Legal

Privacy Policy

Last updated: June 1, 2026 · Effective date: June 1, 2026

Short version: We collect only what we need to run the platform, credit your reward points, and keep your account secure. We do not sell your personal data. We never ask for your OTP or bank PIN.

1. Overview

TaskWala Solution India ("TaskWala", "we", "us", or "our") operates the task and rewards platform at taskwalasolution.in and associated Telegram bots. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have regarding your data.

By registering an account or using any TaskWala service, you agree to the practices described in this policy. If you disagree with any part, please discontinue use and contact us for account deletion.

2. Information We Collect

2.1 Information you provide directly

  • Account registration: Phone number, name, and optionally email address.
  • Redemption details: Email address (for gift vouchers) or mobile number (for recharge). We store only what is necessary to process your redemption.
  • Support messages: Any information you share when contacting us via Telegram, WhatsApp, or email.
  • Business registration: Business name, owner name, contact details, and campaign brief if you register as a business client.

2.2 Information collected automatically

  • Device & browser data: IP address, browser type and version, device type, operating system, and screen resolution — used for fraud detection and session security.
  • Usage data: Pages visited, tasks viewed, task completion events, rewards account transactions, and session duration.
  • Cookies and local storage: Session tokens (stored in sessionStorage, never cookies), theme preferences, and analytics identifiers. See Section 5 for full details.
  • Referral data: If you arrive via a referral link, we log the referral source to credit the correct referrer.

2.3 Information we do NOT collect

  • We never ask for, store, or transmit your OTP, bank PIN, bank account details, or account passwords.
  • We do not collect Aadhaar numbers, PAN numbers, or government identity documents (unless required by future regulations, which we will communicate separately).
  • We do not access your phone's camera, microphone, contacts, or SMS without explicit, task-specific permission that you can revoke anytime.

3. How We Use Your Information

  • Platform operation: To verify task completion, credit your rewards account, process redemptions, and maintain your account.
  • Security: HMAC-signed request verification, session token rotation, and fraud / duplicate-account detection.
  • Support: To respond to your queries, resolve disputes, and investigate abuse reports.
  • Communications: Transactional notifications (task verified, redemption processed) via Telegram bot, WhatsApp, or email. We do not send marketing messages without your consent.
  • Platform improvement: Aggregated, anonymized analytics to understand which tasks are most popular, where users drop off, and how to improve the experience.
  • Legal compliance: To meet applicable Indian law obligations, respond to lawful requests, and resolve disputes.

4. Data Sharing

We do not sell, rent, or trade your personal data. We share data only in these limited cases:

  • Redemption partners: Your redemption details (such as an email address or mobile number) are shared with our gift voucher or recharge partners solely to process your redemption. They are bound by their own privacy and security obligations.
  • Business clients (task issuers): When you complete a business's task, the business receives aggregated confirmation (task completed, verified) but does not receive your personal profile, phone number, or redemption details.
  • Firebase / Google: We use Firebase Firestore and Firebase Authentication (Google LLC). Your account and rewards account data is stored in Firebase under Google's privacy and data processing terms. Firebase is GDPR-compliant. Firebase Privacy Policy →
  • Legal requirements: We may disclose data if required by Indian law, court order, or to prevent fraud, harm, or illegal activity.

5. Cookies & Tracking Technologies

TaskWala uses minimal tracking technologies:

  • Session tokens: Stored in sessionStorage (not cookies) — automatically cleared when you close the tab.
  • Refresh token: Stored in localStorage with a TTL — used only to re-authenticate your session without re-login. Cleared on logout.
  • Theme preference: Stored in localStorage — dark/light mode preference only.
  • Analytics: We may use anonymized analytics (e.g., Google Analytics 4 with IP anonymization enabled) to understand traffic patterns. You can opt out via your browser's Do Not Track setting or a browser extension like uBlock Origin.
  • Google AdSense: Our website and blog may display Google AdSense advertisements. Google uses cookies to serve relevant ads based on your browsing history. You can opt out at google.com/settings/ads or via aboutads.info.

6. Data Security

We take security seriously and have implemented the following measures:

  • All API communications use HTTPS (TLS 1.2+).
  • API requests are signed with HMAC-SHA256 including timestamp and nonce, preventing replay attacks.
  • Access tokens have short TTLs; refresh tokens rotate on each use with theft detection.
  • Rewards account transactions are processed inside Firestore transactions to prevent double-crediting.
  • Administrative access to user data is restricted to authorized personnel only.

No system is 100% secure. If you suspect unauthorized access to your account, contact us immediately on Telegram at @TaskWala_Solutions or WhatsApp at @taskwala_solutions.

7. Your Rights

As a TaskWala user, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate data (e.g., name, redemption details).
  • Deletion: Request deletion of your account and associated personal data. Note: transaction records may be retained for up to 3 years for legal and dispute-resolution purposes.
  • Portability: Request your rewards account transaction history in a machine-readable format.
  • Opt-out: Unsubscribe from non-transactional communications at any time.

To exercise any of these rights, email us at taskwalasolutions@gmail.com with your registered phone number and the request. We respond within 30 days.

8. Children's Privacy

TaskWala is not intended for users under 18 years of age. We do not knowingly collect personal information from minors. If we discover that a user under 18 has registered, we will delete the account promptly. If you believe a minor has registered, please notify us at taskwalasolutions@gmail.com.

9. Third-Party Links

Our platform and blog may contain links to third-party websites (e.g., Google Play Store, App Store listings for task apps, or e-commerce platforms). Once you leave TaskWala, we have no control over those sites' privacy practices. We encourage you to review the privacy policy of any third-party site you visit.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top and notify you via our Telegram channel or in-app notification if the changes are material. Continued use of the platform after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

For any privacy-related questions, data requests, or concerns:

We aim to respond to all privacy-related inquiries within 30 days.