Privacy Policy

Short version: we built TaskVerdict to need almost no personal data. There are no accounts, no advertising, no tracking cookies and no profiles. When you use the Ask box we keep an anonymized copy of the request (personal details removed automatically) to decide what to test next. We never sell or share personal information.

1. Who we are

TaskVerdict (taskverdict.com) is operated by Rotem Tzemah (sole proprietor), 60 Tom Lantos Blvd., Netanya, Israel ("we", "us"). We are the controller (in Israeli law, the database owner) for the data described here. Contact for anything privacy-related: rotem@taskverdict.com.

2. What we collect, why, and for how long

Data	When	Purpose	Legal basis (GDPR / UK GDPR)	Retention
Technical request data (IP address, user agent, requested URL, time)	Every visit — processed by our hosting/CDN provider Cloudflare	Deliver the site, keep it secure, block abuse and bots	Legitimate interests (security, operating the service), Art. 6(1)(f)	Not stored by us. Cloudflare processes it transiently and keeps limited security logs under its own policy.
Ask requests (the text you type into the Ask box)	When you submit a question	Answer it; improve which tools and jobs we test	Legitimate interests (providing the feature you asked for; product improvement using de-identified data), Art. 6(1)(f)	See §3: the text is sent to Cloudflare Workers AI to produce the answer (not stored there) and an anonymized copy is kept for up to 3 months.
Rate-limit key	When you submit a question	Prevent abuse of the Ask service	Legitimate interests (security), Art. 6(1)(f)	A truncated SHA-256 hash of your IP address + the date, held only in memory on the edge server for at most 24 hours. Never written to storage or logs.
Emails you send us (e.g. corrections, accessibility requests, privacy requests)	When you email us	Reply and keep a record	Legitimate interests / legal obligation	As long as needed to handle the request, then up to 3 years for our records, unless the law requires otherwise.
Re-test alerts / newsletter email address	Only if you sign up	Send the emails you asked for	Consent, Art. 6(1)(a)	Until you unsubscribe. Sign-ups are not open yet: today the forms send and store nothing. We will update this policy and name the email provider before they open.

We do not collect names, accounts, payment data, precise location, or special categories of data, and we do not use your data for automated decisions that have legal or similarly significant effects on you. Please do not type personal or sensitive information (health, finances, other people's details) into the Ask box.

3. The Ask box in detail

When you send a question to /api/ask:

1. Processing: your text is processed by our code on Cloudflare's network and, to understand the request and write the explanation, sent to Cloudflare Workers AI (an open-weight model run by Cloudflare). Cloudflare states that it does not use Workers AI inputs or outputs to train models or improve its services, and does not make them available to other customers.
2. What we store (anonymized log): before anything is stored, we automatically remove email addresses, web links, @handles, phone numbers and other long numbers, street-address patterns and "my name is …" phrases (in several languages), and cut the text to 300 characters. We store that redacted text together with: the job and category we matched, the answer status, which engine answered, your stated budget and usage unit, constraint flags (e.g. "API", "commercial use"), the number of candidates, response time, country (as provided by Cloudflare, country level only) and the answer language. We do not store your IP address, cookies, device identifiers or any user ID, so we cannot link a stored request to you.
3. Where and how long: Cloudflare Workers Analytics Engine, which deletes data automatically after 3 months.
4. Why: to see which jobs people need help with, which tools to test next, and whether answers work. We look at aggregated counts and the redacted request texts.
5. Automatic redaction is not perfect. If you think you typed something identifying, email rotem@taskverdict.com with the approximate time and wording and we will search for and delete it.

4. Cookies and local storage

We use no advertising, analytics or tracking cookies. The only things stored on your device are strictly necessary: your language choice (tv_lang), your cookie-settings choice (tv_consent, only if you open the settings), offline copies of pages kept by the site's service worker (so the app works offline), and security cookies Cloudflare may set to tell humans from bots. Full list: Cookie Policy.

5. Who receives data (processors)

• Cloudflare, Inc. (USA) — hosting, CDN, security, Workers AI, Analytics Engine. Cloudflare acts as our processor under its Data Processing Addendum.
• When you leave our site through an outbound link (including affiliate links via /go/…), the destination site receives the usual request data and its own privacy policy applies. We do not pass any of your data to it. See How we make money.

We do not sell personal information, do not "share" it for cross-context behavioral advertising, and do not use it for targeted advertising.

6. International transfers

We are based in Israel, which the European Commission recognises as providing adequate protection. Our provider Cloudflare processes data on its global network, including in the United States; such transfers rely on the EU-U.S. Data Privacy Framework (and its UK extension) where applicable and/or the European Commission's Standard Contractual Clauses included in Cloudflare's Data Processing Addendum.

7. Your rights

Because we store so little and nothing that identifies you directly, we may be unable to find data about you — but you can always ask.

• Israel (Protection of Privacy Law, 5741-1981, as amended including Amendment 13 in force since 14 August 2025): you may ask to review information about you held in our database and to correct or delete information that is inaccurate, incomplete, unclear or outdated. You may also contact the Privacy Protection Authority.
• EU / EEA and UK (GDPR / UK GDPR): access, rectification, erasure, restriction, data portability, and the right to object to processing based on legitimate interests; where we rely on consent you may withdraw it at any time. You can complain to your local supervisory authority (in the UK, the ICO).
• California (CCPA as amended by CPRA) and other U.S. states: right to know/access, delete and correct personal information, and to opt out of sale/sharing — we do neither. We will not discriminate against you for exercising your rights. Categories collected in the last 12 months: identifiers (IP address, processed transiently for security), internet activity (request data), and the de-identified Ask text described above. Sources: you and your device. We do not knowingly retain information that identifies you in de-identified data and will not attempt to re-identify it.
• Brazil (LGPD): confirmation of processing, access, correction, anonymization or deletion, information about sharing, and revocation of consent; you may complain to the ANPD.
• Other regions: we apply the same practices worldwide and will honor comparable rights under laws such as Canada's PIPEDA, Japan's APPI, South Korea's PIPA, India's DPDP Act and Australia's Privacy Act. We do not target, monitor or profile individuals in the People's Republic of China; data is processed outside China as described above.

To exercise any right, email rotem@taskverdict.com. We answer within 30 days (or sooner where the law requires) and may ask for information needed to verify the request. You may use an authorized agent where the law allows.

8. Security

HTTPS everywhere (HSTS), a strict Content Security Policy, no third-party scripts, minimal data, short retention, redaction before storage, rate limiting, and access to the hosting account restricted to the operator.

9. Children

TaskVerdict is a general-audience site for adults choosing work tools. It is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.

10. Changes

We will update this page when our practices change (for example before opening email sign-ups or adding any analytics) and change the "last updated" date. Material changes will be highlighted on the site.

11. Contact

Rotem Tzemah (sole proprietor), 60 Tom Lantos Blvd., Netanya, Israel · rotem@taskverdict.com