Privacy policy

Draft for legal review. Effective date: [Insert date]

This page is provided in multiple languages for convenience. The English version should be reviewed by counsel and will control if translations differ.

This Privacy Policy explains how Aidoya Technologies Inc. (“Aidoya,” “we,” “us,” or “our”) collects, uses, discloses, retains, and protects information through the Aidoya website, mobile applications, waitlist, and related services (collectively, the “Services”).

This policy must be finalized to match Aidoya’s actual vendors, data flows, service areas, and live features. If a feature is not live, the description below is a planned framework rather than a statement that the feature is currently operating.

1. Information we collect

Information you provide

We may collect your name, email address, phone number, account credentials, profile information, role preferences, task descriptions, photos, audio, messages, ratings, reviews, support requests, and information you provide when joining the waitlist or contacting us.

Location and task information

With permission and where needed for a feature, we may collect approximate or precise location, location address, task timing, task category, and location-related information required to show or match nearby tasks. We will not request background location unless the app’s feature and permission screen clearly explain why it is needed.

Verification information

For helper onboarding or safety processes, we may collect identity and eligibility information, such as date of birth, government-issued identification, photographs, or information returned by a verification provider. We will request only information reasonably needed for the applicable process and will provide additional notices where required.

Payment and transaction information

When payment features are enabled, a third-party payment processor may collect payment-card, bank, tax, payout, and transaction information. Aidoya should not store full payment-card numbers unless there is a documented business and security need. We may receive limited transaction details, such as amount, status, processor identifiers, and payout information.

Automatically collected information

We may collect device type, operating system, browser type, IP address, approximate location derived from IP, identifiers, log data, crash data, usage events, and cookie or similar technology information. Our final consent and cookie choices will depend on the tools actually enabled.

2. How we use information

We may use information to:

• provide, operate, maintain, and improve the Services;
• create and secure accounts and authenticate users;
• match task requestors and helpers and display relevant task information;
• support identity, eligibility, fraud, safety, and abuse-prevention processes;
• process payments, payouts, refunds, cancellations, and transaction records;
• host and moderate task descriptions, messages, ratings, and reviews;
• respond to questions, support requests, and legal notices;
• send waitlist, service, security, and product communications;
• measure performance, troubleshoot, conduct research, and personalize the Services; and
• comply with legal obligations, enforce our Terms, and protect users, Aidoya, and the public.

We will not use precise location, government identifiers, or verification information for unrelated advertising purposes. Aidoya should document and periodically review its data inventory and retention schedule.

3. How we share information

We may share information with:

• Other users: information needed to evaluate and complete a task, such as a display name, profile, rating, task description, general location, messages, or completion status. We will not intentionally publish unnecessary verification information.
• Service providers: vendors that provide hosting, authentication, email, analytics, maps, customer support, payment processing, identity verification, fraud prevention, storage, and security services.
• Professional advisers: lawyers, accountants, auditors, insurers, and similar advisers who are subject to confidentiality duties.
• Authorities and other parties: when required by law, legal process, safety concerns, fraud investigations, or protection of rights and property.
• Business transfers: in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets, subject to applicable law.

We do not sell personal information as a business model. If our practices change, we will update this policy and provide any legally required notice or opt-out choice. We do not use sensitive verification data for behavioral advertising.

4. Communications and waitlist emails

If you join the waitlist, we may use your name and email address to send launch updates, availability news, and related product communications. You can unsubscribe from promotional emails using the link in the message or by contacting helpme@aidoya.com. Service, security, account, and transaction messages may still be sent when necessary.

Marketing emails should use accurate sender information, a valid business mailing address, and a working unsubscribe mechanism before Aidoya sends commercial email at scale.

5. Cookies and similar technologies

We may use essential cookies and similar technologies for security, session management, preferences, analytics, and performance. Where required, non-essential technologies will be controlled through an appropriate consent or preference mechanism. The final cookie notice should name the actual tools in use.

6. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including account operation, transactions, safety, dispute handling, legal obligations, tax and accounting records, and security. Retention periods will vary by category. We will delete, de-identify, or securely dispose of information when it is no longer needed, subject to lawful exceptions.

7. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the sensitivity of information. These may include access controls, encryption in transit, vendor review, logging, backups, and incident-response procedures. No system is completely secure, and we cannot guarantee absolute security.

Users should use strong, unique credentials and promptly report suspected account compromise or safety incidents.

8. Children and minors

The Services are intended for adults and are not directed to children under 13. You may not create an account, join the waitlist, or submit personal information for a child. If we learn that we collected personal information from a child under 13 without the legally required consent, we will take reasonable steps to delete it. If you believe this occurred, contact helpme@aidoya.com.

9. Your choices and rights

You may update account information, unsubscribe from marketing messages, adjust device permissions, disable certain cookies, or request access, correction, deletion, or information about our processing, subject to applicable law and reasonable verification.

Requests may be submitted to helpme@aidoya.com. We may need to verify your identity and may deny or limit a request where permitted by law. We will not discriminate against you for exercising a legally protected privacy right.

10. California and other state privacy rights

Depending on where you live and whether Aidoya meets applicable legal thresholds, state privacy laws may provide rights such as access, correction, deletion, portability, opt-out of sale or sharing, limitation of certain sensitive-information uses, and appeal of a decision. Precise location and government identifiers may be considered sensitive personal information under some laws.

California residents may have additional rights under the California Consumer Privacy Act, as amended. The final version of this policy should include the applicable categories, purposes, retention details, request methods, response procedures, Global Privacy Control handling, and any required “Do Not Sell or Share My Personal Information” link based on Aidoya’s actual practices and legal thresholds.

11. International users

The Services are intended for the United States. If Aidoya accepts users from other locations, we will provide any required cross-border transfer notices and rights. Do not use the Services where doing so would violate local law.

12. Third-party services and links

The Services may link to or rely on third-party providers. Their privacy practices are governed by their own notices. Aidoya is not responsible for third-party websites, applications, or services that it does not control.

13. Changes to this policy

We may update this policy as the Services change. We will post the updated version and update the effective date. If a material change requires additional notice, we will provide it through an appropriate channel.

14. Contact

Privacy questions, requests, or notices should be sent to:

Aidoya Technologies Inc.
Email: helpme@aidoya.com
Mailing address: [Insert company mailing address]

Attorney review required: Before launch, Aidoya should confirm its actual vendors, data flows, state-law thresholds, identity-screening process, payment processor, cookie tools, data-retention schedule, breach-response process, and company mailing address with qualified U.S. counsel.