Privacy Policy

Effective 4 October 2026. TaskMithra helps people and teams find each other for work, discuss terms and unlock contact details when both sides agree and complete the connection-fee step. This policy explains the information used for that service.

Information we handle

When you create an account, we use your name, email address and authentication identifier. A mobile/contact number is optional. A specialist or company/team profile can include a public name, headline, skills, capabilities, experience summary, availability, work preference and approximate team capacity. Tasks, invitations, proposals, private discussions, agreements, reviews, support requests and moderation records contain information you choose to provide and the status of your activity.

For the connection fee, we keep order, payment and refund references, amounts and statuses. Razorpay handles checkout; TaskMithra does not ask you to put card details in a task or message. We also use short-lived session records and hashed rate-limit identifiers to secure the service. Technical requests may be processed by Cloudflare to deliver and protect the website.

How we use and share it

We use this information to authenticate accounts, show marketplace listings and profiles, facilitate proposals and conversations, record agreement and connection status, handle support and refunds, send relevant notifications, prevent misuse and keep necessary transaction history. Published task descriptions and discoverable profiles are visible to signed-in members. A proposal and its discussion are available to the task owner and the participating specialist. Reviews may be shown with specialist profiles.

Your email and optional mobile number are not returned to the other marketplace party before the selected connection has both independent agreements and both required connection fees confirmed. After that, the two parties can see each other’s available contact details. A support operator can access information needed to address requests and payment issues. Please avoid putting contact details, passwords, secrets or confidential client data in public fields or Ask TaskMithra.

Service providers and AI

Supabase processes account identity and sign-in. Cloudflare hosts the app and its D1 data, and processes technical traffic. Razorpay processes connection-fee checkout, payment and refund references when checkout is enabled. Its mobile checkout SDK may also process device and transaction information under Razorpay’s privacy policy. A test environment does not charge real money; live checkout is identified before payment. Resend receives an email address and limited notification content to deliver proposal reminders and operator alerts. Ask TaskMithra sends the text of the conversation and clarification turns to the configured third-party AI provider (currently Groq) to suggest a task or work profile. We do not automatically add your account email or mobile number to those AI requests. Do not include private files, contact details, passwords or confidential client information in your AI messages. AI use is optional.

These providers may process data in locations outside India under their own service arrangements. We do not sell personal information. Once you and a counterpart connect, that person’s independent use of information you exchange is outside TaskMithra’s control.

Device storage and security

On the website, a secure, HTTP-only session cookie keeps you signed in. The Android app stores the opaque TaskMithra session in device-protected secure storage and sends it only to the TaskMithra API. The Android app may store an unfinished task draft locally for your account; it restores drafts for seven days and clears them when you post successfully, sign out or close your account. Your browser may store an unfinished task draft and an Ask TaskMithra conversation so you can continue. The app stops restoring drafts after seven days and conversations after one day; the stored items can remain on your device until you clear site data. If you submit a draft or AI message, that content is processed as described above. We limit private API responses by account and connection, restrict contact unlock on the server, and use access controls and rate limits. No online service can promise absolute security.

Retention and requests

We keep active account and profile information while needed to provide TaskMithra. Tasks, proposals, messages, agreements, reviews and connection history may remain for counterpart history, marketplace integrity and legitimate transaction, security or legal needs. For the controlled pilot, our working retention approach is to keep necessary payment, refund and accounting references for up to eight years where reasonably required; closed support, privacy and grievance records for three years unless a particular case needs longer; and security or audit logs under our control for up to one year unless an active investigation or other legitimate need requires longer. These are working limits reviewed manually, not automatic deletion schedules or a claim that every law requires these periods. Provider-controlled logs and data follow provider settings and terms.

Eligible users can close an account in Account Settings. We stop new marketplace activity, revoke TaskMithra sessions, remove the profile from discovery, close open items where appropriate, and delete or anonymise eligible contact and profile data. An active connection or unresolved payment/refund may require manual assistance at the address below. Some marketplace history, payment/refund references and security records may need to remain; we may replace unnecessary identity in retained history with “Deleted TaskMithra User.” We coordinate Supabase Auth identity deletion and follow up manually if it fails. A request does not immediately erase every occurrence of information. Local drafts and conversations can be cleared from your device.

For access, correction, deletion/account closure, consent or privacy concerns, or a grievance, email support@taskmithra.com. The TaskMithra operator handles controlled-pilot requests and will verify account control appropriately; we will not ask for passwords, OTPs or card details. If you stop using Ask TaskMithra, you can still use the manual marketplace flow. TaskMithra is for people aged 18 or older; please contact us if you believe a minor’s information has been submitted.

We may update this policy as the pilot evolves. A revised effective date will appear here; material changes will be communicated through the service where appropriate.