This policy explains what personal data Task.mk collects, why, who can see it, how long we keep it, and the rights you have. We collect only what the board needs to work, we don’t sell data, and the site loads no ads, analytics or tracking scripts.
1. Who is responsible
The controller of your personal data is Task.mk, Охрид, Република Северна Македонија. For anything about your data, write to support@task.mk.
We process data in line with North Macedonia’s Law on Personal Data Protection.
2. What we collect
- Your profile: name, email address, password (stored only as a one-way bcrypt hash, never readable), age, optional work experience and an optional profile photo. Photos are re-drawn when uploaded, which removes hidden data such as the GPS location a phone camera stores.
- Listings you post: title, description, category, city, pay, start time and duration, and the contact name and phone number you enter.
- Ratings: the stars you give or receive and the optional note written with them.
- Business plans: business name, tax number (ЕДБ) if you give it, the plan, the amount and its dates.
- Payments: you pay by bank transfer or Viber outside the site; we see the payment details your bank or the transfer shows us (e.g. payer name and reference).
- Data-deletion requests: the email address and message you send through the request form.
- Technical data: your IP address, briefly, together with the action you tried (e.g. logging in) to stop abuse such as password guessing; and one session cookie (see “Cookies”). Our hosting provider may also keep standard server logs that include IP addresses.
3. Why we use it
- To provide the service you signed up for (performing our agreement with you): your account, publishing and showing listings, ratings, business plans, password resets and account deletion.
- To keep the site safe (our legitimate interest): rate limiting, spam protection, moderating listings that break the Terms.
- To meet legal obligations: keeping payment and business-plan records as bookkeeping and tax rules require, and answering lawful requests from authorities.
We send you emails only when needed for the service (for example a password-reset link). No newsletters or marketing without your separate consent.
4. What is public
Task.mk is a public board, so some information is visible to anyone, including people without an account:
- Active listings, including the contact name and phone number you put in them.
- Your public profile: name, photo, age, work experience, the year you joined, your active listings, your star rating and, if you have an active plan, your business name.
Your email address, password and business tax number are never shown publicly. Think about what you write in listings and your work experience: don’t include information you don’t want others to see.
6. How long we keep it
- Account, photo, listings and ratings: until you delete your account. Deleting it removes your profile, photo, all your listings, every rating you gave or received, and any pending reset links.
- Expired or filled listings: stay in your account (visible only to you) until you delete the account. You can ask us at support@task.mk to delete a single listing sooner.
- Password-reset and deletion links: valid for 60 minutes; only a hash is stored.
- IP addresses for abuse protection: deleted automatically shortly after the time window they protect (about an hour).
- Business-plan and payment records: kept for as long as bookkeeping and tax rules require, even after the account is deleted (then no longer linked to a profile).
- Deletion requests: kept as a record that we handled your request.
7. Your rights
You have the right to:
- access your data and get a copy of it;
- correct it — most of it you can edit yourself on your profile;
- delete it — delete your account yourself on this page, or use the deletion request form if you can’t log in;
- restrict or object to processing based on our legitimate interest;
- data portability — receive the data you gave us in a machine-readable format;
- complain to the Personal Data Protection Agency (Агенција за заштита на личните податоци, azlp.mk).
To use any right, write to support@task.mk. We reply within one month.
8. Age limit
You must be at least 16 to create an account. We don’t knowingly collect data from anyone younger; if we learn an account belongs to someone under 16, we delete it.
10. Security
Passwords are stored as bcrypt hashes; the site uses secure, HttpOnly session cookies, protection against password guessing and form forgery, and limited-permission database access. No system is perfectly secure, so use a password you don’t use anywhere else.
11. Changes
If we change this policy, we update the date at the top. For important changes we let registered users know before they take effect.