Archived version 2026-09-09.2
Privacy policy
What TASK collects, why it is used, who can see it, and how to exercise your choices.
Who is responsible
Task Marketplace LLC operates TASK and is responsible for its information practices. This policy covers TASK websites, accounts, requests, provider profiles, personal reservations, arrival sharing, support, and authorized API access. It does not replace the separate privacy practices of a seller or payment provider acting for its own purposes. Task Marketplace LLC, 22072 Monico Dr, Moreno Valley, CA 92557. Help: support@task.com.ai. Privacy: privacy@task.com.ai. You may also use TASK's Help page without accepting revised terms.
Information you provide
We collect account and contact details, chosen roles, profile photos/bios, skills, service areas, availability, credential submissions, prompts, draft edits, uploads, task descriptions, private access instructions, offers, assignments, completion evidence, reviews, support messages, and policy/payment approvals. Guests can reserve time with optional contact and notes. An invoice may require recipient contact. Avoid unnecessary sensitive information; we do not ask for full card numbers in chat or full dates of birth for ordinary eligibility acknowledgement.
Information from use and other parties
We receive identity and session information from Clerk; payment, seller-connection, invoice, refund, and dispute information from Square; delivery/bounce information from email services; and information other task participants provide about the work. We record request/device and security information, timestamps, browser storage identifiers, and abuse-prevention hashes of network/device signals. Hashed information can still relate to a person and is protected accordingly.
Purposes and processing
We use information to operate and secure TASK, authenticate users, provide AI assistance, save drafts, match requests, coordinate work and payments, personalize experiences, provide support, prevent fraud, comply with law, evaluate quality and improve products and AI systems. Authorized personnel may review relevant records for these purposes. We also support advertising and campaign measurement subject to applicable choices and consent. Advertising events use an allowlist; private conversations, uploads, exact addresses, access codes, live location or ETA, and payment details are excluded from advertising payloads. Evaluation examples are minimized and access-controlled. New uses must remain consistent with applicable rights and commitments.
AI processing before signup
When you send a prompt or attachment, TASK transmits the content needed to xAI to generate a response, including for guests. TASK records generation output, model, timing, and token/cost metadata. Do not send confidential medical or legal files, passwords, card numbers, or other unnecessary sensitive records. Account signup is not required for this processing to occur. Vendor retention follows the applicable account configuration and vendor policies; TASK's local deletion cannot guarantee deletion from an independent vendor's legally retained records.
Service providers
We use Clerk for identity and authentication; Cloudflare for hosting, database, object storage, abuse protection, and email infrastructure; Square for payments and invoices; xAI for AI responses; and Apple services for optional mapping/routing. These providers receive information necessary for their roles under applicable arrangements. Services and storage can operate in the United States and other locations. Where cross-border data-transfer safeguards are legally required, we apply the relevant contractual or other lawful safeguards.
Other participants and public information
Public provider profiles contain the information deliberately published there, including approximate area and genuine reviews. Ordinary pre-assignment matching shows aggregates and approximate task information, not private contact/access details or hidden provider identities. Accepted participants receive information needed for their agreed work. Exact addresses and instructions are access-controlled. A payment dispute may require the actual delivery/service address and relevant evidence. Public profiles, reviews, and permitted share previews may be indexed or copied by others.
Location and arrival sharing
A manually entered task location is used for that task. Device location is requested separately for optional foreground routing. Arrival recipients see the shared ETA/progress and freshness, not precise live coordinates or the private destination. Backgrounded browsers may stop updating. We do not store route histories by default. An arrival link is a bearer link: anyone you give it to may forward it. Revocation or expiry ends TASK access to it.
Cookies, browser storage, and privacy signals
TASK uses identity/security cookies, a guest ownership cookie lasting up to 30 days, local storage and IndexedDB for recovery and preferences. Essential storage supports requested functions. Optional advertising and measurement are controlled separately through the Privacy Center, including for guests. Global Privacy Control disables sale/sharing and targeted-advertising processing for the requesting browser, and for signed-in users when the preference is saved. Optional consent is obtained where required. TASK does not sell private task records as a data product. A general Do Not Track signal does not disable essential processing. Clearing browser storage may remove unsynced work or guest access.
Retention
Raw TASK AI/debug traces last 30 days; durable user draft state is separate. Unclaimed guest drafts/uploads expire after 30 days of inactivity. Signed-in drafts stay while the account is active or until deletion, with notice before cleanup after 12 months of account inactivity. Ordinary closed-task conversation/media expires 180 days after final closure unless relevant evidence must be retained. We keep the minimum transaction and claims packet for seven years after final settlement or dispute closure, whichever is later, and acceptance records for seven years after account closure or the related final dispute. These are purpose-based operating periods, not a claim that every law requires seven years.
Additional retention details
Guest appointment contact/notes are removed 90 days after completion/cancellation, apart from separate invoice evidence; an owner can retain a minimal calendar time/status record. Arrival session payloads are removed within 24 hours after revocation/expiry. Ordinary security/delivery logs and closed support cases last 90 days. Selected evaluation examples last up to 12 months and remain protected personal information unless truly deidentified. Superseded raw credential documents are removed within 30 days absent a specific need; minimal task-time verification receipts may remain with an agreement. Active public profiles and eligible reviews follow their service purpose and deletion review. TASK-controlled backups expire within 35 days, and deletion records are reapplied on restoration.
Exceptions and legal holds
We preserve only records reasonably needed for an unresolved payment, safety issue, legal obligation, or dispute under a documented hold. Access is restricted, the reason is reviewed, and removal resumes when that purpose ends. Account deletion unlists your profile and revokes access but does not erase unpaid obligations, refund rights, or required transaction evidence. Square and other independent providers may retain their own records under their policies and legal duties.
Access, correction, deletion, and appeals
Use Settings or the Help page to request an export, correction, deletion, or privacy review, or write to privacy@task.com.ai. We verify identity proportionately before disclosing or deleting private information; authorized agents may need proof of authority. We respond within applicable legal deadlines, explaining any lawful exception, extension, or denial and how to appeal. Where applicable, rights include access, correction, deletion, portability, opt-out of sale/sharing or targeted advertising, and limits on certain sensitive-data uses. Availability of a statutory right depends on the jurisdiction and law's applicability; we also accept ordinary account requests. We do not discriminate for exercising a protected right.
Your controls and security
You can edit eligible account/profile information, choose notification preferences, delete drafts, revoke external agent access, stop arrival sharing, and request account closure. Revoking optional permissions does not undo a payment already authorized. We use access controls, encryption in transit, restricted secrets, and audit records to protect data, but no service can promise absolute security. Report suspected unauthorized access through Help. Do not send passwords or full card numbers in an email or support message.
Children, legal requests, and organizational changes
TASK's transactional service is for adults; it is not directed to children. If a child's information was submitted without appropriate authority, contact us for review and removal where required. We may disclose necessary records in response to valid legal process, protect people from harm, investigate fraud, or establish legal claims. A business transfer may include service records with appropriate confidentiality and notice; it does not authorize unrelated uses contrary to applicable rights.
Policy changes
We publish effective versions and preserve prior versions. Routine updates consistent with the disclosed purposes can be posted without individual messages. We give notice of material changes and obtain additional permission where required, including for a new use that conflicts with an earlier commitment. Continued use is not a substitute for consent where consent is required.
Effective September 9, 2026 · Version 2026-09-09.2. Policies and archived versions
Task Marketplace LLC22072 Monico Dr, Moreno Valley, CA 92557
Help and privacy requests