Privacy Policy

Version 1.0 · Effective date: 1 May 2026 · Nexscient Pte Ltd.. Ltd. · GDPR · PDPA · Applicable local law

Nexscient Pte Ltd.. Ltd. ("Nexscient Labs", "we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, transfer, and protect your personal data when you use the TaskAlpha™ platform. It applies to all Contributors and applicants globally and complies with the EU General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act 2012 (PDPA), and other applicable data protection laws.

1. Data controller

Nexscient Pte Ltd.. Ltd. is the data controller for personal data processed through the Platform. Flipside Digital Content Company, Inc. ("Flipside AI") acts as data processor on behalf of Nexscient Labs. Contact: privacy@taskalpha.io.

2. What personal data we collect

Identity and contact data

Full name, date of birth, email address, phone number (if provided)
Residential address and country of residence
Government-issued identification (for residency verification)
Discord username (if provided)

Financial data

Payment account details (Wise, PayPal, bank account, GCash, Maya — as selected)
Tax residency self-certification and applicable tax identification numbers
Payment history and compensation records

Technical and device data

Smartphone model, OS version, camera capability
IP address and detected geolocation at application (used for residency cross-check)
Browser type and session data

Environment profile data

Home environment types available for recording
Lighting conditions, floor type, clutter level, household type

Submission data

Uploaded video files and associated metadata (duration, resolution, environment type, time of day, date)
QC review outcomes, accepted duration, rejection reasons
Submission history and behavioral patterns (for fraud prevention and dataset integrity)

Qualification data

Qualification video submitted during application
Automatic validation results and human review outcome

3. Legal basis for processing (GDPR Article 6)

We rely on the following legal bases to process your personal data:

Contract performance (Article 6(1)(b)): Processing necessary to administer your contributor account, manage Project assignments, process payments, and fulfil our obligations to you.
Legitimate interests (Article 6(1)(f)): Fraud prevention, duplicate detection, dataset integrity protection, contributor behavior monitoring, and platform security.
Legal obligation (Article 6(1)(c)): Compliance with applicable tax, financial reporting, and regulatory requirements.
Consent (Article 6(1)(a)): Where we rely on consent for specific processing activities (such as optional marketing communications), you may withdraw consent at any time without affecting the lawfulness of prior processing.

4. Special categories of data

We do not intentionally collect special category data (Article 9 GDPR). However, video submissions may incidentally capture biometric data (faces, voices) of the Contributor or third parties in the recording environment. You are responsible for ensuring third parties in your recordings have provided informed consent. If you believe your submissions contain inadvertent special category data, contact privacy@taskalpha.io immediately.

5. How we use your data

To evaluate and process your contributor application
To manage your account and Project assignments
To conduct two-tier quality control review of your Submissions
To detect and prevent fraud, duplicate content, and policy violations
To calculate and process compensation payments
To comply with tax and legal reporting obligations
To improve the Platform and develop future data collection programs
To communicate with you regarding your account, assignments, and payments

6. International data transfers

Nexscient Labs is incorporated in Singapore. Your personal data may be transferred to and processed in Singapore and other countries where our service providers operate, including countries outside the European Economic Area (EEA). Where such transfers occur from the EEA or UK, we ensure adequate safeguards are in place, including:

Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions where applicable
Binding Corporate Rules where implemented

For transfers from Singapore, we comply with the PDPA's cross-border transfer obligations and ensure recipient jurisdictions provide comparable protection. You may request details of the safeguards in place by contacting privacy@taskalpha.io.

7. Data sharing and recipients

We share your personal data only as necessary:

Flipside AI (Flipside Digital Content Company, Inc.): Our operations processor — manages contributor onboarding, QC, and program administration under a Data Processing Agreement.
Payment processors: Wise, PayPal, GCash, Maya, or your chosen bank — for payment processing only. Governed by their respective privacy policies.
Project clients: Anonymised or aggregated dataset outputs only — no personal contributor data is shared with Project clients.
Legal and regulatory authorities: Where required by law, court order, or regulatory request.

We do not sell your personal data to third parties.

8. Retention

Account and identity data: Retained for the duration of your active contributor status plus 7 years for legal and financial compliance purposes.
Submission data and video files: Retained for the duration of the relevant Project plus any period required under the Project agreement with the client.
Payment records: Retained for 7 years in compliance with financial and tax regulations.
Application data (rejected applicants): Retained for 12 months then deleted.
Fraud and integrity records: Retained for 3 years after account closure to protect against repeated policy violations.

9. Your rights

Depending on your country of residence, you may have the following rights regarding your personal data:

Right of access (GDPR Art. 15 / PDPA): Request a copy of the personal data we hold about you.
Right to rectification (GDPR Art. 16): Request correction of inaccurate or incomplete data.
Right to erasure (GDPR Art. 17): Request deletion of your data where there is no legitimate reason for us to continue holding it.
Right to restriction (GDPR Art. 18): Request restriction of processing in certain circumstances.
Right to data portability (GDPR Art. 20): Request your data in a structured, machine-readable format.
Right to object (GDPR Art. 21): Object to processing based on legitimate interests, including profiling.
Right to withdraw consent: Where processing is based on consent, withdraw at any time without affecting prior lawful processing.
Rights under CCPA (California residents): Right to know, delete, opt-out of sale (we do not sell data), and non-discrimination.
Rights under LGPD (Brazil residents): Rights of access, correction, anonymisation, deletion, and portability.
Rights under PDPA (Thailand / Singapore): Rights of access, correction, and withdrawal of consent.

To exercise any of these rights, contact: privacy@taskalpha.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority (for EEA residents, the supervisory authority in your member state; for UK residents, the Information Commissioner's Office).

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include: access controls and authentication, encryption in transit (TLS) and at rest, audit logging of data access, and regular security assessments. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant supervisory authorities as required by applicable law.

11. Automated decision-making

We use automated technical validation to check qualification videos against objective criteria (resolution, fps, duration, orientation). This automated check does not make final acceptance decisions — all applications are also subject to human review. You may request human review of any automated decision that affects you by contacting privacy@taskalpha.io.

12. Children

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact privacy@taskalpha.io immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email at least 14 days before taking effect. The current version and its effective date are always displayed at the top of this page.

14. Contact and data protection enquiries

Privacy contact: privacy@taskalpha.io
Nexscient Pte Ltd.. Ltd. · Singapore
For EU/EEA residents: we are in the process of designating an EU representative as required under GDPR Article 27. Details will be published here when confirmed.