Data Processing Notice

This Data Processing Notice explains who processes your personal data for TaskAlpha Pte. Ltd. (UEN 202557199Z), a company incorporated in Singapore with its registered address at 68 Circular Road #02-01, Singapore 049422, where it is held and sent, and how it is protected. It supplements the Privacy Policy. It is a notice to you, not an agreement you sign: the data processing terms between TaskAlpha and the organisations that process your data on its behalf are in separate agreements with them.

1. Parties and roles

• Data Controller: TaskAlpha Pte. Ltd., Singapore. Decides the purposes and means of processing your personal data.
• Data Processor: Flipside Digital Content Company, Inc. ("Flipside AI"), in the Philippines, will process personal data on behalf of TaskAlpha Pte. Ltd. for onboarding, support and QC under the Intercompany Data Processing and Cross-Border Transfer Agreement. Until that agreement is signed, clause 11 of the master services agreement between them governs that processing. From delivery, Flipside AI is the controller of personal data in accepted Deliverables as the Customer.
• Data Subject: You, the Contributor or applicant.

2. Subject matter and nature of processing

TaskAlpha Pte. Ltd. processes your personal data for the purposes of: contributor onboarding and identity verification; Project assignment and management; quality control review of Submissions; fraud prevention and dataset integrity; payment processing and financial compliance; and platform operation and improvement.

3. Categories of personal data processed

As detailed in the Privacy Policy: identity and contact data; financial and payment data; technical and device data; environment profile data; video Submissions and associated metadata; and qualification and review data.

4. Sub-processors

This is the single maintained list of the organisations that process your personal data for us, with the service each provides and the country where it processes the data. We update this list, not the Privacy Policy, when a provider is added.

• Flipside AI (Flipside Digital Content Company, Inc.): onboarding, support and quality control. Philippines.
• Supabase: database and sign-in. Singapore (AWS ap-southeast-1).
• Cloudflare R2: storage of uploaded files. Asia-Pacific.
• Vercel: hosting of the Platform's websites. United States.
• Railway: automated checks of sample videos and the processing queues. Singapore and the United States.
• RunPod: video encoding, and the wording suggestions shown while you describe your work at sign-up. Iceland for video encoding, the United States for wording suggestions.
• Didit: identity verification. European Union (AWS).
• Google Maps Platform: address search and map display for workplaces. United States.
• Payment providers: Aspire today, for contributor payouts (Singapore); others are added as they are enabled per country.
• Resend: email delivery. Japan.
• Support channels: Discord and WhatsApp, for contributor support and project communication. United States.

Each service provider processes your data only to provide the service listed for it, under the terms that govern our use of that service. We will notify you of material changes to this list at least 14 days in advance.

5. International transfers

Your personal data is collected from you in your country, held by TaskAlpha Pte. Ltd. in Singapore, and processed by Flipside AI in the Philippines under the Intercompany Data Processing and Cross-Border Transfer Agreement, which satisfies the PDPA transfer limitation; until it is signed, clause 11 of the master services agreement governs that processing. Service providers process it in the countries listed in Section 4. You may request a copy of the applicable transfer safeguards by contacting privacy@taskalpha.io.

6. Security measures

TaskAlpha Pte. Ltd. and Flipside AI implement the following technical and organisational measures:

• Encryption of personal data in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent)
• Access controls based on the principle of least privilege
• Flipside AI holds ISO/IEC 27001 certification.

7. Data subject rights

To exercise your rights under the data protection law of your country of residence, as listed in Section 9 of the Privacy Policy, contact: privacy@taskalpha.io. We will acknowledge requests within 72 hours and respond in full within 30 days.

8. Breach notification

In the event of a personal data breach, TaskAlpha Pte. Ltd. will: notify the Personal Data Protection Commission (PDPC) within three calendar days for notifiable breaches; ensure Flipside AI, as processor in the Philippines, notifies the National Privacy Commission (NPC) within 72 hours where required; notify other authorities where the law of the contributor's country requires it; notify affected contributors without undue delay where the breach is likely to cause harm; and document all breaches in an internal breach register.

9. Retention and deletion

Data is retained as specified in the Privacy Policy Section 8. Upon expiry of the retention period, or upon verified request for erasure, personal data is securely deleted or anonymised. Database backups are kept for 7 days, so deleted data is gone from them within 7 days of its deletion.

10. Contact

privacy@taskalpha.io · Data protection officer: Jasmine Camasura, dpo@taskalpha.io · Flipside AI's data protection officer: Nikou Carlos Gepoleo, dataprotection@flipsidecontent.com · TaskAlpha Pte. Ltd. · UEN 202557199Z · 68 Circular Road #02-01, Singapore 049422