Privacy policy

Who we are

Taskovery connects people to contractors in the United States, Canada, the United Kingdom, Ireland, Australia and New Zealand. We run the Taskovery app, the Taskovery Partner app, and this website. Taskovery is the trading name of Trustlane LLC, the company behind it. You will see both names, and they are the same organization.

Trustlane LLC is the company responsible for your personal information. We have a privacy officer, as the law in several of the countries we operate in requires. Reach them by emailing help@taskovery.com with Privacy in the subject line. We answer during the United States business hours.

If you need our state of formation, entity registration number, or a registered agent address for a formal notice, email help@taskovery.com and we will give them to you.

What we collect

Only what the service actually needs to work. Each item below says what it is and where it comes from.

If you are hiring someone

Your name and email address

You give us these when you first sign in. The email address is how we sign you in and how we contact you.

Your city

You choose it from a list. We use it to work out who covers your area. We do not track your device location.

Your street address

Only once you have chosen a contractor, and only shared with that contractor. Before that, nobody has it.

Your phone number and service country

We ask for a valid phone number and country during account setup. Older accounts may not yet have a number. We use it for contact about your job and to set your service market. It is shown to the partner you choose, or to a Pro partner who has answered your job or is in a conversation with you. Blocking prevents that access. It is not shown to another customer or anyone signed out. A contractor’s own number works differently: it is available to signed-in people on their profile so customers can contact them. If you call them using your phone, ordinary caller-ID settings apply.

Jobs you post and messages you send

The job description, any photos you attach, and the conversation with the contractor you chose.

Payment-safety reminders in chat

Your browser or app can check the text you are drafting and messages already visible in your conversation for wording that suggests an off-platform payment. This check runs on your device using text-matching rules, not an external AI service. It does not send your unsent draft to Taskovery, create a payment-risk score or automatically restrict an account. Sent messages are stored as usual to deliver the conversation. A reminder is not proof of wrongdoing; you can report a concern to our support team for human review.

Reviews you write

Your rating and words, published against the contractor’s profile roughly half a day after you write them.

Payment records

The price a contractor quoted, whether you accepted it, and, when you pay through Taskovery, the payment’s status: paid, held, released, cancelled or refunded, the amounts, any admin fee, thank-you credit or problem you reported, and Stripe’s references for it. We never see your full card number or your bank details. You enter card details on Stripe’s checkout page, and a contractor gives their bank details to Stripe, not to us.

If you are a contractor

Everything above, plus your business details

Trading name, trades you do, where you work from, the cities or whole states you take work in, your working hours, and anything you write on your own profile. Older profiles may still have a previously saved travel radius; it is no longer collected or used to match jobs.

Which you are: a company or a sole trader

You tell us at sign-up. It decides which checks you have to pass, and it is shown on your profile because a customer can reasonably want to know whether they are hiring a company or a person.

Verification documents

A government photo ID, and depending on which you are, your business or trade license documents. We check them and we do not publish them.

Proof of address, if you are a sole trader

A statement, letter or bill from the last three months showing your name and an address. We use it to confirm the name matches your ID and that there is an address in the United States where a formal notice could be served. We never publish it, and your address is never shown to anyone on Taskovery. A customer sees only that the check passed. This is the most personal thing we ask any partner for, which is why it is asked of sole traders only, where there is no company register to check instead.

Public register numbers

Your state business registration number, and your contractor license number. These are public records by definition, and we print them on your profile on purpose so a customer can look you up rather than taking our word for it.

How your profile performs

How often you appeared in a list, how often someone opened your profile, and how quickly you reply. This is what your reply time and your public stats are built from.

Everyone

Sign-in records

When you signed in and from roughly where, so we can spot someone else trying to get into your account.

What your browser stores

Whether you chose the light or dark theme, the token that keeps you signed in, and your measurement choice. Optional Google Ads and Google Analytics measurement runs only if you allow it. Our separate Vercel page counting sets no cookie. See what we put on your device.

A job you started but have not posted

If you begin describing a job on our home page before you have an account, what you typed is kept in your own browser only so it is still there after you sign up. It is the job title, the trade and the city, and nothing else: not your name, not your email address, not your street address. It is never sent to us. There is no draft of yours on our servers, and if you close the tab and never come back, nobody ever sees it. It is deleted the moment you post the job, and it expires by itself after a day. Clearing your browser data removes it too.

Fonts and page assets

Our typefaces and page artwork are served from our own address. Google Ads and Google Analytics load from Google only after you allow measurement, as explained below. Inside the signed-in app, we load the code that talks to our database from a public code mirror, esm.sh. That request carries your IP address to them, as any request to any server does, and nothing else: no name, no account, no page you were reading.

Error reports

If something breaks, we record what broke and where, so we can fix it.

Prize draw entries

Our prize draw closed to new entries on 24 October 2026. For entries made before then we keep the entries and how each was earned (a completed job, or the free entry). If you win, we use your contact details to arrange the prize and keep what the law requires (in the US, a taxpayer ID for a prize worth US$600 or more). We publish a winner’s first name and town only with their permission.

Contractor payouts

If you are a contractor and set up payouts, Stripe collects your identity, business and bank details to open your payout account. We pre-fill it with your name, email, country, trade and profile link, and we keep your Stripe account reference, whether payouts are switched on, what Stripe still needs, and the record of your paid bookings, payouts and cancellations (including your cancellation rate, which we use under our partner terms).

Why we collect it

We collect personal information only for a purpose connected with what we do, and only where we actually need it. This is all of them:

• To connect you to someone. Matching a job to the contractors who cover your area is the whole product.
• To let the two of you talk through messages or a direct phone call, with the phone-number access described above.
• To check that a contractor is who they say they are, that a business they claim is registered, that an address they give is current, and that a license they claim is real. What we require depends on whether they signed up as a company or a sole trader.
• To record the price you and your contractor agreed, so there is a dated figure if it is ever disputed, and, when you pay through Taskovery, to take the payment, hold it, release it to your contractor, refund it, and settle a problem you report. This is necessary to perform our contract with you.
• To keep the place honest. Reviews tied to real completed jobs, and the ability to act on a report.
• To ask how we did. After a job is marked completed, we invite you to review Taskovery itself on Trustpilot. Everyone with a completed job is asked, whatever they thought of it, and nothing is offered in return.
• To keep your account secure, and to answer you when you contact support.
• To meet our legal obligations, including tax and record-keeping.
• With your permission, to measure our Google ads and website use. Google Ads and Google Analytics help us understand which advertising brings people to Taskovery and how the website is used. You can decline without losing access to the service.

We do not sell your personal information. If you allow measurement, Google receives the visit, device and advertising interaction data described below. We keep personalized advertising disabled in this website integration.

Who sees it

The other person on the job

A contractor sees your name, city, public job details and the messages the conversation allows them to read. Your street address is shared only after you have chosen them. Your email address is not handed over. Your phone number is available under the connection rules above; it is not a public customer directory.

You see a contractor’s business name, their profile, their badges, their register numbers, their rating and their reviews.

Anyone at all

A contractor’s profile is public: their trading name, trades, area, badges, register numbers, rating and reviews. Your reviews are public too, shown against the contractor rather than under your full name.

If you ask us to find someone for you

When you ask us for help, for example in a message to our Facebook Page, and you agree, we use the name, the email address or phone number and the job details you give us to create a free Taskovery account for you and to offer your job to one verified contractor. They see the job as they would any other; once they accept it they can message you and ring you about it. You can ask us to close the account at any time.

Our suppliers

We use the following providers to run the service. Their applicable privacy terms also govern how they handle information:

• Supabase holds the database and runs sign-in.
• Vercel serves this website.
• Google provides optional Google Ads and Google Analytics measurement after your permission. Both use the same Google tag. Its use of that data is explained in Google’s business data privacy information and how Google uses information from partner sites.
• An email provider sends your sign-in codes and notifications.
• Meta runs Facebook and Messenger. If you message our Facebook Page, Meta holds that conversation under its own terms, and we read and answer it on Facebook or in our own operator console, which fetches it from Meta when we open it and does not keep a copy.
• Stripe processes customers’ booking payments and refunds, pays contractors out through their Stripe payout accounts, and bills contractors for Pro subscriptions. Customers enter card details on Stripe’s checkout and contractors give identity and bank details to Stripe directly. We share with Stripe what it needs to do this: your email, the booking’s job title, reference and amount, and for contractors the pre-filled payout details above. We keep payment references, amounts, currency, status and subscription details. Stripe uses this information under its own privacy policy, including for fraud prevention and to meet its legal obligations.
• Anthropic or DeepSeek helps classify and screen job posts using the title and description. A sensible job can be approved automatically; safety, spam or private-contact concerns may hold it for human review. The provider used depends on availability. Avoid putting private contact details, exact private addresses or identification documents in the public description. Contact us if a screening decision needs human review.
• DeepSeek, an AI service in China, helps with three jobs. It suggests the title and trade for a job you post, from the words you wrote. It answers questions in our support chat from what you write there, with any phone numbers, email addresses and long numbers taken out first, and passes anything about your own job or account to a person. And it screens email sent to help@, admin@ and verify@taskovery.com for scams and spam: only email from people who are not already our customers, partners or contacts, and then only the sender, the subject, where its links go and its first few lines, with any phone numbers, email addresses and long numbers in those lines taken out. Email it judges to be a scam or spam is moved to a spam folder, never deleted, and we can put it back. What DeepSeek does with what it receives is governed by its own terms.
• Apple suggests addresses as you type in our iPhone apps. The text you type in a street address box goes to Apple Maps to find matching addresses; we do not send Apple your name or account details with it. Apple handles it under its own privacy policy.
• Photon by komoot, using OpenStreetMap data, suggests addresses and suburbs as you type on this website. The text you type in an address or suburb box, and sometimes the map position of the place you chose, goes from your browser to komoot’s service in Germany, which, like any website, also sees your browser’s IP address. We do not send it your name or account details.
• OpenStreetMap draws the map a partner sees when choosing the area they work in. Your browser loads map pictures from the OpenStreetMap Foundation’s servers, which see your IP address and which part of the map is shown, as any website does. We do not send them your name or account details.
• Trustpilot sends our review invitations. When we invite you by email, it receives your name, your email address and a reference for the job, and nothing else. The invitation shown inside our apps sends Trustpilot nothing at all: you only reach them if you choose to tap it. What you write there is covered by Trustpilot’s own privacy terms. To stop review invitations, use the unsubscribe link in any of them, or email help@taskovery.com with Privacy in the subject line.

Everyone else

We will disclose personal information outside the above in four situations, and no others: with your permission, where it is necessary to prevent a serious threat to someone’s life, health or safety, to enforce our terms, or where we are required by law, a court order, or a lawful request from a government agency.

Where it is held

Our suppliers are overseas companies, so your information is stored on servers outside the United States.

Our database is in Singapore. It runs on Supabase, on Amazon Web Services infrastructure in the ap-southeast-1 region. That is where your account, your jobs, your messages and your reviews actually sit. Our other suppliers hold their own slices elsewhere: Vercel serves this website from wherever is nearest to you, Stripe holds card, payout and billing details under its own arrangements, DeepSeek processes what it is sent in China, and komoot answers website address suggestions from Germany.

Our service providers process information under their applicable data protection commitments. Some providers, including Google for optional advertising and website measurement and Meta for Facebook conversations, also process information under their own privacy terms. Google may process measurement information in the United States and other countries where it operates; the Google privacy links above explain its arrangements.

If you would rather your information were held in the United States, we would rather tell you plainly that it is not than bury it. Ask us at help@taskovery.com if you want to know more about a particular supplier, and we will tell you.

Your information is encrypted in transit. Access to it inside the database is restricted per account by row-level security, which means one signed-in person cannot read another’s messages, jobs or payments even if they go looking.

What we put on your device

After a successful job submission, tl-job-post-confirmation-v1 temporarily stores the job reference, a one-time token and its time in session storage. It contains no job text or contact details, is consumed when the confirmation page opens, and expires after 15 minutes. A private server record stays with the job to prevent repeat confirmations and is removed when the job is deleted. The confirmation page enables Google Ads measurement only after this check and only if you have allowed measurement.

Google Ads and Google Analytics measurement is optional. Before you choose to allow it, we do not load Google’s measurement tag or send it measurement requests. If you select Allow measurement, Google can receive information about your visit and page use, advertising click identifiers, browser and device information, and IP address, and can set advertising cookies such as _gcl_* and Analytics cookies such as _ga and _ga_*. We configure measurement cookie lifetimes to 90 days. We use this to understand advertising performance and website use. Personalized advertising, Google signals and automatic collection of contact details for enhanced conversions are disabled in this integration. We do not send your job descriptions, private messages, verification documents or payment details as measurement events.

Choose Essential only to keep both Google Ads and Google Analytics measurement off. You can change your mind with Privacy choices in the website footer or here. Withdrawing permission clears this integration’s Taskovery-domain measurement cookies and reloads the page to stop the tag. We remember your choice for 180 days in tl-ads-consent-v1. Visitors who accepted the earlier Ads-only purpose are asked again before Analytics starts; earlier refusals remain in place. A browser’s Global Privacy Control opt-out also keeps both services off. Private Manage console pages and onboarding previews are excluded from measurement.

Google Analytics is a linked destination of the same Google tag, not a second tag installed on the page. This website integration does not add a Meta pixel, a session recorder or native mobile app tracking.

We do count page views, using Vercel Web Analytics, which is run for us by the company that serves this website. It sets no cookie and stores nothing in your browser. It is separate from the Google measurement choice above. It records the page, the referrer, the country, and the rough device type. To tell a returning reader from a new one it makes a one-way hash of your IP address and browser, salted with a value that is thrown away and replaced every day, so it can count visitors without ever storing who you are or recognising you tomorrow. We use it to see which pages are worth keeping. Nobody at Taskovery can use it to look you up.

These are stored locally in your browser, all of them because the site would not work without them, or because you asked for something to be remembered:

tl-session

Keeps you signed in. Without it you would sign in again on every page.

tl-theme

Remembers whether you chose light or dark in the customer or partner portal. The public site is always light.

tl-promo

Remembers that you dismissed a banner, so it stays dismissed.

tl-region

The country you told us you are in, so we stop asking and can say plainly whether we operate there. We guess a first answer from your device’s time zone and language, which never leave your browser. We do not look up your IP address with anyone.

tl-oauth-on

Which sign-in buttons are switched on for this site, remembered so they do not jump into place a moment after the form has drawn. It says nothing about you.

tl.job.draft.v1

The job you had started describing on the website or in the task helper, including its description, selected country, city and timing, so that making one does not lose it. It clears itself after a day, and it is not sent to us until you post the job.

tl-support-welcome-v1 and tl-support-welcome-v1-partner

A session-only flag that keeps the support welcome message from repeating in the same tab. It contains no task or contact details.

tl-session-code-verifier

A single-use value that proves the sign-in you finish is the sign-in you started, so that somebody who intercepts the link in your email cannot use it. It is deleted the moment you are signed in.

Clearing your browser storage removes all of them. Nothing breaks except that you will be signed out, the portals go back to the light theme, and we will ask which country you are in once more.

How long we keep it

• Your account: while it is open, and then deleted when you ask us to close it.
• Jobs and messages: while your account is open. They are part of the record of a job that actually happened.
• Reviews: they stay up after an account closes, without your name attached, because a contractor’s rating would otherwise be rewritable by deleting accounts.
• Verification documents, including proof of address: kept while the badge is current, and then only as long as we need them to show a check was properly done. They are never published, and the document itself is never shown to a customer, only the result.
• Agreed prices and our invoices: seven years, which is what the United States tax law requires.
• Sign-in and error records: about twelve months.

When we no longer need something for a lawful purpose, we delete it.

Your rights

Rights over your information that we give you and take seriously, wherever you are. If you are in the UK, Ireland or the EU you have more of them, and they are set out further down.

Getting a copy

You can ask what we hold about you and get a copy of it. Email help@taskovery.com from the address on your account. We will answer within 30 days. It is free.

There are limited situations where we can withhold something, mostly where releasing it would disclose someone else’s personal information. If we withhold anything we will tell you which part and why.

Getting it corrected

If something we hold about you is wrong, tell us and we will correct it. Most of it you can edit yourself in the app. If we disagree that it is wrong, you can ask us to attach your statement to it, and we will.

Closing your account

From Profile → Settings in the app, or email help@taskovery.com from the address on your account. See the retention list above for the few things that outlive an account and why.

If you are in the UK, Ireland or the EU

Taskovery is live in the United Kingdom and Ireland, so the UK GDPR and the EU GDPR apply to you. They give you more than the two rights above, and they apply whether or not we mention them. Here they are anyway, because a right you do not know about is not much of a right.

Why we are allowed to hold it

The law asks us to name a lawful basis for each thing we do with your information. Ours are:

• To perform our contract with you, which covers your account, your jobs, the messages between you and a contractor, and connecting the two of you. Without this there is no service to give you.
• Legal obligation, which covers tax and the business records we are required to keep.
• Consent, for the optional Google Ads and Google Analytics measurement described above. You can withdraw it through Privacy choices, and declining does not prevent you from using Taskovery.
• Legitimate interests, which covers keeping the platform secure, preventing fraud, running the verification checks on contractors, the aggregate page counting described under what we put on your device, and inviting you to review us after a completed job. We think you would expect the first three from a service that puts a stranger on your doorstep, the fourth stores nothing about you, and the fifth is one message you can turn off. You can object to any of them at any time.

What you can ask for

Alongside a copy and a correction, you can ask us to erase your information, restrict what we do with it, hand it to you or another service in a portable form (portability), or object to processing we do on legitimate interests. Where we ever rely on your consent, you can withdraw it, and withdrawing it does not make what we did beforehand unlawful.

Email help@taskovery.com from the address on your account with Privacy in the subject. We will answer within one month. It is free. If a request is genuinely complex we may take up to two further months, and we will tell you inside the first month if that happens.

Your information leaves the UK and the EU

As the section above says plainly, our database is in Singapore. Singapore does not have a UK or EU adequacy decision, so this is a restricted transfer and it needs a safeguard in place, not just a promise.

Complaining to a regulator

You can complain to your own supervisory authority, free, and without asking us first:

• United Kingdom: the Information Commissioner’s Office, at ico.org.uk
• Ireland: the Data Protection Commission, at dataprotection.ie
• Elsewhere in the EU: the data protection authority for the country you live in

If you are unhappy with us

Tell us first, at help@taskovery.com. We would rather fix it than have you chase us.

If we do not sort it out to your satisfaction, you can complain to a regulator, free and independent of us:

• Your state attorney general’s consumer protection office, which is the right first call for a privacy complaint in most states
• The Federal Trade Commission, at reportfraud.ftc.gov
• If your state has its own privacy regulator, that regulator

You do not need our permission, and you do not have to come to us first.

If something goes wrong at our end

If there is a breach that is likely to cause you serious harm, we will tell you as soon as we practically can, and notify whichever regulators your state requires us to. Every state has a breach notification law and they set different deadlines; we will work to the shortest one that applies rather than the longest. We will tell you what happened, what was involved, and what to do about it.

Reporting a security problem

If you have found a way to see data that is not yours, or anything else that looks like a security hole, tell us at help@taskovery.com and put Security in the subject line. Include what you did and what you saw. We will confirm we have it within two working days and tell you what we found, whether or not it turns out to be a real problem.

We will not threaten you for reporting something in good faith. Please do not run automated scans against the live site, and do not read, change or keep anybody else's data while proving a point: tell us what you found and we will reproduce it.

Age

Taskovery is for people aged 18 and over. We do not knowingly collect information from children. If you believe a child has given us information, email help@taskovery.com and we will delete it.

Changes to this policy

If we change it we will update the date at the top of this page. If a change materially affects what we do with information we already hold about you, we will tell you directly rather than quietly editing the page.