Privacy policy

task2k Ltd ("task2k", "we", "our") operates the website at task2k.com and the app at app.task2k.com. This policy explains what data we collect, why, and how we protect it.

1. What we collect

Account data. Email, password (hashed), full name, role.

Tester profile data. Phone, location, demographics, device ownership, bank account details (for payouts), and your qualification test recording.

Company profile data. Company name, industry, contact details, billing information.

Study data. Questions and tasks you create or respond to, recordings, written answers, and ratings.

Technical data. IP address, browser type, device type, a server-set task2k_device cookie used to detect fraud and duplicate accounts. We do not use third-party fingerprinting libraries.

2. How we use it

• To operate the platform — let testers find studies, let companies recruit, and process payouts.
• To detect fraud and duplicate accounts.
• To send transactional emails (study invitations, payout confirmations, support replies).
• To send announcement emails — you can opt out at any time.
• To comply with legal obligations (KYC, anti-money-laundering, tax).

3. Who we share it with

We do not sell your data. We share it only with:

• Companies running studies you apply to — they see your demographics, answers, and recording, but not your full real name or contact details by default.
• Payment processors — Paystack for tester payouts and study payments.
• Infrastructure providers — Vercel (hosting), Supabase (database + storage), Resend (transactional email).
• Regulators — only when required by Nigerian law.

4. Where it is stored

User data is stored on Supabase infrastructure in their EU region. Backups are encrypted at rest.

5. How long we keep it

Account data is kept for as long as you have an account. Study recordings are kept for 12 months after the study completes, then deleted. Financial records are kept for 7 years to meet Nigerian tax law.

6. Your rights

Under the Nigeria Data Protection Act (NDPA) you have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Request deletion (subject to legal retention).
• Export it in a portable format.
• Withdraw consent to marketing emails.

Email privacy@task2k.com to exercise any of these.

7. Cookies

We use only first-party cookies that are essential for the service:

• task2k_auth — your login session.
• task2k_device — a randomly generated ID for fraud detection.

We do not use Google Analytics, Facebook Pixel, or any third-party tracking on the marketing site.

8. Children

task2k is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes

If this policy changes materially, we will email registered users and post a notice in the app at least 14 days before the change takes effect.

10. Contact

Questions or complaints: privacy@task2k.com.
Data Protection Officer: dpo@task2k.com.