Privacy Policy

    Last updated: January 2026

    Your privacy is important to us. This policy explains how we collect, use, and protect your personal information in compliance with Canadian privacy laws.

    PIPEDA Compliant

    SaskTask operates in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation including Saskatchewan's Freedom of Information and Protection of Privacy Act (FOIP), Alberta's Personal Information Protection Act (PIPA), British Columbia's Personal Information Protection Act (PIPA), and Quebec's Law 25.

    PIPEDA's 10 Fair Information Principles

    SaskTask adheres to PIPEDA's 10 Fair Information Principles:

    1. Accountability

    We're responsible for your personal information

    2. Identifying Purposes

    We tell you why we collect your data

    3. Consent

    We get your permission to collect and use data

    4. Limiting Collection

    We only collect what's necessary

    5. Limiting Use, Disclosure, Retention

    We only use data for stated purposes

    6. Accuracy

    We keep your information accurate and current

    7. Safeguards

    We protect your information with security measures

    8. Openness

    We're transparent about our practices

    9. Individual Access

    You can access and correct your data

    10. Challenging Compliance

    You can question our privacy practices

    1. Information We Collect

    Information You Provide Directly

    • Account Information: Name, email address, phone number, password
    • Profile Information: Bio, skills, experience, profile photo, location preferences
    • Verification Documents: Government ID, insurance certificates, professional certifications, background check authorization
    • Payment Information: Bank account details (for payouts), billing address (processed securely through Stripe)
    • Task Information: Task descriptions, pricing, availability, requirements
    • Communications: Messages between users, support inquiries, reviews and ratings

    Information Collected Automatically

    • Device Information: Device type, operating system, browser type, unique device identifiers
    • Usage Data: Pages viewed, features used, time spent, click patterns
    • Log Data: IP address, access times, referring URLs, error logs
    • Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see our Cookie Policy)

    Location Information

    • Precise Location: With your consent, for Instant Work, task matching, and navigation
    • Approximate Location: Derived from IP address for service area determination
    • Address Information: Saved addresses for task locations

    2. How We Use Your Information

    PurposeTypes of Data
    Provide our servicesAccount, profile, task, location data
    Process paymentsPayment, billing information
    Verify identityID documents, verification data
    Enable communicationContact info, messages
    Match tasks with usersSkills, location, availability
    Prevent fraudDevice info, usage patterns, IP addresses
    Improve our platformUsage data, feedback, analytics
    Send notificationsContact info, preferences
    Comply with lawsAll relevant data as required

    4. Information Sharing and Disclosure

    We Share Information With:

    • Other Users: Task Givers and Doers can see each other's public profile information, ratings, and relevant task details
    • Service Providers: Companies that help us operate our platform (hosting, email, analytics)
    • Payment Processors: Stripe for payment processing (see Stripe's Privacy Policy)
    • Background Check Providers: For identity verification and safety screening
    • Legal Authorities: When required by law, court order, or to protect rights and safety
    • Business Transfers: In connection with a merger, acquisition, or sale of assets

    Third-Party Service Providers

    ProviderPurposeData Shared
    SupabaseDatabase & AuthenticationAccount data, app data
    StripePayment ProcessingPayment details, identity
    VercelWeb HostingIP address, usage logs
    Google MapsLocation ServicesLocation, addresses

    5. Data Retention

    We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:

    Data CategoryRetention PeriodReason
    Account InformationDuration of account + 3 yearsLegal obligations, disputes
    Transaction Records7 yearsTax and financial regulations
    MessagesDuration of account + 1 yearDispute resolution
    Verification DocumentsDuration of account + 5 yearsCompliance requirements
    Location Data (Real-time)24 hoursInstant Work feature
    Analytics Data2 years (anonymized)Service improvement
    Support Tickets3 yearsCustomer service quality

    After the retention period, data is securely deleted or anonymized.

    6. Your Privacy Rights

    Under PIPEDA and applicable provincial privacy laws, you have the following rights:

    Right to Access

    Request a copy of the personal information we hold about you

    Right to Correction

    Request correction of inaccurate or incomplete information

    Right to Deletion

    Request deletion of your account and personal information (subject to legal requirements)

    Right to Withdraw Consent

    Withdraw consent for data processing (may affect service availability)

    Right to Data Portability

    Receive your data in a commonly used, machine-readable format

    Right to Complain

    Lodge a complaint with the Office of the Privacy Commissioner of Canada

    How to Exercise Your Rights

    • Access and update your information: Account Settings
    • Request data export: Contact privacy@sasktask.com
    • Delete your account: Go to Account Settings → Delete Account, or contact support

    We respond to privacy requests within 30 days. Complex requests may take up to 60 days, and we'll notify you if additional time is needed.

    7. Data Security

    We implement industry-standard security measures to protect your information:

    🔒 Encryption

    • TLS 1.3 for data in transit
    • AES-256 encryption for data at rest
    • End-to-end encryption for messages

    🛡️ Access Controls

    • Role-based access for employees
    • Two-factor authentication available
    • Regular access reviews

    🔍 Monitoring

    • 24/7 security monitoring
    • Intrusion detection systems
    • Regular security audits

    📋 Compliance

    • PCI DSS compliant payment processing
    • Annual penetration testing
    • Employee security training

    8. International Data Transfers

    SaskTask is based in Saskatchewan, Canada. However, some of our service providers may store or process data in other countries, primarily the United States.

    • We ensure all international transfers comply with PIPEDA requirements
    • Data transferred to the US may be subject to US law enforcement access
    • We use contractual safeguards (Data Processing Agreements) with all service providers
    • Service providers must maintain security standards comparable to our own

    By using SaskTask, you acknowledge that your information may be transferred to, stored, and processed in countries outside Canada.

    9. Data Breach Notification

    In compliance with PIPEDA's mandatory breach notification requirements:

    • Assessment: We assess all potential breaches to determine risk of significant harm
    • User Notification: We notify affected users as soon as feasible if there's a real risk of significant harm
    • Regulator Notification: We report breaches to the Office of the Privacy Commissioner of Canada when required
    • Record Keeping: We maintain records of all breaches for a minimum of 24 months

    Notifications will include the nature of the breach, types of information involved, steps we're taking, and steps you can take to protect yourself.

    10. Children's Privacy

    SaskTask is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us atprivacy@sasktask.com. We will take steps to delete such information.

    11. Cookies and Tracking Technologies

    We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.

    12. Third-Party Links

    Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. When we make significant changes:

    • We'll notify you by email or in-app notification
    • We'll update the "Last updated" date at the top of this page
    • For material changes, we may require you to re-consent

    Your continued use of SaskTask after changes are posted constitutes acceptance of the updated policy.

    14. Contact Us & Complaints

    SaskTask Privacy Officer

    Email: privacy@sasktask.com
    Response Time: Within 30 days

    General Inquiries

    Email: support@sasktask.com
    Help Center: sasktask.com/help

    File a Complaint

    If you're not satisfied with our response to your privacy concern, you have the right to file a complaint with:

    Office of the Privacy Commissioner of Canada

    Website: www.priv.gc.ca
    Toll-free: 1-800-282-1376
    30 Victoria Street, Gatineau, Quebec K1A 1H3

    Summary of Key Points

    • We collect only what's necessary to provide our services
    • We never sell your personal information
    • You have rights to access, correct, and delete your data
    • We use industry-standard security to protect your information
    • We notify you of data breaches that may affect you
    • You can contact our Privacy Officer at privacy@sasktask.com