Privacy policy

Task2k is a product of Waldroid ("task2k", "we", "our") operates the website at task2k.com and the app at app.task2k.com. This policy explains what data we collect, why, and how we protect it.

1. What we collect

Account data. Email, password (hashed), full name, role.

Tester profile data. Phone, location, demographics, device ownership, bank account details (for payouts), and your qualification test recording.

Business profile data. Business name, industry, contact details, billing information.

Study data. Questions and tasks you create or respond to, recordings, written answers, and ratings.

Technical data. IP address, browser type, device type, a server-set cookie used to detect fraud and duplicate accounts. We do not use third-party fingerprinting libraries.

2. How we use it

• To operate the platform, let testers find studies, let businesses recruit, and process payouts.
• To detect fraud and duplicate accounts.
• To send transactional emails (study invitations, payout confirmations, support replies).
• To send announcement emails, you can opt out at any time.
• To comply with legal obligations (KYC, anti-money-laundering, tax).

3. Who we share it with

We do not sell your data. We share it only with:

• Businesses running studies you apply to — they see your demographics, answers, and recording, but not your full real name or contact details by default.
• Payment processors — Paystack for tester payouts and study payments.
• Regulators — only when required by Nigerian law.

4. Where it is stored

User data is stored on Supabase infrastructure in their EU region. Backups are encrypted at rest.

5. How long we keep it

Account data is kept for as long as you have an account. Study recordings are kept for 12 months after the study completes, then deleted. Financial records are kept for 7 years to meet Nigerian tax law.

6. Deleting your account

You can permanently delete your account yourself, at any time, without contacting us:

• In the mobile app — Settings tab → Danger Zone → Delete account.

• On the web — Settings → Danger Zone → Delete my account.

You will be asked to re-enter your password and confirm. Deletion is immediate and cannot be undone — this is a deletion, not a temporary deactivation, and there is no way to restore the account afterwards.

6. Your rights

Under the Nigeria Data Protection Act (NDPA) you have the right to:

• Access the personal data we hold about you.
• Correct it if it's wrong.
• Request deletion (subject to legal retention).
• Export it in a portable format.
• Withdraw consent to marketing emails.

Email privacy@task2k.com to exercise any of these.

7. Cookies

We use only first-party cookies that are essential for the service:

• your login session.
• a randomly generated ID for fraud detection.
• We use Google Analytics, Facebook Pixel, or any third-party tracking for functionality and marketing.

8. Children

task2k is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes

If this policy changes materially, we will email registered users and post a notice in the app at least 14 days before the change takes effect.

10. Contact

Questions or complaints: contact@task2k.com if you have an account with us, you can also open a ticket when you log in your account