Privacy Policy

Taskedwork is a work queue that studios and agencies use to take requests from, and deliver work to, their clients. This policy explains what we collect, why, who sees it, and what control you have.

Who is who

The studio that invites you is responsible for the requests, files and notes that it and its clients put into Taskedwork. For that content, we act as the studio's processor: we store and process it on the studio's behalf and on its instructions. For studio members' sign-in details, for security and abuse prevention, and for how the service itself is run, we are the controller.

What we collect

• Studio members: email address (used to sign you in with a one-time code), your name if you give it, your studio's name, and your team's roles.
• Clients: the name and email address your studio enters for you, and the requests, notes, links and files you send or receive through your private page.
• Decisions: when a client approves work or asks for changes, we record the time, IP address and browser details, as proof of who decided what and when.
• Files: anything uploaded to a request or deliverable. These may contain personal data about other people, which the uploader is responsible for.
• Security and technical data: IP address, browser details and request timing, used to keep the service secure, limit repeated or abusive requests, and diagnose errors.
• Email delivery: we send service emails such as new requests, work ready for review, invitations and sign-in codes. We record whether they were sent.
• Billing: studios that subscribe pay through Lemon Squeezy. It collects payment card and billing details directly, and we never see or store your card number. We receive your plan, subscription status and billing dates so we can run your account.
• Website analytics (only if you accept): on our public pages, Google Analytics records pages viewed, approximate location, device and browser details, and a cookie identifier. It is never used on client pages, review pages or inside the app.

We do not run advertising trackers, we do not sell personal data, and we do not use your content to train AI models.

Why we use it

• To provide the service you or your studio asked for: running accounts, queues, reviews, approvals and notifications. (Performance of a contract.)
• To keep the service secure and reliable: preventing abuse, limiting repeated requests, fixing faults, and keeping a record of approvals. (Our legitimate interests.)
• To meet legal obligations, such as responding to valid legal requests. (Legal obligation.)
• To understand how our public pages are used and improve them, only if you accept analytics cookies. (Consent, which you can withdraw at any time.)

Cookies

• A sign-in session cookie for studio members.
• A private cookie that keeps a client signed in to their own page, so they don't need a password.
• Google Analytics cookies (names starting with _ga), only on public pages and only if you accept them.

The first two cookies are essential to the service and are always used. Analytics cookies are optional: we ask on your first visit, and you can change your choice at any time with the "Cookie settings" link in the footer. We don't use advertising cookies. Your choice is saved in your browser's local storage on your device.

Who processes data for us

• Supabase: database, authentication, file storage and real-time updates.
• Resend: sending email.
• Our hosting provider: serving the application.
• Lemon Squeezy: payments, invoicing and tax, as the merchant of record. For payment data it acts under its own privacy policy.
• Google Analytics: website statistics on our public pages, only if you accept analytics cookies.

Our providers process data only to provide their service, under their own contractual and security commitments. We may also disclose information if the law or a valid legal process requires it, and we will limit it to what is required.

Where data is processed

Our providers may process data in countries other than your own. Where personal data is transferred across borders, we rely on appropriate safeguards required by the law that applies, such as standard contractual clauses or an adequacy decision.

Files and links

Uploaded files are stored privately and are only reachable through short-lived links shown to people who are allowed to see them. A client's page link and each review link are secrets: anyone who has one can use it, so please don't share them. Studios can replace a client's link at any time, which stops the old one working.

How long we keep data

• Account and content: kept while your studio's account is active.
• Approval records: kept with the request they relate to, so that a studio and its client can rely on them.
• Security and technical data: kept only as long as needed for security, abuse prevention and troubleshooting.
• After deletion: when a studio asks us to delete its account, we delete its data, except where the law requires us to keep something. Copies held in backups are removed when those backups are overwritten in the normal cycle.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to withdraw consent where we rely on it. Clients should ask their studio first, since the studio controls their content; studio members can write to us directly. We will respond within the time the law requires. Contact: contact@taskedwork.com.

If you believe we have handled your data unlawfully, you also have the right to complain to your local data protection authority. We would appreciate the chance to put it right first.

Security

Access to data is limited by database rules so that each studio and each client sees only its own information, files are private, and links are short-lived. No system is perfectly secure.

If something goes wrong

If a breach affects your personal data in a way that creates a risk to you, we will tell the affected studios and individuals promptly, and notify regulators where the law requires.

Children

Taskedwork is for business use and isn't intended for people under 16. If you believe a child has given us personal data, contact us and we will delete it.

Changes

If we change this policy in a meaningful way we'll update the date above and, where it matters, tell you by email.

Contact

Questions about privacy: contact@taskedwork.com.