Privacy Policy

This Privacy Policy is a draft for counsel. It describes how [Insert CIPC registered name] (Pty) Ltd ("we") process personal information when you use TaskUp SA. It is intended to comply with the Protection of Personal Information Act 4 of 2013 ("POPIA") and, where relevant, the Promotion of Access to Information Act 2 of 2000 ("PAIA").

Responsible party: [Insert CIPC registered name] (Pty) Ltd, [Insert registration number], [Insert registered address, South Africa]. Information officer: [Insert information officer name], [Insert privacy / information officer email].

1. Personal information we collect

• Account: name, email, password (hashed by our auth provider), phone if you add it, account type (personal or business), language and suburb preferences.
• Profile and marketplace: photos, bios, skills, rates, job posts, offers, messages, call metadata, ratings, location you choose to share (including approximate coordinates for local jobs).
• Verification: identity documents, selfies, qualification certificates, CIPC and business documents you upload. These are sensitive and stored with restricted access.
• Payments: wallet and ledger records on our systems; bank and identity details shared with our payment processor (Paystack Payments South Africa, a licensed payment processor, which processes card payments and bank transfers on our behalf) for account verification and settlement. We do not store full card numbers — card details are entered on the processor's own payment page, never on ours.
• Support: chats with human agents and with the AI assistant, including what you type.
• Technical: device, browser, IP address, cookies and similar identifiers, app logs and crash reports.

We collect information you give us, information created by your use of the Platform, and information from operators (for example Google if you use Google sign-in, and our payment processor).

2. Why we process it (purpose and POPIA justification)

Counsel should map each purpose to a POPIA section 11 condition. Draft purposes:

• Create and secure your account (contract / legitimate interest);
• Run the marketplace, escrow allocation, fees, VAT display and disputes (contract);
• Verify identity or business where you ask us to, or where law or our payment processor requires it (legal obligation / contract);
• Prevent fraud, abuse and off-platform payment circumvention (legitimate interest / legal obligation);
• Support, safety and service messages (contract / legitimate interest);
• Improve the product using aggregated or de-identified analytics (legitimate interest);
• Direct marketing only where POPIA allows (consent or existing-customer exception — to be confirmed by counsel);
• Comply with tax, FICA-related partner requests, and lawful demands.

You may refuse optional fields, but we may not be able to offer jobs, payouts or verification without certain information.

3. Operators and sharing

We share personal information with operators who process it on our instructions, including:

• Hosting, database and authentication (currently Supabase / Lovable Cloud infrastructure);
• Our payment processor for card reservations, charges, refunds, chargebacks, bank account verification and settlement;
• Our transactional email provider, which sends payment receipts and cash-out notices;
• Error and monitoring tools;
• Google, if you choose Google sign-in;
• Professional advisers and, if required, the Information Regulator, SAPS or courts.

We do not sell personal information. Listings and public profile fields you choose to show are visible to other users as part of the marketplace.

4. Cross-border transfer

Servers or support tools may be outside South Africa. POPIA section 72 will be addressed by counsel (adequacy, contract clauses, or another lawful basis). We will not transfer special personal information abroad except as allowed by POPIA.

5. Retention

We keep account and transaction records for as long as the account is open and thereafter as required for disputes, tax, FICA partner rules and legal claims (counsel to set periods, often up to 5 years or longer for financial records). Verification documents are kept only as needed for the check and legal retention. You may ask for deletion; we may retain what the law or an open dispute requires.

6. Security

We use access controls, encryption in transit, and restricted storage for verification files. No method is perfectly secure. Tell us promptly at [Insert privacy / information officer email] if you suspect a breach of your account.

7. Your rights

Subject to POPIA, you may request:

• Access to your personal information;
• Correction of inaccurate information;
• Deletion or destruction where we have no lawful basis to keep it;
• Objection to processing based on legitimate interests or direct marketing;
• Restriction of processing in limited cases;
• To lodge a complaint with the Information Regulator (South Africa).

Information Regulator: JD House, 27 Stiemens Street, Braamfontein, Johannesburg, 2001 · POPIAComplaints@inforegulator.org.za · inforegulator.org.za. PAIA manual: to be published at this URL or at [Insert registered address, South Africa] when required.

8. Children

The Platform is not for children under 18. We do not knowingly create accounts for minors. If we learn we have, we will close the account and delete information except where the law requires otherwise.

9. Cookies

We use necessary cookies and similar storage for login and security. Analytics or marketing cookies, if added, will be described here and, where required, consented. You can control cookies in your browser; blocking some cookies may break sign-in.

10. Automated decision-making

Feed ranking, fraud flags and AI support may use automated processing. They do not, on their own, grant or refuse a legal right except as counsel confirms. You may query a decision that significantly affects you via [Insert privacy / information officer email].

11. Changes

We will post updates on this page with a new date. Material changes may also be notified in-app or by email.