Privacy Policy

TaskAlpha Pte. Ltd. (UEN 202557199Z), a company incorporated in Singapore with its registered address at 68 Circular Road #02-01, Singapore 049422 ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, transfer, and protect your personal data when you use the TaskAlpha™ platform. It applies to all Contributors and applicants, and is designed to meet the Singapore Personal Data Protection Act 2012 (PDPA), the Philippine Data Privacy Act of 2012, and the data protection law of your country of residence.

1. Data controller

TaskAlpha Pte. Ltd. is the data controller for personal data processed through the Platform. Flipside AI (Flipside Digital Content Company, Inc., in the Philippines) acts as processor for onboarding, support and QC, and as the Customer receives accepted Deliverables in its own right. Data protection officer: Jasmine Camasura, dpo@taskalpha.io. Flipside AI's data protection officer: Nikou Carlos Gepoleo, dataprotection@flipsidecontent.com. Contact: privacy@taskalpha.io

2. What personal data we collect

Identity and contact data

• Full name, date of birth, email address, phone number (if provided)
• Residential address and country of residence
• Government-issued identification (for identity and residency verification)
• A selfie and a short liveness video taken during identity verification, which our identity verification provider compares with the photo on your ID. The provider holds them; we keep your ID images and the outcome of each check, not its scores
• Discord username (if provided)
• Gender, age group and handedness, where a Project asks for them

Financial data

• Payout account details for the payment provider you select from those available in your country
• Tax residency self-certification and applicable tax identification numbers
• Payment history and compensation records

Technical and device data

• Smartphone model, OS version, camera capability
• IP address and detected geolocation at application (used for residency cross-check)
• Browser type and session data

Recording environment data

• Recording environment profile as the Project requires (workplace or other)
• Workplace data: employer name, site address, your role, the workplace signatory's name and contact, equipment loan records
• The workplace's business registration number and size, as the Project Terms ask at workplace registration

Submission data

• Uploaded video files and associated metadata (device, duration, resolution, the location where it was recorded, time and date, environment type)
• Where a Project uses a recording device: motion-sensor data, and device usage logs such as when and for how long the device was used
• A pseudonymous identifier, the only way you are identified in a delivered dataset
• QC review outcomes, accepted duration, rejection reasons
• Submission history and behavioral patterns (for fraud prevention and dataset integrity)

Qualification data

• Qualification video submitted during application
• Automatic validation results and human review outcome

3. Legal basis for processing

We rely on the following bases to process your personal data:

• Contract performance: Processing necessary to administer your contributor account, manage Project assignments, process payments, and fulfil our obligations to you.
• Legitimate interests: Fraud prevention, duplicate detection, dataset integrity protection, contributor behavior monitoring, and platform security.
• Legal obligation: Compliance with applicable tax, financial reporting, and regulatory requirements.
• Consent: What you agree to in the Project Terms of a Project you join, including the recording and onward transfer they describe, and any optional processing we ask you about. You may withdraw consent at any time without affecting processing that happened before.

4. Biometric and sensitive data

Recordings collect data that may be considered biometric or behavioral, such as gait, hand geometry, and motion-sensor data, and may incidentally capture the faces and voices of you or others in the recording environment. We collect it only for the Project you joined and as its Project Terms describe. You are responsible for ensuring third parties in your recordings have given the consent the Project Terms require. Identity verification also compares a selfie with the photo on your ID (Section 2). If you believe a submission captured sensitive data it should not have, contact privacy@taskalpha.io immediately.

5. How we use your data

• To evaluate and process your contributor application
• To manage your account and Project assignments
• To conduct two-tier quality control review of your Submissions
• To detect and prevent fraud, duplicate content, and policy violations
• To calculate and process compensation payments
• To comply with tax and legal reporting obligations
• To improve the Platform and develop future data collection programs
• To communicate with you regarding your account, assignments, and payments

6. International data transfers

Your personal data is collected from you in your country, held by TaskAlpha Pte. Ltd. in Singapore, and processed by Flipside AI in the Philippines under the Intercompany Data Processing and Cross-Border Transfer Agreement, which satisfies the PDPA transfer limitation. Until that agreement is signed, clause 11 of the master services agreement between TaskAlpha and Flipside AI governs that processing. Our database is hosted in Singapore (AWS ap-southeast-1). The service providers listed on the Data Processing Notice may process it in the countries shown there.

You may request details of the safeguards in place by contacting privacy@taskalpha.io.

7. Data sharing and recipients

We share your personal data only as necessary:

• Flipside AI (Flipside Digital Content Company, Inc.): acts as processor for onboarding, support and QC, and as the Customer receives accepted Deliverables in its own right.
• Payment providers: the provider you select from those available in your country, for payment only. The current list is on the Data Processing Notice.
• Customers: accepted Deliverables are delivered to the Customer for the Project and may be licensed by the Customer to its clients, under the Project Agreement and the consent and release you sign. Account, identity and payment data are not shared with Customers or their clients.
• Legal and regulatory authorities: Where required by law, court order, or regulatory request.

We do not sell your account, identity or payment data. Accepted Deliverables and the data that comes with them may be provided, licensed or sold to the Customer, its clients and other authorized third parties, as the Project Terms say.

8. Retention

• Account and identity data: Retained for the duration of your active contributor status plus 7 years for legal and financial compliance purposes.
• Accepted Deliverables: become part of the Customer's dataset and are retained as such. Rejected Deliverables: deleted within 90 days after rejection, except where kept for enforcement under Section 7 of the Terms.
• Payment records: Retained for 7 years in compliance with financial and tax regulations.
• Application data (rejected applicants): Retained for 12 months then deleted.
• Fraud and integrity records: Retained for 3 years after account closure to protect against repeated policy violations.

9. Your rights

You have the rights given by the data protection law of your country of residence, which typically include:

• Access: a copy of the personal data we hold about you.
• Correction: correction of inaccurate or incomplete data.
• Deletion: deletion of your data where there is no legitimate reason for us to keep it.
• Objection: objection to processing based on legitimate interests, including profiling.
• Portability: your data in a structured, machine-readable format.
• Withdrawal of consent: where processing is based on consent, at any time, without affecting earlier lawful processing.
• Complaint: a complaint to the data protection authority of your country.

The following laws are named because of where TaskAlpha and Flipside AI are, or because contributors live there:

• Singapore PDPA (TaskAlpha as controller): access, correction, and withdrawal of consent.
• Philippine Data Privacy Act of 2012 (Flipside AI as processor): the rights of a data subject under that Act, including a complaint to the National Privacy Commission (NPC).
• Rights under CCPA (California residents): Right to know, delete, opt-out of sale (we do not sell your account, identity or payment data; see Section 7), and non-discrimination.
• Rights under LGPD (Brazil residents): Rights of access, correction, anonymisation, deletion, and portability.

To exercise any of these rights, contact: privacy@taskalpha.io. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, as listed in Section 6 of the Data Processing Notice. In the event of a personal data breach, we notify you and the authorities as set out in Section 8 of that notice.

11. Automated decision-making

We use automated technical checks on qualification videos against objective criteria (for example the phone model, the video's length and where it was recorded). This automated check does not make final acceptance decisions: all applications are also subject to human review. You may request human review of any automated decision that affects you by contacting privacy@taskalpha.io.

12. Children

The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from minors, except where a Project's Project Terms allow a minor to be recorded with verified parental consent obtained in advance. If you believe we have inadvertently collected data from a minor, contact privacy@taskalpha.io immediately.

13. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email at least 14 days before taking effect. The current version and its effective date are always displayed at the top of this page.

14. Contact and data protection enquiries

Privacy contact: privacy@taskalpha.io · Data protection officer: Jasmine Camasura, dpo@taskalpha.io · TaskAlpha Pte. Ltd. · UEN 202557199Z · 68 Circular Road #02-01, Singapore 049422. At present the Platform is not offered in the European Economic Area or the United Kingdom.