1. Introduction
Taskpull (“we”, “us” or “Platform”) is committed to protecting your privacy. This Privacy Policy describes how Taskpull (located at Radelandstraße 38, 13589 Berlin, Germany) collects, uses, and shares personal data when you use taskpull.com (the “Site”) or our services. We comply with the EU General Data Protection Regulation (GDPR) and relevant German laws in processing personal data. By using our Platform, you consent to the practices described in this Policy.
2. Data We Collect
We collect personal information that you provide directly and data that is collected automatically:
-
Information You Provide: When registering or using Taskpull, you may give us details such as your name, email, username, password, profile information, billing and mailing addresses, phone number, date of birth, and identity verification documents (e.g. a copy of ID or passport). Freelancers may need to provide tax identification or payment account details (e.g. PayPal email). Communication with us (support inquiries, dispute resolution) may also be recorded.
-
Payment Information: Payments are handled via third-party processors (Stripe and PayPal). You will provide credit card or bank details directly to these processors; Taskpull itself does not store your full financial account numbers. We receive limited payment confirmations (such as a transaction ID or payment status) needed to record and validate transactions.
-
Automatically Collected Data: When you use the Site, we collect technical data like your IP address, device type, operating system, browser, and cookies that track your activity (pages viewed, clicks, and other usage statistics). We also log timestamps of logins, orders, messages sent, etc. If you enable location services, we may receive your approximate location (e.g. IP-based location or GPS with consent).
-
Data from Third Parties: If you link your account with third-party platforms (e.g. signing up via Google or Facebook), we receive information such as your name or email from them, subject to their privacy policies. For identity verification, we may receive verification status or fraud alerts from identity verification services or payment processors.
3. How We Use Personal Data
We process personal data to operate and improve our services, in particular:
-
Providing Services: We use your information to create and manage your account, facilitate marketplace transactions (e.g. allow Buyers and Sellers to connect and contract), and enable payments. For example, we use your personal details to allow you to log in, purchase services or products, communicate with other users on the Platform, and for Sellers to receive payments.
-
Ensuring Safety and Compliance: We require identity verification for freelancers (and sometimes for buyers) to maintain a secure marketplace. Your data may be used to verify age (18+ requirement), confirm your identity, and detect and prevent fraud, money laundering, or other illegal activities. We may run checks against databases or use third-party KYC (Know Your Customer) services.
-
Communication: We use contact information (email, phone) to send service-related communications: confirmations of orders, updates on transactions, security alerts (like new device login), and changes to terms or policies. With your consent, we may send promotional emails or newsletters; you can opt out at any time.
-
Customer Support: When you contact us with questions or for help, we use your information to respond and resolve issues. This may include helping mediate disputes between users or processing refund requests under our 14-day guarantee.
-
Improvement and Analytics: Usage data and cookies help us understand how users interact with Taskpull. We analyze this data to fix bugs, develop new features, and improve user experience. For instance, we may track which service categories are popular to improve our offerings. We may also use aggregated, anonymized data for business insights.
-
Legal Obligations: We may process and retain personal data as required to comply with laws – for example, retaining transaction records for tax/audit purposes, responding to lawful requests by authorities, or fulfilling obligations under consumer protection or financial regulations.
Our legal bases under GDPR for processing your data include: contractual necessity (providing the services you requested), legitimate interests (improving our platform, preventing fraud), consent (for optional uses like marketing cookies or newsletters), and legal compliance.
4. Cookies and Tracking Technologies
Taskpull uses cookies and similar technologies to enhance your experience. Cookies are small text files placed on your device. We use:
-
Strictly Necessary Cookies: These are essential for the Site’s functionality (e.g. keeping you logged in, remembering items in your cart). Without these, the Platform cannot function properly. They are generally session cookies and do not require consent.
-
Preference Cookies: To remember your choices and settings (like language or region preferences).
-
Analytics Cookies: To collect information about site traffic and user interactions (for example, via Google Analytics) so we can improve our services. The data is aggregated and not used to identify individuals.
-
Marketing Cookies: (If applicable) For any advertising or tracking across sites to show relevant ads. Taskpull currently does not use third-party advertising cookies, but if we introduce them, we will request your consent.
Cookie Consent: In compliance with EU law, we obtain your consent before setting any non-essential cookies on your device. When you first visit, you will see a cookie banner requesting your consent for analytics or other cookies. You can choose to accept or reject these. You can also withdraw consent at any time by adjusting your browser settings or using our provided cookie preference tool. Rejecting cookies may limit some functionality, but all core features (purchasing services, browsing listings) will remain accessible even if you decline optional cookies.
For more details, please see our separate Cookie Policy below, which provides specific information about each cookie’s purpose and duration.
5. Sharing of Information
We treat your personal information with care and do not sell or rent it. However, we may share data in the following circumstances:
-
With Other Users: To facilitate transactions, limited information is shared between users. For example, when a Buyer orders a service, the Seller will see the Buyer’s username and any information the Buyer provides for the project. Sellers’ profiles (username, country, ratings, and profile description) are public on the Platform. We do not disclose personal contact info (email, phone) to other users, and we prohibit users from sharing such info outside the Platform.
-
Service Providers: We use third-party companies to support our operations – for instance, payment processors (Stripe, PayPal), cloud hosting, email delivery services, customer support software, and identity verification services. These providers only receive the data necessary to perform their functions (e.g. payment processors get transaction details, banks or card info as needed; cloud storage may host our database). They are contractually obligated to protect your data and use it only for our specified purposes.
-
Legal and Safety: If required by law or valid legal process (such as a court order, subpoena, or government demand), we may disclose relevant data. We may also share information when necessary to investigate or report fraud, intellectual property infringement, suspected illegal activities, or threats to the safety of any person. This includes exchanging information with law enforcement or other companies for fraud prevention and credit risk reduction.
-
Business Transfers: If Taskpull is involved in a merger, acquisition, investment, financing, or sale of all or a portion of assets, your data may be transferred to the new owner as part of that transaction. If such a change happens, we will notify users (e.g. via email or notice on our Site) about any choices they may have regarding their information.
6. International Data Transfers
Taskpull is global, so your data may be transferred to or stored on servers outside your country, including countries outside the European Economic Area (EEA). For example, if we use a cloud provider based in the USA, or if a Buyer and Seller are in different countries, data may be accessed internationally. Whenever we transfer personal data out of the EEA, we ensure appropriate safeguards are in place in accordance with GDPR (such as EU Commission Standard Contractual Clauses, or transferring to countries with an adequacy decision). Our third-party processors (Stripe, PayPal) also comply with GDPR for transfers of EU personal data (for instance, Stripe uses SCCs and PayPal is governed by European data protection standards).
7. Data Retention
We retain personal data only as long as necessary for the purposes described:
-
Account information is kept as long as you have an active account. You may delete certain information via your profile, and you can request account deletion as described below.
-
Content you generate (such as reviews, profile info, messages) may remain while your account is active or until it’s no longer needed to provide the service. If you delete your account, we will anonymize or delete personal data, but note that public content like reviews or portfolio items might remain visible in anonymized form (we will remove attribution to you).
-
Transaction records are retained for at least the minimum period required by law (for example, 10 years under German commercial law for relevant records, or 7 years under tax law), or longer if necessary for legal claims.
-
Backup and archival copies: We periodically backup our database for integrity. These backups are securely stored and are deleted on a rolling basis. There may be a short delay in removing data from backups after it is deleted from our live systems.
-
If data is needed for a legal dispute or enforcement of our Terms, we will keep it as long as the issue is ongoing.
After the retention period, we will securely erase or anonymize personal data.
8. Your Rights as a Data Subject
Under the GDPR and other privacy laws, you have various rights regarding your personal data. You may exercise these (subject to certain legal limitations) by contacting us (see Section 10). These rights include:
-
Right to Be Informed: The right to receive clear and transparent information about how we collect and use your data (which this Privacy Policy aims to provide).
-
Right of Access: You can request a copy of personal data we hold about you and information on how we process it. We will provide this in a commonly used electronic format.
-
Right to Rectification: If any personal data is inaccurate or incomplete, you have the right to ask us to correct or update it. You can also update certain info via your account settings.
-
Right to Erasure (Right to be Forgotten): You may request deletion of your personal data. We will honor this to the extent we are not required to retain data by law or for legitimate business purposes. Deleting your account will remove your profile and personal info, though some minimal records may be kept (see Data Retention above).
-
Right to Restrict Processing: You can ask us to limit processing of your data (for example, while a complaint about accuracy is being resolved, or if you object to processing and we are considering your request).
-
Right to Data Portability: You have the right to receive your personal data that you provided to us, in a structured, commonly used, machine-readable format, and to have it transmitted to another service where technically feasible. This applies to data processed by us based on consent or contract.
-
Right to Object: You may object to our processing of your personal data for certain purposes, such as direct marketing or when processing is based on our legitimate interests. If you object to marketing, we will stop sending you marketing communications. If you object on grounds relating to your particular situation and our processing is based on legitimate interests, we will reconsider processing unless we have compelling legitimate grounds or need to continue for legal reasons.
-
Right not to be subject to automated decisions: Taskpull does not make any legally significant decisions about you solely by automated means (no profiling that produces legal effects). If this changes, you have rights to not be subject to decisions based purely on automated processing without human involvement.
-
Right to Withdraw Consent: If we rely on your consent for any processing (e.g. for sending newsletter or using non-essential cookies), you have the right to withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing already carried out, and we will stop the consent-based processing going forward.
To exercise these rights, please contact us at the email provided in Section 10. We will respond to your request as soon as possible, and in any event within one month, as required by GDPR (this may be extendable by two further months for complex requests, but we will inform you if an extension is needed). Please note we may need to verify your identity before fulfilling certain requests, to protect your privacy.
If you believe our processing of your data violates the law, you also have the right to lodge a complaint with a supervisory data protection authority. For example, if you are in Germany, you can contact the Berlin Commissioner for Data Protection, or if elsewhere in the EU, your local Data Protection Authority. We encourage you to contact us first so we can address your concerns directly.
9. Data Security
We implement appropriate technical and organizational measures to secure personal data. This includes encryption of data in transit (HTTPS on our website), encryption of sensitive data at rest, firewalls and intrusion detection systems, and access controls to ensure only authorized personnel can access personal data. Our staff are trained on data protection. Identity verification documents and other sensitive files you upload are stored securely and with limited access.
While we strive to protect your information, no system is 100% secure. We therefore cannot guarantee absolute security of data. You are responsible for keeping your account credentials secure – do not share your password and use a unique, strong password. If you suspect any unauthorized access to your account or any security breach, please notify us immediately. We will inform you and regulators of any significant data breach as required by law.
10. Contact Us
For privacy inquiries, data access or deletion requests, or any concerns, please contact our Data Protection Officer (DPO):
-
Email: privacy@taskpull.com (subject: “Privacy Inquiry”)
-
Mail: Data Protection Officer, Taskpull, Radelandstraße 38, 13589 Berlin, Germany
We will review and address your inquiry promptly.
11. Updates to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. If we make material changes, we will notify users by email or by posting a prominent notice on the Site. The “Last Updated” date at the top indicates when changes were last made. We encourage you to review this Policy periodically. Continuing to use Taskpull after updates constitutes acceptance of the revised Policy.
By using our Platform, you acknowledge that you have read and understood this Privacy Policy.