PRIVACY POLICY
Version 1.0
Effective: [●] August 2026
1. Who we are
The controller of your personal data is [platform legal entity], [legal form], with tax number PT NIF/CIF [●], with registered office at [registered address] ("we", "us", "the Platform"). We operate the Taskoo marketplace, connecting customers with independent service professionals ("Pros") in Portugal and Spain.
Privacy contact: privacy@[●]. All requests and questions about this policy and about your personal data are handled at that address.
2. Scope
This policy applies to the Platform website, the mobile applications and the services offered through them, including booking, matching, payments, wallet, chat, calls, support and reviews.
Where a Pro, a Regional Cooperative or a Business Operator processes your data under its own responsibility, that party acts as an independent controller and its own privacy information applies. This policy does not cover those processing activities.
3. Data we collect
We collect and process the following categories of personal data:
- Account and identity data: name, email address, phone number, profile photo, language and city preferences, account role (customer, Pro, operator), and authentication data managed through our identity provider.
- Pro verification data: business registration number, tax identification number, insurance documents and verification status. We do not collect copies of identity documents.
- Booking data: service category, selected tier and add-ons, addresses and map coordinates, scheduled date and time, task notes, photos you upload, and the resulting job records.
- Payment data: payment-method tokens created by our payment provider (we never receive full card numbers), masked MB WAY / Bizum phone numbers, wallet balance and ledger entries, tips and payout records.
- Communications: messages exchanged through in-app chat, call metadata (participants, time and duration) for masked calls and in-app voice calls, and support conversations, including WhatsApp threads.
- Location data: for Pros, live location while an active job is being tracked and, where enabled, background location during working hours; for Customers, the service address and map pin.
- Reviews and disputes: ratings, review text and dispute evidence.
- Device and technical data: IP address, device type and app version, push notification tokens, and error or diagnostic data.
- Usage and analytics data: aggregated web analytics without cookies or cross-site identifiers, and mobile analytics configured with advertising identifiers disabled.
4. Why we use it and on what legal basis
We process personal data for the following purposes, relying on the legal bases indicated:
- Providing the service — creating and managing accounts, matching, bookings, payments and escrow, wallet, payouts, chat and support. Legal basis: performance of a contract (GDPR Article 6(1)(b)).
- Safety, fraud prevention, dispute handling and quality — verifying Pros, detecting abuse, resolving disputes and enforcing our Terms. Legal basis: legitimate interests (Article 6(1)(f)) and, where applicable, legal obligations (Article 6(1)(c)).
- Tax, accounting and seller reporting — issuing fiscal records and complying with DAC7 reporting duties. Legal basis: legal obligation (Article 6(1)(c)).
- Service notifications — booking updates, payment and payout notices, security alerts. Legal basis: contract and legitimate interests.
- Marketing communications — only where you have opted in or where the law permits. Legal basis: consent (Article 6(1)(a)) or legitimate interests with an easy opt-out.
- Background location (Pros, optional) — sharing location while a job is active and during working hours where you enable it. Legal basis: consent, which you can withdraw at any time in the app.
- Support assistant — processing your support messages to answer your request through our automated assistant. Legal basis: contract and legitimate interests.
5. Matching and automated processing
Matching ranks eligible Pros by distance only. Ratings, acceptance rates and prices are never used to rank Pros, and no automated decision produces legal effects or similarly significantly affects you. Verification decisions, suspensions and appeals are subject to human review.
We do not use your personal data for profiling or advertising by third parties.
7. International transfers
Some providers process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on adequacy decisions of the European Commission or on Standard Contractual Clauses together with supplementary measures where required. You can request a copy of the safeguards via privacy@[●].
8. How long we keep data
- Account data: while your account is active, and then deleted or anonymised, subject to the retention below.
- Financial and payout records: kept for up to ten (10) years to comply with tax, accounting and DAC7 obligations.
- Tracking data: live tracking is kept only while the tracking window for an active job is open; background GPS fixes are stored for up to thirty (30) days and then deleted.
- Dispute evidence: kept for ninety (90) days after the dispute is resolved, then deleted.
- Support tickets: kept for the period needed to handle the request and any related legal claims.
- Legal hold: where a dispute, investigation or legal obligation requires it, data may be retained until the matter is resolved.
9. Your rights
Subject to the conditions of applicable law, you have the right to: access your data; rectify inaccurate data; erase data; restrict processing; receive your data in a portable format; object to processing based on legitimate interests; and withdraw consent at any time, without affecting processing carried out before withdrawal.
You can exercise data export and account deletion directly in your account settings, or contact us at privacy@[●]. We respond within the time limits set by law.
You also have the right to lodge a complaint with your supervisory authority: in Portugal, the CNPD (www.cnpd.pt); in Spain, the AEPD (www.aepd.es).
11. Security
We protect personal data with encryption in transit, hashed credentials and API keys, role-based access control with audit logging, and payment data handled exclusively by our licensed payment provider. No method of transmission or storage is completely secure; we continually review our measures.
12. Children
The Platform is for users aged 18 or over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact privacy@[●] and we will delete it.
13. Changes to this policy
We publish updates on this page and update the effective date above. Where changes are material, we notify you in the app or by email before they take effect.
14. Contact
For any question about this policy or your personal data, contact privacy@[●]. For general support, use the in-app help centre or support@[●].