PiggyTask Privacy Policy

This Privacy Policy applies to all services, web applications, and mobile interfaces operated by PiggyTask ("we", "us", or "our"). Under global data protection frameworks—including the General Data Protection Regulation (GDPR / UK GDPR), the Nigeria Data Protection Act (NDPA), the California Consumer Privacy Act (CCPA / CPRA), and South Africa's POPIA—PiggyTask acts as the Data Controller responsible for the lawful processing of your personal information.

This policy explains our data collection practices when you create an account, complete micro-tasks, participate in market research surveys, refer new earners, participate in the Ambassador Program, or request cashouts.

Depending on your interaction with PiggyTask, we collect three categories of data:

1. Information You Provide Voluntarily:
   • Account Credentials: Full name, chosen username, email address, country of residence, phone number (used for SMS OTP account verification), and encrypted password.
   • Payout Destination Details: Domestic bank account number, bank name, verified recipient account name, cryptocurrency public wallet address (e.g. USDT TRC20/BEP20 or LTC), or mobile network airtime phone number.
   • Ambassador Program Applications: If applying for an Ambassador role, community links (Telegram/WhatsApp room URL, YouTube/TikTok handle, university/campus name), and application pitch answers.
   • Support Tickets: Messages, feedback, transaction IDs, or screenshots provided when communicating with our help desk.
2. Information Gathered Automatically (Anti-Fraud Telemetry):
   • Network & Device Identifiers: IP address, Internet Service Provider (ISP), autonomous system number (ASN), browser type, operating system, device model, and non-invasive browser fingerprinting hashes.
   • Geolocation Signals: Country and regional geolocation resolved via IP to match appropriate localized tasks, currency configurations, and domestic payment options.
3. Task & Earning Activity Logs:
   • Timestamps of completed tasks, survey session IDs, offerwall conversion postbacks, earned rewards, referral attribution milestones, and historical payout records.

We process your personal information strictly for legitimate, declared operational purposes:

• Account Management & Authentication: Creating your member profile, issuing secure sessions, validating password resets, and sending critical account notices.
• Task Matching & Verification: Connecting you with localized market research surveys and verifying offer completion callbacks from licensed advertisers.
• Fast Payout Disbursement: Routing approved withdrawal requests directly to your chosen domestic bank account, crypto wallet, or mobile airtime balance within our EST: 24-hour processing timeline.
• Anti-Fraud Defense & Multi-Accounting Prevention: Detecting and neutralizing automated bot farms, proxy/VPN disguises, duplicate registrations, and unauthorized scripts that threaten advertiser trust.
• Referral & Ambassador Multiplier Calculations: Accurately calculating and depositing 30-day referral commissions and specialized Ambassador retainer incentives.
• Customer Support & Dispute Review: Investigating missing task postbacks, resolving user payment inquiries, and conducting manual human reviews on flagged accounts.

Under Article 6 of the General Data Protection Regulation (GDPR) and the Nigeria Data Protection Act (NDPA), we process your data on the following lawful grounds:

• Performance of Contract: Processing is necessary to fulfill our contractual obligations to you under our Terms of Service (e.g., maintaining your balance, crediting task earnings, and executing withdrawals).
• Legitimate Interests: Operating a secure micro-earning platform, investigating fraud, blocking automated bot traffic, ensuring system stability, and verifying advertiser postbacks.
• Compliance with Legal Obligations: Adhering to domestic financial reporting standards, taxation records, anti-money laundering (AML) compliance, and legitimate court orders.
• User Consent: For optional non-essential communications or specific voluntary demographic profiling within third-party market research questionnaires.

PiggyTask bridges earners to leading international offerwall aggregators, app developers, and market research agencies. We enforce strict data minimization when interacting with external partners:

• Pseudonymized Identifiers Only: When you open an offerwall (e.g. BitLabs, CPX Research, Monlix, AdGate), PiggyTask transmits only an anonymized cryptographic user hash (e.g. `pt_u_88f9a21b`). We never transmit your legal name, physical address, or email address to offerwall partners.
• Survey Demographic Profiling: When answering surveys, you interact directly with the research provider's interface. Any demographic answers (age bracket, occupation, consumer interests) are governed by that provider's privacy policy and used solely to match relevant studies.
• Payment Processors & Banking Gateways: To execute your cashouts, necessary destination routing data (such as bank account number and bank code) is transmitted securely to licensed domestic settlement banks or cryptographic node networks.

Advertisers pay real money for genuine human engagement. To prevent automated bot operators from draining liquidity and to ensure honest earners always get paid, our platform analyzes telemetry signals:

• Proxy & VPN Detection: IP addresses are cross-referenced with commercial proxy databases, residential IP rotation feeds, and hosting center ranges to detect synthetic location spoofing.
• Browser & Emulator Fingerprints: Hardware concurrency, WebGL renderer strings, canvas signatures, and screen dimensions are inspected to detect headless browsers and emulator farms (such as Bluestacks or automated scrapers).
• Purpose Limitation: Telemetry data collected for anti-fraud purposes is strictly quarantined. It is never used for behavioral advertising or sold to third parties.

We maintain your personal information only for as long as necessary to fulfill the purposes outlined in this policy:

• Active Accounts: Account data and task records are retained while your account remains active and in good standing.
• Financial Transaction Logs: Payout settlement records, bank recipient hashes, and ledger receipts are retained for 5 years to comply with statutory accounting and tax reporting obligations.
• Account Deletion: You may request full account termination at any time by contacting our support desk. Upon confirmation, your personal identity, login credentials, and contact details are permanently expunged or irreversibly anonymized within 30 calendar days.

Because PiggyTask serves earners across 190+ countries, your data may be processed on secure cloud infrastructure located in the European Union, United States, or globally distributed edge servers.

When cross-border transfers occur, we implement robust international data transfer mechanisms recognized by global authorities, including standard contractual clauses (SCCs), zero-trust access controls, and end-to-end TLS encryption to guarantee that your rights travel with your data.

Regardless of where you reside, PiggyTask extends high-standard data protection rights to all registered members:

• Right of Access: You can request a copy of the personal data we hold about you at any time.
• Right to Rectification: You may correct inaccurate or incomplete profile information directly in your account settings or via support.
• Right to Erasure ("Right to be Forgotten"): You may request the permanent deletion of your account and personal records.
• Right to Data Portability: You can request your historical earning logs and profile data in a structured, commonly used machine-readable format (JSON/CSV).
• Right to Restrict or Object: You may object to specific processing activities based on legitimate interests.
• Non-Discrimination: We will never penalize, charge different rates, or reduce service quality if you choose to exercise your privacy rights.

To exercise any of these rights, simply email our Data Protection Desk at [email protected] or open a ticket through our Support Center.

We employ defense-in-depth security measures to protect your account against unauthorized access, loss, or disclosure:

• Encryption at Rest & in Transit: All data transmissions are protected via modern TLS 1.3 encryption. Sensitive database fields are secured with military-grade AES-256 encryption.
• Salted Password Hashing: Passwords are never stored in plaintext; they are irreversibly hashed using modern, salted algorithms (Argon2id/Bcrypt).
• Isolated Payout Authorization: Withdrawal dispatch endpoints run on isolated, firewalled worker nodes with strict rate limiting and automated anti-tamper audits.
• Continuous Security Auditing: Regular vulnerability scans, automated dependency updates, and strict least-privilege administrative access protocols.

PiggyTask is a financial micro-earning platform designed for individuals aged 18 and older. Users between 16 and 17 years of age may only participate with verified parental or legal guardian consent. We do not knowingly collect, solicit, or maintain personal information from individuals under 16 years of age.

If we become aware that a person under 16 has registered an account without verified parental consent, we will take immediate steps to terminate the account and permanently delete all associated personal records from our servers. Because PiggyTask processes real financial payouts and collects bank account details, these age restrictions are strictly enforced.

We respect your browsing privacy and keep cookie usage to the bare operational essentials:

• Essential Session Cookies: Encrypted session identifiers strictly required to keep you securely logged in as you navigate between pages.
• User Preference Cookies: Lightweight cookies storing your theme preference (`theme-mode`), preferred language (`pt_lang`), and localized country selection (`pt_country`).
• Zero Third-Party Advertising Trackers: PiggyTask does not embed invasive third-party cross-site advertising tracking cookies or social network behavioral pixels on our main portal.

If you have questions about this Privacy Policy, wish to file a data access or deletion request, or have concerns regarding our data practices, our Data Protection Team is here to assist:

• Data Protection Officer (DPO): [email protected]
• General Privacy Inquiries: [email protected]
• Physical Support Desk: Accessible via our 24/7 web ticketing center on the Contact Us page.