What personal data we collect, why, and the rights the PDPL gives you over it.
Who we are
Tasko operates an on-demand home-services marketplace in the Kingdom of Saudi Arabia. For the purposes of the Personal Data Protection Law (PDPL), Tasko is the data controller for the personal data described below. Our privacy contact is privacy@tasko.sa.
What we collect
Account data (name, mobile number, email, language and notification preferences). Service data (addresses you save, bookings, notes and photographs you attach for a professional, ratings and reviews). Payment data (card token and last four digits held by our payment provider — we never store a full card number). Location data (the pin you set for an address; for professionals, position while on an accepted job). Device and technical data (device model, operating system, app version, IP address, crash diagnostics). Communications processed through the platform (in-app chat, support tickets, calls placed over a masked line).
Why we use it
To create and secure your account; to match a booking with a suitable professional near you; to take payment and issue a tax invoice; to keep you and the professional informed while a job is live; to prevent fraud and abuse; to handle disputes and support requests; to meet obligations under Saudi tax, commercial and consumer-protection law; and to improve the service. We rely on performance of our contract with you, our legitimate interests in operating and securing the platform, your consent where we ask for it, and legal obligation where the law requires.
Who we share it with
With the professional assigned to your booking — the address, the access notes and any photographs you attached, and your first name. Never your full contact details unless you share them yourself. With our payment provider to take payment and process refunds. With SMS, push-notification, mapping and cloud-hosting providers acting on our instructions under written agreements. With an AI provider outside the Kingdom when you use support chat, so an assistant can answer you before a person joins: the messages in that conversation, any photographs you attach to it, your first name, and the booking references, statuses and amounts the assistant needs to answer. It is used to answer that conversation only, it is not used to train general-purpose models, and you can ask for a person at any point. With ZATCA and other competent authorities where the law requires. We do not sell personal data and we do not share it for third-party advertising.
Where it is stored
Personal data of users in the Kingdom is hosted in-region. Transfers outside the Kingdom happen only where the PDPL permits them and under appropriate safeguards. Data is encrypted in transit and at rest, access is restricted to staff who need it for their role, and every administrative view of an identity document is logged.
Your rights
Under the PDPL you may ask to access your personal data, obtain a copy of it in a readable form, have inaccurate data corrected, have data destroyed where we no longer have a lawful basis to keep it, and withdraw a consent you gave. Write to privacy@tasko.sa; we answer within 30 days. You may also delete your account in the app — see the Account Deletion page for what is removed and what we must retain. If you are not satisfied with our response you may complain to the Saudi Data & AI Authority (SDAIA).