What we collect
Account details you provide at registration: email, name, and — for talent — profile, skills and assessment responses. For employers: organisation details and role requirements. Technical data needed to operate the service: session records, and product-analytics events tied to actions rather than to browsing content.
We do not collect health or disability status, religion, ethnicity or political views, and none of those are used as inputs anywhere in scoring or matching.
Why we collect it
Verification and assessment
Identity confirmation, role assessment and human review, which the verification badge depends on.
Matching
Comparing role requirements against verified skills to produce a ranked, explainable shortlist.
Operating the service
Sign-in, sessions, notifications, support, and fraud/abuse prevention.
Legal and safety
Meeting record-keeping obligations and investigating reports of misuse.
Who can see it
Contact details are never published and are not exposed to employers directly — contact happens inside Taskopedia. A public talent profile shows only an allowlisted set of fields: name, location, role tracks, seniority, skill names and verification status. The full scorecard, evidence and portfolio are released only to a verified employer organisation, and only for talent who have made that tier visible.
How AI is used
AI structures imported CVs, generates assessment item variants from approved blueprints, applies written rubrics to responses, phrases match explanations, and drafts a vacancy from the short note an employer writes when posting one. It does not make final decisions about a person — thresholds live in versioned configuration, and low-confidence results are routed to a human reviewer. A drafted vacancy is filled into a form the employer edits and posts themselves; nothing a model writes goes in front of a candidate unedited or unreviewed. See the Trust Centre for the full explanation.
How it is protected
Data is encrypted in transit and at rest. Passwords are never stored in a recoverable form — they are hashed with a memory-hard algorithm and a per-account random salt. Session and one-time verification tokens are stored as digests, not as the values a browser or email link actually holds. Access to personal data is role-based, and sensitive administrative actions are written to an append-only audit log that cannot be edited or deleted after the fact.
Your rights
Access and correction
You can view and correct your own profile data at any time.
Consent and withdrawal
Consent to AI processing and to public listing is granted separately from the account itself and can be withdrawn without closing your account.
Export
You can request a copy of your data in a portable format.
Erasure
You can delete your account yourself, from the Account page, without asking us and without waiting. Records we are legally required to retain — such as the audit trail of actions taken on your account — are kept in a form that no longer identifies you as a live user.
To exercise any of these, email contact@taskopedia.com.
Retention
Profile and assessment data is retained while your account is active. Published assessment scores are kept as an immutable record for the period they remain evidence of a badge, even if a later score supersedes them. Audit log entries are retained independently of the account they reference, so that erasing a user does not erase the record of what happened.
This page states how the platform is built and operated. It does not replace advice from your own legal counsel, and it is reviewed as the product evolves.