Privacy policy

This privacy policy applies to the TaskLyft website, mobile apps, public booking pages, invoices, and related services operated by Elementary Creative Inc. (the "Service Provider"). Together these are the "Application".

TaskLyft is business software for trade and service shops. Shop owners, team members, and customers who book or pay through TaskLyft may all provide personal information.

The Application collects information when you create an account, use the product, or visit a shop booking or invoice page.

Account and profile information may include:

• Name, email address, and password or Google sign-in details
• Display photo, if you add one
• Language and appearance preferences

Business information may include shop name, locations, hours, services, branding, team members, and billing or tax settings.

Customer and job information entered by a shop, or submitted by a customer, may include:

• Customer name, phone number, email, and address
• Vehicle or job details, notes, photos, and appointment history
• Invoice, payment, and outstanding-balance records

Automatically collected information may include:

• IP address and approximate location derived from it
• Device type, operating system, and app or browser version
• Pages or screens viewed, and the time spent on them
• Diagnostic logs that help us fix crashes and outages

If you accept in-person card payments, the app may also use location and Bluetooth to connect to a supported card reader. Camera or photo library access is used only when you choose to upload a logo or job photo.

We use personal information to operate TaskLyft, including to:

• Create and secure your account
• Run scheduling, customer records, invoicing, and online booking
• Send appointment, invoice, and other service messages by email or SMS when a shop enables them
• Process payments through Stripe
• Provide support and investigate abuse or fraud
• Improve reliability, security, and product quality
• Send required notices and, where permitted by law, product updates

The Application and its service providers may use cookies, software development kits (SDKs), pixels, and similar technologies for sign-in, security, analytics, and core product features.

Where required by law, we will ask for consent before using non-essential tracking.

We do not sell personal information. We share information only as needed to run TaskLyft or as required by law.

Trusted processors that may receive information include:

• Google Firebase, for authentication, database, file storage, hosting, and analytics
• Stripe, for payment processing and related fraud checks
• Email and SMS providers that deliver messages a shop chooses to send
• Apple or Google, when you use their sign-in or app stores

These providers are allowed to use the information only to provide their services to us, and they must follow the rules in this policy and their contracts with us.

We may also disclose information:

• When required by law, such as a subpoena or similar legal process
• When we believe in good faith that disclosure is needed to protect rights, safety, or to investigate fraud
• In connection with a merger, acquisition, or sale of assets, with notice where required

A shop that uses TaskLyft is the controller of the customer data it stores. Customers should contact that shop for questions about their booking or invoice records. The shop can also contact us if they need help fulfilling a request.

The Service Provider and its processors may store or process personal data in countries outside your country of residence, including outside Canada and the European Economic Area (EEA).

Where the law requires safeguards for those transfers, we use appropriate mechanisms, such as:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions or other legally recognized transfer tools
• Your consent, where required and legally permitted

Data protection laws in other countries may differ from those where you live. Where required, we apply appropriate safeguards and obtain any consent needed for the transfer.

You may request access to, correction of, or deletion of your personal data. You may also withdraw consent where processing is based on consent.

To exercise these rights, email contact@elementarycreative.com. We may need to verify your identity before completing the request.

If you are in Canada, you have the right to request access to personal information we hold about you, and to request a correction if it is inaccurate. You may also withdraw consent, subject to legal or contractual restrictions and reasonable notice.

Contact contact@elementarycreative.com to make a request. If you are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada.

If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to correct inaccurate personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights.

TaskLyft does not sell personal information and does not share it for cross-context behavioral advertising.

To exercise these rights, contact contact@elementarycreative.com.

You can stop further collection from the mobile app by uninstalling it. You can stop further collection from the website by signing out and no longer using it. That does not delete information already stored.

You can delete your account in Settings → Profile. If you are the last owner of a shop, online booking and billing stop immediately. Shop data is kept for 30 days so we can reopen it if you ask, then it is permanently deleted.

We keep personal data only as long as needed for the purposes in this policy:

• Account and shop data: for as long as you use TaskLyft, then up to 12 months after the account is closed, unless a longer period is required by law
• Automatically collected analytics and logs: up to 24 months from collection, unless needed longer for security or legal compliance
• Aggregated or anonymized data that no longer identifies you: may be kept indefinitely
• Records required for tax, payment, or other legal obligations: for the period the law requires

You can delete your account in Settings → Profile, or email contact@elementarycreative.com. We will process verified requests within the timeframes required by law.

After we verify your identity, we will delete your personal data from our systems, except where we must keep it for legal compliance or a legitimate business purpose such as completing outstanding payments.

TaskLyft is not intended for children under 16, or a higher age if the law where you live requires it. We do not knowingly collect personal information from children or market the Application to them.

If you believe a child has provided personal information through TaskLyft, contact contact@elementarycreative.com so we can take appropriate action. If you are under 16, a parent or guardian must provide consent where the law allows.

We use physical, technical, and organizational safeguards to protect the information we process. No method of transmission or storage is completely secure. If a breach affects your personal data, we will notify you as required by law, including what happened and what we are doing about it.

We may update this privacy policy from time to time. We will post the updated policy with a new effective date. Where the law requires it, we will ask for your consent before material changes take effect.

Previous versions are available on request at contact@elementarycreative.com.

Where processing is based on consent, you give that consent by opting in to the relevant feature. You may withdraw consent at any time. Withdrawal does not affect processing that already happened. Other processing is carried out on the lawful bases described above, such as performing a contract or our legitimate interest in running a secure product.

If you have questions about privacy or this policy, email the Service Provider at contact@elementarycreative.com.