UpTask Privacy Policy

1 Who we are and what this policy covers

This Privacy Policy explains how Boris Verigin, doing business as UpTask ("UpTask," "we," "us," or "our"), collects, uses, discloses, and retains personal information through uptask.io, the UpTask customer application, the UpTask Pro application for independent professionals, and related booking, communication, support, and payment features (together, the "Platform"). It applies to visitors, Customers, and Professionals. Section 4 explains AI assistance and standard booking.

A "Customer" requests or purchases work. A "Professional" is the independent individual or business that evaluates or accepts a request and performs the work. UpTask connects these parties and provides technology and, in selected territories, payment facilitation. Professionals are independent businesses, not UpTask employees performing the booked work.

UpTask is responsible for personal information it processes for its own Platform activities. A Professional may separately collect and use information to provide services, keep business records, and meet legal obligations. Their independence does not remove UpTask's responsibility for its own collection, disclosure, security, or handling of privacy requests. Section 8 explains this relationship.

This policy describes our information practices; it does not replace a consent or permission required for a particular use. Separate notices may explain optional features when you use them. Our Terms of Service govern Bookings, payments, cancellations, and responsibility for the work.

2 Personal information we collect

Account and contact information. We collect information you provide when creating an account, submitting a request, or contacting us, such as your name, email address, telephone number, account identifiers, authentication information, and communication preferences. If guest requests are available, the information associated with the request remains covered by this policy.

Requests, properties, and appointments. This includes the service address, service category, description of the work, preferred date and time, access instructions, relevant property conditions, estimates or agreed prices, booking references, assignment status, and changes or cancellations. Photographs, videos, documents, and other attachments you choose to submit may show a home's interior, possessions, location details, or other people.

Communications and support. We collect service-related messages sent through the Platform, submitted attachments, and communications with support. We also receive information about arrival, work progress, completion, complaints, refund requests, and disputes, including records or photographs supplied by either party. A Professional or Customer may therefore provide information about the other party's Booking.

Payments and transactions. For payments through UpTask, we process information needed to arrange payment and payouts, calculate commissions, issue refunds, reconcile transactions, and resolve disputes. This can include amounts, currency, transaction references, billing details, payment and refund status, processor tokens, and available payment-method descriptors such as card brand and last digits. Professional onboarding or payout features may require business, banking, identity, or tax information through the relevant payment or verification provider.

Professional information. Professionals may provide a profile name and photograph, business and contact details, service categories, experience, availability, a base location or service area, ZIP codes or travel radius, and information about accepted and completed work. We also process applicable fees, commissions, and payout records. If a particular onboarding or verification process requests licenses, insurance, identity documents, tax information, or screening results, its notice identifies the requested information and purpose. This policy does not mean that every Professional undergoes every type of verification.

Device and usage information. When you use the Platform, our systems and enabled vendors may receive IP address, browser or device type, operating system, app version, device or session identifiers, referring pages, interaction events, timestamps, crash reports, and security logs. Cookies, local storage, app software development kits, and similar tools can generate this information. Section 7 addresses the tools enabled for analytics or advertising.

Location and device permissions. We receive the addresses, base locations, and service areas that users enter. An IP address can indicate an approximate location. Access to precise device location, camera, microphone, or selected media depends on the feature and relevant permission, as explained in Section 6. Entering a service address or work radius does not itself authorize GPS tracking.

Sensitive information. An exact location, account access credentials, financial details, identity or tax documents, or information visible in an attachment may be sensitive under applicable law. Provide only information relevant to your request or the designated verification or payment flow. Do not put full card details, government identifiers, passwords, or unrelated medical information into ordinary task descriptions or messages. AI assistance is for describing the work and preparing service options; provide contact and other personal details through the standard booking fields.

3 Sources and purposes of processing

We obtain information directly from you; from the Customer or Professional involved in a request; automatically through your use of the Platform; and from payment, communication, mapping, security, and other vendors supporting the features you use. Where enabled, onboarding or verification providers may supply relevant records. We do not gain access to your external bank account or private off-platform communications merely because you make a Booking.

We use relevant information to create and manage accounts; receive and clarify service requests; identify potentially available Professionals; arrange assignment, scheduling, and access to the property; deliver messages and appointment updates; and maintain a record of the requested and performed work. Matching can take account of service category, service area, availability, and request details.

We use transaction and booking records to facilitate authorized payments, payouts, commissions, cancellations, refunds, accounting, and dispute resolution. We use support, device, and security information to answer questions, investigate reported problems, authenticate users, prevent fraud and misuse, diagnose failures, and protect the Platform and its users.

We may analyze usage, feedback, and operational records to understand demand and improve Platform functions, subject to the choices described below. Promotional messages, optional advertising tools, and precise location features remain subject to their applicable notices and permissions. Section 4 describes AI assistance. We also process information as reasonably necessary to comply with law, enforce agreements, preserve evidence, and establish or defend legal claims.

We do not use private job photographs for unrelated public advertising without separate permission. If information is deidentified, we maintain it in that form and do not attempt to reidentify it except as allowed by applicable law. Removing a name or hashing an email address does not by itself make information anonymous.

4 AI assistance and standard booking

UpTask uses AI to help identify service categories and prepare service options and estimates for draft requests. When this feature uses AI, UpTask sends your chat messages, photographs you choose to attach, relevant conversation context, and service-draft details to OpenAI for processing. Photographs or free-text messages may contain personal information, including information about your home or other people. Do not include contact details, payment credentials, identity documents, access codes, or unrelated sensitive information in the chat or photographs.

Contact details, service addresses, appointment selections, and payment information are entered through the standard UpTask booking forms. Those booking fields are not included in the assistant's AI request. This does not prevent personal information you voluntarily include in chat content from being sent to the AI provider. AI does not submit a Booking or authorize a payment; you review the draft and complete and confirm the ordinary booking flow yourself.

UpTask disables storage of AI responses as API application state in its requests. This is not a guarantee that the provider retains no data: provider security, abuse-prevention, legal, and other applicable retention rules may still apply. OpenAI's API data controls are described at https://developers.openai.com/api/docs/guides/your-data. An AI suggestion is not a confirmed Booking, and the other sections of this policy cover information used for booking, performance, and support.

5 Platform payments and direct payments

Online payment is available only in supported territories and for Bookings where that option is displayed. Payment credentials are handled through the designated checkout and its payment provider. The information received by UpTask depends on the integration and may include billing details, tokens, payment-method descriptors, and transaction records. The checkout identifies the applicable provider and any separate provider terms or privacy notice.

For Professional payouts, information needed to identify the payee, establish an eligible payout method, complete applicable verification, and meet reporting obligations may be collected by UpTask or directly by its provider. A payment provider may process some information for its own fraud prevention, regulatory, and account administration purposes under its own notice.

When you pay a Professional directly in cash or by transfer to their own account, UpTask does not process that payment through its checkout. The Professional and any external payment provider handle the payment information they collect. UpTask may still retain a Booking's payment status, an amount reported by either party, or a receipt or transaction record you provide for support or a dispute. Direct payment does not make the related Booking record private from UpTask.

Refunds promised for eligible payments through UpTask are governed by the Terms of Service. We retain relevant records as needed to process a refund and meet legal obligations. Deleting an account does not cancel a pending refund or erase a valid payment claim.

6 Location and device permissions

A Customer's service address is used to determine coverage, match the request, and allow the assigned Professional to attend. A Professional's stated base location, service area, ZIP codes, and work radius support matching and availability. These entered details are distinct from live device location.

Device-location practices. The current UpTask customer app does not request or collect device GPS location in the foreground or background. UpTask Pro does not collect background GPS location or share a Professional's live device location with Customers. Service addresses and Professionals' entered base locations and work areas remain part of ordinary booking and matching records. On the website, selecting Use current location requests browser permission to obtain your location for finding your city or filling an address. The coordinates are sent through UpTask to OpenStreetMap's Nominatim geocoding service for that lookup. The site does not continuously track your location. OpenStreetMap's privacy policy is available at https://osmfoundation.org/wiki/Privacy_Policy.

You can manage device-location and other app permissions in your operating-system settings. Denying or withdrawing permission may limit the related feature. Revoking GPS permission does not remove an address you entered or automatically delete existing Booking records.

The current customer app allows you to choose photographs from your photo library for task assistance. Its current configuration does not request camera or microphone permission. Any other feature that requests media, camera, or microphone access must explain the purpose at the point of use and remain subject to applicable permissions and consent. Review attachments before sending them and avoid unnecessary images of people, identification documents, access codes, or valuable possessions.

7 Cookies and tracking choices

The website uses local storage to remember the selected service location and booking-related choices, and a necessary support-session cookie to allow access to private support tickets. The customer app uses local storage for booking drafts and protected device storage for sign-in credentials. These functions support the features you select and protect access to your information. The website also uses the analytics tool described below.

Enabled analytics. The website uses Google Analytics 4, provided by Google, to understand visits and improve the site. Its standard measurement can include page and referring-page information, interaction and session events, cookie identifiers, approximate location, and browser and device information. Google receives this information to provide analytics. Google Analytics uses first-party cookies such as _ga; Google states that Analytics does not log or store IP addresses. Google Analytics is not integrated into the current customer app. Google describes its data practices at https://support.google.com/analytics/answer/6004245 and https://policies.google.com/privacy.

Sale, sharing, and targeted advertising. UpTask does not sell personal information, share it for cross-context behavioral advertising, or use it for targeted advertising. We have not done so during the preceding 12 months. We do not use advertising pixels or retargeting tools and do not plan to introduce them. Service-related disclosures to Professionals and operational providers are described in Section 8; Google Analytics is used for website measurement. We do not sell or share for advertising the personal information of consumers under 16 or of any other age.

Privacy and cookie choices. The current website has no separate cookie-preference panel. You can use browser settings to block or delete cookies and site storage. For supported browsers, Google offers an Analytics opt-out add-on at https://tools.google.com/dlpage/gaoptout. The customer app has no separate advertising-tracking control because advertising tracking is not enabled. For a privacy request, including an applicable opt-out request, use https://uptask.io/help or contact info@uptask.io. Blocking necessary storage may affect your saved choices or access to support tickets.

Do Not Track and Global Privacy Control. The current website does not automatically change Google Analytics behavior in response to browser Do Not Track or Global Privacy Control signals. Global Privacy Control is distinct from Do Not Track and relates to applicable sale and advertising-sharing opt-outs. UpTask has no sale or advertising sharing to stop in response to those signals. The browser controls and privacy contact above remain available for other choices and requests.

You can also adjust browser storage settings and available device advertising or tracking permissions. Blocking cookies or resetting an advertising identifier does not necessarily exercise every legal opt-out right, delete account records, or withdraw a permission given through another device.

8 When information is disclosed

Potential and assigned Professionals. To obtain service offers or assign work, relevant request information may be made available to Professionals evaluating whether to accept a job. After assignment, relevant contact details, the service address, appointment information, task description, selected attachments, and access instructions are shared so the Professional can communicate and perform the work. The scope of a disclosure should be limited to what is reasonably needed at that stage. Submitting a request directs service-related sharing; it does not authorize unrelated marketing by a Professional.

Customers. We share information needed to identify and coordinate with a Professional, such as the relevant business or profile name, service information, contact channel, assignment status, and arrival or completion updates. A Professional's information displayed in a public profile, and reviews submitted for public display, can be seen by other users or visitors as the feature indicates. Private messages and job photographs are not automatically public reviews.

Independent Professional practices. A Professional may keep information for their own service contract, invoicing, warranties, insurance, legal obligations, and claims. They are responsible for their own handling of it. Professionals must use information received through UpTask only for the requested service and other authorized or legally required purposes, protect it, and obtain any permission needed for additional uses. They must not use customer details for unrelated marketing without a lawful basis and any required consent. Contact the Professional about information they hold independently; UpTask still handles requests concerning its own processing and any assistance required by law.

Operational vendors. We disclose relevant information to providers supporting hosting and storage, communications, connected account and order management, mapping, payment processing, customer support, security, AI assistance, website analytics, and, where used, verification. Their access and obligations depend on their role and applicable law. We use appropriate contractual restrictions where required. Advertising recipients and payment providers acting for their own purposes are not automatically treated as vendors processing solely on our instructions.

Support and claims. Authorized support personnel, advisers, insurers, payment providers, and the other party to a dispute may receive information needed to investigate a reported issue, explain a decision, handle a refund or chargeback, or pursue or defend a claim. Platform messages and submitted evidence may therefore be reviewed for these purposes.

Legal requirements and business transactions. We may disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, or investigate fraud. Information may also be disclosed in a proposed or completed merger, financing, acquisition, or transfer of relevant business assets, subject to appropriate confidentiality measures, applicable law, and any required notice. Other disclosures require your direction, permission, or another lawful basis.

9 Retention and deletion of information

We keep personal information for as long as reasonably needed for the purpose for which it was collected, including the obligations described below. The period varies by record, unresolved issue, applicable law, and whether a less identifying record can meet the need. We do not keep identifiable information indefinitely merely because an account once existed.

When information is no longer needed, we delete it or deidentify it using an appropriate method. Limited records subject to a legal hold, unresolved claim, tax or accounting obligation, fraud prevention need, or another lawful exception may be retained after account deletion. Access and use are limited to the reason for retention. Backup copies may remain until the applicable replacement cycle and are not used for ordinary operations while awaiting deletion; information restored from backup remains subject to applicable deletion requirements.

Vendor copies are addressed through our applicable instructions and legal obligations. Deleting UpTask records does not automatically delete records independently retained by a Professional or payment provider, but it does not excuse any duty we have to communicate a deletion request to relevant recipients.

10 Account deletion and other privacy requests

You may update available account details and preferences through the Platform or contact info@uptask.io about access, correction, deletion, or another privacy request. You do not need to create an account to submit a request. Include enough information to locate the relevant account or Booking, without sending passwords, full payment card details, or unnecessary identity documents.

Account-deletion routes. In the UpTask customer app, sign in and open My profile, then select Delete account and follow the verification and confirmation steps. Customers and Professionals can also request deletion without installing or using an app through the public support form at https://uptask.io/help or by emailing info@uptask.io. State Account deletion in the subject and provide the account phone number or email and whether it is a Customer or Professional account. These requests are reviewed by support; the support form does not delete an account immediately. If the app cannot complete deletion because of an outstanding booking or financial matter, contact support to address the request and any limited retention that applies. Uninstalling an app, signing out, or disabling notifications does not itself delete an account. Account deletion includes associated personal information subject to the limited retention grounds in Section 9; it is not merely temporary deactivation.

We may use proportionate verification to protect information before fulfilling a request, taking account of its sensitivity and the risk of unauthorized access or deletion. An authorized agent may submit a request where permitted by law, with appropriate evidence of authority. We do not impose identity-verification steps on an opt-out request where the law does not allow them.

We respond within the period required by the law applicable to your request, explain any lawful limitation or denial, and provide any required appeal process. Where a request relates to a Professional's independently maintained business records, we can identify the appropriate contact when available while separately addressing the information UpTask controls.

11 Additional rights under applicable US state law

Depending on where you live, the law's coverage requirements, and the information involved, you may have rights to know about or access our processing, obtain a copy in a usable format, correct inaccuracies, delete personal information, and opt out of sale, certain advertising-related sharing, or targeted advertising. Applicable laws may also provide rights concerning sensitive information and certain automated decisions, as well as an appeal of a denied request. These rights apply to the extent provided by the relevant law; this policy does not assert that every statute applies to UpTask.

California information categories. As applicable to the features used, the categories described in Section 2 include the following information, sources, purposes, and recipients. A feature that has not been used does not cause every category to be collected about a particular person.

Identifiers and customer records. Names, telephone numbers, email addresses, account and booking identifiers, contact details, and authentication records come from users and account or support activity. We use them for account access, bookings, communication, and verification. Relevant information is disclosed to the assigned Professional and providers operating account, booking, communications, support, hosting, and security functions.

Commercial information. Requested services, selected options, booking and appointment records, amounts, payment status, cancellations, refunds, and related transaction references come from Customers, Professionals, and connected booking or payment systems. We use them to arrange and record work, manage transactions, and resolve issues. Relevant records are disclosed to the Professional and booking, payment, support, and accounting providers as needed.

Internet and network activity. IP and session information, browser and device details, website visits, and operational or security events come from Platform use and enabled providers. We use them for operation, security, diagnostics, and website analytics. Hosting, security, and support providers receive relevant operational information; Google receives website analytics information as described in Section 7.

Geolocation information. Entered service addresses and Professional work areas come from users. Approximate location may be derived from network information, and the optional website location lookup obtains coordinates with browser permission. These details support coverage, matching, and address lookup. Professionals receive the service address needed for work, and OpenStreetMap receives coordinates for a requested website lookup. The mobile-location limits in Section 6 apply.

Visual information and communications. Chosen photographs, task descriptions, and support messages come from users and the other party to a Booking. We use them to understand the request, coordinate work, and handle support and disputes. Relevant content is disclosed to the Professional and operational or support providers; OpenAI receives content submitted for AI assistance as described in Section 4.

Service-related inferences. Suggested service categories, draft options, and task context are derived from submitted task details and assistant interactions. They help prepare a service draft. The AI provider processes relevant assistant content when AI is used; the confirmed task details are shared for booking and performance. We do not use these task suggestions to build advertising profiles.

Sensitive information. Account-access information and precise location, where provided or obtained through the optional website lookup, can be sensitive. Payment or verification information is handled only in the applicable designated flow and may be collected directly by its provider. Sources are the user, device permission, or relevant provider; purposes and recipient limits are those of the account, location, payment, and verification features described above. We do not use sensitive information for advertising or to infer personal characteristics.

For California residents where the California Consumer Privacy Act applies, this includes rights to know relevant categories and specific pieces of information, sources, purposes, and recipients; request correction and deletion; opt out of sale or sharing for cross-context behavioral advertising; and limit specified uses or disclosures of sensitive personal information where the statutory right applies. We do not unlawfully discriminate or retaliate against you for exercising protected privacy rights.

For those California requests to know, correct, or delete, we acknowledge receipt within 10 business days and respond within 45 calendar days after receipt. If reasonably necessary and legally permitted, we may extend the response period to a total of 90 calendar days after notifying you within the initial period and explaining why. We process applicable sale or sharing opt-outs as soon as feasible and no later than 15 business days. Other states' deadlines and appeal requirements apply where relevant.

Use the contact and controls in Sections 7 and 10 to exercise available rights. A browser signal may need to be enabled separately on each browser or device. Section 7 explains the current website response to those signals and the absence of sale or advertising sharing. If an appeal right applies and you disagree with our response, reply to the privacy contact stating that you are appealing; we provide the applicable outcome and information about further remedies required by law.

12 Communications and your choices

We and the assigned Professional use your selected contact channels for request, appointment, work, payment, and support communications, subject to applicable consent requirements. Optional promotional communications are handled separately from communications needed to manage an existing Booking.

You can unsubscribe from marketing email using its unsubscribe link. If promotional text messaging is offered, follow the opt-out instructions in the message, such as replying STOP where supported. Manage push notifications and available app preferences through the relevant settings. Marketing opt-out does not delete transaction records. If you disable a contact channel, keep another reliable way to receive information about an active request.

13 Security and international processing

We use reasonable administrative, technical, and organizational safeguards appropriate to the personal information we handle. Access should be limited to authorized people and providers with a legitimate need. No transmission or storage system can guarantee complete security. Keep your credentials and private Booking links secure and contact us if you suspect unauthorized access.

The Platform serves US territories where service is available. Information may be processed in the United States and in other countries where relevant providers operate. Their laws may differ from those where you live. Where a law requires a transfer mechanism or additional safeguards, we use the applicable measures and provide any required information. This policy does not imply that service is offered in every country.

14 Children and information about other people

The Platform is intended for people aged 18 or older and is not directed to children. We do not knowingly solicit personal information from children through accounts or service requests. If you believe a child has provided information inappropriately, contact us so we can investigate and take appropriate steps, including deletion where required.

Only provide information about another person when you are authorized to do so and it is relevant to the service. Avoid unnecessary images or details about children, occupants, visitors, or neighbors in task photographs or descriptions. Notify the relevant person where appropriate before providing their contact details for appointment access or communication.

15 Changes and contact information

We may update this policy as the Platform or our practices change, and review and update it at least annually where required by law. The posted policy identifies its effective date. We will announce material changes through a conspicuous notice on the Platform and, where required, an email or in-app notice to affected users. We obtain additional consent where required before applying a materially different use. A policy update does not by itself override an existing privacy choice or supply consent that the law requires separately.

Privacy contact: info@uptask.io.

Platform operator: Boris Verigin, doing business as UpTask.

Website: https://uptask.io

Booking and payment support: https://uptask.io/help

For a privacy request, identify whether you are a Customer, Professional, or visitor and provide the relevant account email, telephone number, or Booking reference when available. Ordinary support messages should not contain full payment credentials or sensitive verification documents.