Privacy Policy
Last updated: January 2026
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information under Canadian privacy laws and under United States federal and state privacy laws.
Quick Navigation
Canada & United States Privacy Compliance
Canada: SaskTask operates in compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation including Saskatchewan's Freedom of Information and Protection of Privacy Act (FOIP), Alberta's Personal Information Protection Act (PIPA), British Columbia's Personal Information Protection Act (PIPA), and Quebec's Law 25.
United States: For US users we follow the California Consumer Privacy Act as amended by the CPRA, and the comprehensive state privacy laws of Virginia, Colorado, Connecticut, Utah, Texas and other states as they come into force, together with the CAN-SPAM Act and the TCPA for email and text messaging, and the Fair Credit Reporting Act where background checks apply.
PIPEDA's 10 Fair Information Principles
SaskTask adheres to PIPEDA's 10 Fair Information Principles:
1. Accountability
We're responsible for your personal information
2. Identifying Purposes
We tell you why we collect your data
3. Consent
We get your permission to collect and use data
4. Limiting Collection
We only collect what's necessary
5. Limiting Use, Disclosure, Retention
We only use data for stated purposes
6. Accuracy
We keep your information accurate and current
7. Safeguards
We protect your information with security measures
8. Openness
We're transparent about our practices
9. Individual Access
You can access and correct your data
10. Challenging Compliance
You can question our privacy practices
1. Information We Collect
Information You Provide Directly
- Account Information: Name, email address, phone number, password
- Profile Information: Bio, skills, experience, profile photo, location preferences
- Verification Documents: Government ID, insurance certificates, professional certifications, background check authorization
- Payment Information: Bank account details (for payouts), billing address (processed securely through Stripe)
- Task Information: Task descriptions, pricing, availability, requirements
- Communications: Messages between users, support inquiries, reviews and ratings
Information Collected Automatically
- Device Information: Device type, operating system, browser type, unique device identifiers
- Usage Data: Pages viewed, features used, time spent, click patterns
- Log Data: IP address, access times, referring URLs, error logs
- Cookies & Tracking: Session cookies, preference cookies, analytics cookies (see our Cookie Policy)
Location Information
- Precise Location: With your consent, for Instant Work, task matching, and navigation
- Approximate Location: Derived from IP address for service area determination
- Address Information: Saved addresses for task locations
2. How We Use Your Information
| Purpose | Types of Data |
|---|---|
| Provide our services | Account, profile, task, location data |
| Process payments | Payment, billing information |
| Verify identity | ID documents, verification data |
| Enable communication | Contact info, messages |
| Match tasks with users | Skills, location, availability |
| Prevent fraud | Device info, usage patterns, IP addresses |
| Improve our platform | Usage data, feedback, analytics |
| Send notifications | Contact info, preferences |
| Comply with laws | All relevant data as required |
3. Legal Basis for Processing
Under Canadian law and PIPEDA, we process your personal information based on:
- Consent: You've given us explicit or implied consent (e.g., creating an account, enabling location services)
- Contractual Necessity: Processing is necessary to fulfill our service agreement with you
- Legal Obligation: Processing is required to comply with applicable laws (e.g., tax reporting, fraud prevention)
- Legitimate Interests: Processing is necessary for our legitimate business interests, provided these don't override your privacy rights
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account Information | Duration of account + 3 years | Legal obligations, disputes |
| Transaction Records | 7 years | Tax and financial regulations |
| Messages | Duration of account + 1 year | Dispute resolution |
| Verification Documents | Duration of account + 5 years | Compliance requirements |
| Location Data (Real-time) | 24 hours | Instant Work feature |
| Analytics Data | 2 years (anonymized) | Service improvement |
| Support Tickets | 3 years | Customer service quality |
After the retention period, data is securely deleted or anonymized.
6. Your Privacy Rights
Under PIPEDA and applicable provincial privacy laws in Canada, and under state privacy laws in the United States, you have the following rights:
Right to Access
Request a copy of the personal information we hold about you
Right to Correction
Request correction of inaccurate or incomplete information
Right to Deletion
Request deletion of your account and personal information (subject to legal requirements)
Right to Withdraw Consent
Withdraw consent for data processing (may affect service availability)
Right to Data Portability
Receive your data in a commonly used, machine-readable format
Right to Complain
Lodge a complaint with the Office of the Privacy Commissioner of Canada
How to Exercise Your Rights
- Access and update your information: Account Settings
- Request data export: Contact privacy@sasktask.com
- Delete your account: Go to Account Settings → Delete Account, or contact support
We respond to privacy requests within 30 days. Complex requests may take up to 60 days, and we'll notify you if additional time is needed.
6a. United States State Privacy Rights
If you live in California, Virginia, Colorado, Connecticut, Utah, Texas or another US state with a comprehensive consumer privacy law, you have these additional rights:
- Right to know: the categories and specific pieces of personal information we collect, the sources, the purposes, and the categories of third parties we disclose to
- Right to delete personal information we hold about you, subject to legal, tax, fraud-prevention and dispute-record exceptions
- Right to correct inaccurate personal information
- Right to opt out of the sale or sharing of personal information and of targeted advertising and profiling
- Right to limit the use of sensitive personal information, such as government ID and precise location, to what is needed to deliver the service
- Right to non-discrimination — we will not deny service, charge different prices or lower quality because you exercised a privacy right
- Right to appeal a refused request (Virginia, Colorado, Connecticut and Texas) by replying to our decision email
We do not sell your personal information and we do not share it for cross-context behavioural advertising. We do not knowingly collect personal information from anyone under 18.
Shine the Light (California Civil Code § 1798.83): California residents may request details of any disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.
To exercise any of these rights, use your account privacy settings or email privacy@sasktask.com. We verify your identity through your account email before acting, respond within 45 days, and may extend once by a further 45 days with notice. An authorised agent may submit a request on your behalf with written permission.
7. Data Security
We implement industry-standard security measures to protect your information:
🔒 Encryption
- TLS 1.3 for data in transit
- AES-256 encryption for data at rest
- End-to-end encryption for messages
🛡️ Access Controls
- Role-based access for employees
- Two-factor authentication available
- Regular access reviews
🔍 Monitoring
- 24/7 security monitoring
- Intrusion detection systems
- Regular security audits
📋 Compliance
- PCI DSS compliant payment processing
- Annual penetration testing
- Employee security training
No System is 100% Secure
8. International Data Transfers
SaskTask is based in Saskatchewan, Canada and serves users across Canada and the United States. Some of our service providers store or process data in the United States, and data from US users may be processed in Canada.
- We ensure all cross-border transfers comply with PIPEDA and Quebec Law 25 requirements, including a privacy impact assessment where required
- Data stored in the US may be subject to access by US law enforcement; data stored in Canada may be subject to access by Canadian law enforcement
- We use contractual safeguards (Data Processing Agreements) with all service providers
- Service providers must maintain security standards comparable to our own
By using SaskTask, you acknowledge that your information may be transferred to, stored, and processed in both Canada and the United States.
9. Data Breach Notification
In compliance with PIPEDA's mandatory breach notification requirements:
- Assessment: We assess all potential breaches to determine risk of significant harm
- User Notification: We notify affected users as soon as feasible if there's a real risk of significant harm
- Regulator Notification: We report breaches to the Office of the Privacy Commissioner of Canada when required
- Record Keeping: We maintain records of all breaches for a minimum of 24 months
Notifications will include the nature of the breach, types of information involved, steps we're taking, and steps you can take to protect yourself.
10. Children's Privacy
SaskTask is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us atprivacy@sasktask.com. We will take steps to delete such information.
11. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience. For detailed information about the cookies we use and how to manage them, please see our Cookie Policy.
12. Third-Party Links
Our platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies before providing any personal information.
13. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes:
- We'll notify you by email or in-app notification
- We'll update the "Last updated" date at the top of this page
- For material changes, we may require you to re-consent
Your continued use of SaskTask after changes are posted constitutes acceptance of the updated policy.
14. Contact Us & Complaints
SaskTask Privacy Officer
Email: privacy@sasktask.com
Response Time: Within 30 days
General Inquiries
Email: support@sasktask.com
Help Center: sasktask.com/help
File a Complaint
If you're not satisfied with our response to your privacy concern, you have the right to file a complaint with:
Canada — Office of the Privacy Commissioner
Website: www.priv.gc.ca
Toll-free: 1-800-282-1376
30 Victoria Street, Gatineau, Quebec K1A 1H3
Quebec residents may also contact the Commission d'accès à l'information du Québec, and Alberta and British Columbia residents their provincial Information and Privacy Commissioner.
United States — State Attorney General
California residents: California Privacy Protection Agency — cppa.ca.gov
Residents of other states may complain to their State Attorney General, or to the Federal Trade Commission at reportfraud.ftc.gov.
Summary of Key Points
- We collect only what's necessary to provide our services
- We never sell your personal information
- You have rights to access, correct, and delete your data
- We use industry-standard security to protect your information
- We notify you of data breaches that may affect you
- You can contact our Privacy Officer at privacy@sasktask.com