Privacy Policy

Campus Tasker Inc. ("Campus Tasker", "Company", "we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our website, applications, and services (collectively, the "Platform"). By using the Platform, you consent to the practices described in this policy.

1. Information We Collect

1.1 Information You Provide Directly

• Account information: full name, email address, password (hashed and encrypted), location, role selection (student or customer)
• Student profile data: school/university name, major, graduation year, skills, bio, hourly rate, profile photo, work type preference, availability
• Customer profile data: name, email, bio, location, account type
• Emergency contact information (optional): contact name, phone number, relationship
• Job posting content: titles, descriptions, photos, budget, location, skills required, category
• Application content: pitch text, quote amount, estimated timeline
• Messages: all text content sent through the Platform's messaging system
• Reviews: ratings, comments, and feedback you leave for other users
• Payment information: processed and stored exclusively by Stripe Inc. We do not store, access, or have visibility into your credit card numbers, bank account details, or full financial information
• Communications: emails, support requests, and other correspondence you send to us

1.2 Information Collected Automatically

• Device information: device type, operating system, browser type and version, screen resolution
• Network information: IP address, internet service provider, approximate geographic location derived from IP
• Usage data: pages visited, features used, time spent on pages, clicks, search queries, referral URLs
• Cookies and tracking technologies: session cookies, authentication tokens, and optional analytics cookies (see Section 8)
• Log data: server access logs, error logs, timestamps of actions

1.3 Information from Third Parties

• Stripe: transaction status, payment confirmation, refund status (we do not receive your full card or bank details)
• Educational institutions: email domain verification to confirm .edu enrollment

2. How We Use Your Information

We use collected information for the following purposes:

• To create, maintain, and secure your account
• To display your public profile to other users (students to customers, and vice versa)
• To match students with relevant job opportunities
• To process payments and escrow through Stripe
• To verify student identity via .edu email domain
• To send transactional communications: job updates, application notifications, payment confirmations, message alerts
• To provide customer support and respond to inquiries
• To detect, prevent, and address fraud, abuse, security incidents, and Terms of Service violations
• To improve, maintain, optimize, and secure the Platform
• To generate anonymized, aggregated analytics for internal business purposes
• To enforce our Terms of Service and other policies
• To comply with legal obligations, court orders, and lawful government requests

3. Emergency Contact Data

Emergency contact information is stored securely with the same protections as other personal data. This information is only used in genuine safety emergencies where we reasonably believe a user may be in imminent danger and we are unable to reach them directly. We will never:

• Use emergency contact information for marketing or promotional purposes
• Share emergency contact information with other users
• Sell, rent, or trade emergency contact information to any third party
• Contact emergency contacts for any reason other than a genuine safety emergency

Emergency contacts can be added, modified, or removed at any time from your profile settings.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

4.1 Other Users

Your public profile information (name, school, skills, reviews, bio, rating, profile photo) is visible to other Platform users. Customers can see student profiles; students can see job postings. Private information (email, emergency contacts, payment details) is never shared with other users.

4.2 Payment Processors

Stripe Inc. processes all payments and receives necessary transaction data (amounts, descriptions, user identifiers) subject to Stripe's Privacy Policy.

4.3 Service Providers

We use trusted third-party services for:

• Hosting and database: Supabase (cloud infrastructure, authentication, database)
• Email delivery: Resend (transactional email service)
• Analytics: anonymized usage tracking to improve the Platform
• Error monitoring: to detect and fix bugs

These providers are contractually obligated to use your data only for the services they provide to us and to maintain appropriate security measures.

4.4 Legal Requirements

We may disclose your information when we believe in good faith that disclosure is necessary to:

• Comply with applicable law, regulation, legal process, or enforceable governmental request
• Respond to a subpoena, court order, or search warrant
• Protect the safety, rights, or property of Campus Tasker, our users, or the public
• Detect, prevent, or address fraud, security, or technical issues
• Enforce our Terms of Service

4.5 Business Transfers

If Campus Tasker is involved in a merger, acquisition, reorganization, bankruptcy, or sale of assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on the Platform before your information becomes subject to a different privacy policy.

5. Data Retention

• Active accounts: We retain your data for as long as your account is active and for a reasonable period afterward to fulfill legitimate business purposes.
• Deleted accounts: Upon account deletion, we will remove or anonymize your personal data within 30 days, except where we are required or permitted by law to retain it.
• Financial records: Payment records, transaction histories, and tax-related data may be retained for up to 7 years to comply with tax, accounting, and financial reporting obligations.
• Legal holds: Data subject to ongoing disputes, investigations, or legal proceedings will be retained until the matter is resolved.
• Aggregated data: Anonymized, aggregated data that cannot identify individuals may be retained indefinitely for analytics and business intelligence.

6. Your Rights and Choices

Depending on your jurisdiction (including but not limited to California CCPA, Virginia VCDPA, Colorado CPA, Connecticut CTDPA, EU GDPR), you may have the following rights:

• Right to access: Request a copy of the personal data we hold about you
• Right to correction: Request correction of inaccurate or incomplete data
• Right to deletion: Request deletion of your personal data ("right to be forgotten")
• Right to portability: Request a portable, machine-readable copy of your data
• Right to opt out: Opt out of the sale or sharing of personal information (we do not sell data, but you may exercise this right)
• Right to restrict processing: Request that we limit how we use your data
• Right to withdraw consent: Withdraw consent for any processing based on consent at any time
• Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

To exercise any of these rights, email privacy@campustasker.comwith the subject line "Privacy Rights Request". We will verify your identity and respond within 30 days (or as required by applicable law). You may also manage your email preferences in your account settings.

7. California Residents (CCPA / CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt out of the sale or sharing of personal information
• Right to non-discrimination for exercising your CCPA rights
• Right to limit the use of sensitive personal information

We do not sell personal information. We do not use or disclose sensitive personal information for purposes other than those permitted under CCPA/CPRA. To submit a request, email privacy@campustasker.com or call us (contact information below).

8. Cookies and Tracking Technologies

Essential Cookies

Required for the Platform to function. These include authentication tokens, session management, and security cookies. You cannot opt out of essential cookies.

Functional Cookies

Remember your preferences and settings (theme, language, location). These improve your experience but are not strictly necessary.

Analytics Cookies

Help us understand how users interact with the Platform. We use anonymized analytics to improve features and performance. You can disable analytics cookies in your browser settings.

We do not use advertising cookies or third-party ad trackers. We do not participate in cross-site tracking or behavioral advertising.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption in transit (TLS 1.2+) and at rest
• Secure, SOC 2-compliant cloud infrastructure (Supabase / AWS)
• Row-level security (RLS) database policies ensuring users can only access their own data
• Hashed and salted password storage (bcrypt via Supabase Auth)
• Access controls limiting employee access to personal data
• Regular security reviews and dependency updates

However, no method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

10. International Data Transfers

Campus Tasker is based in the United States. If you are accessing the Platform from outside the United States, your data will be transferred to, stored in, and processed in the United States. By using the Platform, you consent to the transfer of your data to the United States, which may have different data protection laws than your country of residence.

11. Children's Privacy

Campus Tasker is not intended for users under 18 years of age. We do not knowingly collect, solicit, or maintain personal information from anyone under 18. If we learn that we have collected data from a minor under 18, we will delete that information promptly. If you believe a minor has provided us with personal information, please contact us immediately at privacy@campustasker.com.

12. Third-Party Links

The Platform may contain links to third-party websites, services, or applications. We are not responsible for the privacy practices, content, or security of third-party sites. We encourage you to read the privacy policies of any third-party services you visit.

13. Do Not Track

Some browsers offer a "Do Not Track" (DNT) signal. Because there is no widely accepted standard for how to respond to DNT signals, we do not currently respond to DNT signals. However, we do not engage in cross-site tracking.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of material changes via email to the address on your account or through a prominent notice on the Platform at least 14 days before the changes take effect. The "Last updated" date at the top of this page indicates the most recent revision.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the revised policy. If you do not agree to the changes, you should discontinue use of the Platform and delete your account.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, contact us at:

• Email: privacy@campustasker.com
• Legal inquiries: legal@campustasker.com
• Mail: Campus Tasker Inc., Attn: Privacy, [Your registered address]

Campus Tasker Inc. · Registered in the State of Delaware