonymized.

    6. Your Privacy Rights

    Under PIPEDA and applicable provincial privacy laws in Canada, and under state privacy laws in the United States, you have the following rights:

    Right to Access

    Request a copy of the personal information we hold about you

    Right to Correction

    Request correction of inaccurate or incomplete information

    Right to Deletion

    Request deletion of your account and personal information (subject to legal requirements)

    Right to Withdraw Consent

    Withdraw consent for data processing (may affect service availability)

    Right to Data Portability

    Receive your data in a commonly used, machine-readable format

    Right to Complain

    Lodge a complaint with the Office of the Privacy Commissioner of Canada

    How to Exercise Your Rights

    • Access and update your information: Account Settings
    • Request data export: Contact privacy@sasktask.com
    • Delete your account: Go to Account Settings → Delete Account, or contact support

    We respond to privacy requests within 30 days. Complex requests may take up to 60 days, and we'll notify you if additional time is needed.

    6a. United States State Privacy Rights

    If you live in California, Virginia, Colorado, Connecticut, Utah, Texas or another US state with a comprehensive consumer privacy law, you have these additional rights:

    • Right to know: the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose to
    • Right to delete personal information we hold about you, subject to legal, tax, fraud-prevention and dispute-record exceptions
    • Right to correct inaccurate personal information
    • Right to opt out of the sale or sharing of personal information and of targeted advertising and profiling
    • Right to limit the use of sensitive personal information, such as government ID and precise location, to what is needed to deliver the service
    • Right to non-discrimination — we will not deny service, charge different prices or lower quality because you exercised a privacy right
    • Right to appeal a refused request (Virginia, Colorado, Connecticut and Texas) by replying to our decision email

    We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not knowingly collect personal information from anyone under 18.

    Shine the Light (California Civil Code § 1798.83): California residents may request details of any disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

    To exercise any of these rights, use your account privacy settings or email privacy@sasktask.com. We verify your identity through your account email before acting, respond within 45 days, and may extend once by a further 45 days with notice. An authorised agent may submit a request on your behalf with written permission.

    7. Data Security

    We implement industry-standard security measures to protect your information:

    🔒 Encryption

    • TLS 1.3 for data in transit
    • AES-256 encryption for data at rest
    • End-to-end encryption for messages

    🛡️ Access Controls

    • Role-based access for employees
    • Two-factor authentication available
    • Regular access reviews

    🔍 Monitoring

    • 24/7 security monitoring
    • Intrusion detection systems
    • Regular security audits

    📋 Compliance

    • PCI DSS compliant payment processing
    • Annual penetration testing
    • Employee security training

    8. International Data Transfers

    SaskTask is based in Saskatchewan, Canada and serves users across Canada and the United States. Some of our service providers store or process data in the United States, and data from US users may be processed in Canada.

    • We ensure all cross-border transfers comply with PIPEDA and Quebec Law 25 requirements, including a privacy impact assessment where required
    • Data stored in the US may be subject to access by US law enforcement; data stored in Canada may be subject to access by Canadian law enforcement
    • We use contractual safeguards (Data Processing Agreements) with all service providers
    • Service providers must maintain security standards comparable to our own

    By using SaskTask, you acknowledge that your information may be transferred to, stored, and processed in both Canada and the United States.

    9. Data Breach Notification

    In compliance with PIPEDA's mandatory breach notification requirements:

    • Assessment: We assess all potential breaches to determine risk of significant harm
    • User Notification: We notify affected users as soon as feasible if there's a real risk of significant harm
    • Regulator Notification: We report breaches to the Office of the Privacy Commissioner of Canada when required
    • Record Keeping: We maintain records of all breaches for a minimum of 24 months

    Notifications will include the nature of the breach, types of information involved, steps we're taking, and steps you can take to protect yourself.

    10. Children's Privacy

    SaskTask is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us atprivacy@sasktask.com. We will take steps to delete such information.

    11. Cookies and Tracking Technologies

    We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

    12. Third-Party Links

    Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. When we make significant changes:

    • We'll notify you by email or in-app notification
    • We'll update the "Last updated" date at the top of this page
    • For material changes, we may require you to re-consent

    Your continued use of SaskTask after changes are posted constitutes acceptance of the updated policy.

    14. Contact Us & Complaints

    SaskTask Privacy Officer

    Email: privacy@sasktask.com
    Response Time: Within 30 days

    General Inquiries

    Email: support@sasktask.com
    Help Center: sasktask.com/help

    File a Complaint

    If you're not satisfied with our response to your privacy concern, you have the right to file a complaint with:

    Canada — Office of the Privacy Commissioner

    Website: www.priv.gc.ca
    Toll-free: 1-800-282-1376
    30 Victoria Street, Gatineau, Quebec K1A 1H3

    Quebec residents may also contact the Commission d'accès à l'information du Québec, and Alberta and British Columbia residents their provincial Information and Privacy Commissioner.

    United States — State Attorney General

    California residents: California Privacy Protection Agency — cppa.ca.gov
    Residents of other states may complain to their State Attorney General, or to the Federal Trade Commission at reportfraud.ftc.gov.

    Summary of Key Points

    • We collect only what's necessary to provide our services
    • We never sell your personal information
    • You have rights to access, correct, and delete your data
    • We use industry-standard security to protect your information
    • We notify you of data breaches that may affect you
    • You can contact our Privacy Officer at privacy@sasktask.com