Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Toritask collects, uses, stores, shares, and protects personal information when you use our website, platform, campaigns, task marketplace, payment and payout features, communities, and related services.

By using Toritask, creating an account, joining a waitlist or community, creating a campaign, completing a task, submitting proof, contacting support, or otherwise interacting with us, you acknowledge that your personal information will be processed as described in this Privacy Policy.

This Privacy Policy should be read together with our Terms of Service, Payout Policy, Acceptable Use Policy, Cookie Notice, and any other policies made available on the platform.

1. Who we are

Toritask is operated by Bolojar Technologies

Registered address: Lagos Nigeria.

RC NO: 8889249

Toritask is a technology marketplace that enables creators to create promotional campaigns and enables earners to voluntarily complete eligible tasks in exchange for rewards. Toritask is not a social media platform, financial institution, bank, savings provider, investment platform, escrow provider, or employer of earners.

For the purposes of applicable data protection laws, Toritask is generally the data controller for personal information collected and processed through the Toritask platform, except where another party determines the purposes and means of processing.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal information processed when you:

• visit or use the Toritask website or app;
• create or manage a Toritask account;
• create, fund, review, or manage a campaign as a creator;
• view, accept, complete, or submit proof for a task as an earner;
• join a waitlist, Telegram community, WhatsApp community, mailing list, or referral programme;
• contact support or communicate with Toritask;
• interact with our ads, emails, or social pages

This Privacy Policy does not control the privacy practices of third-party platforms such as Instagram, TikTok, Facebook, WhatsApp, X/Twitter, YouTube, payment providers, banks, telecom operators, hosting providers, analytics providers, or other external websites and services. Their own privacy policies apply to their services.

3. Personal information we collect

The exact information we collect depends on how you use Toritask. We may collect the following categories of personal information:

3.1 Account and profile information

• Name, username, display name, email address, phone number, password or password hash, account type, referral code, profile picture, and login credentials.
• Social media handles, profile links, public profile information, and platform-specific usernames needed to match tasks to accounts and verify submissions.
• Country, state, city, language preference, and time zone where voluntarily provided or reasonably inferred from technical information.

3.2 Creator and campaign information

• Campaign titles, descriptions, instructions, budgets, task quantities, categories, links, captions, hashtags, target platforms, target audience preferences, campaign screenshots, and campaign status.
• Information about the brand, business, page, product, content, or post being promoted.
• Review decisions, approvals, rejections, creator feedback, dispute information, and campaign history.

3.3 Earner, task, and proof information

• Tasks viewed, accepted, completed, skipped, rejected, disputed, or approved.
• Proof submitted for tasks, including screenshots, screen recordings, captions, URLs, timestamps, social handles, profile pictures, post links, comments, likes, follows, shares, and other evidence of completion.
• Trust and quality information such as approval rate, rejection rate, task completion history, fraud signals, review notes, warnings, suspensions, and account restrictions.

4. Payment and payout information

To process creator payments and earner payouts, we may collect:

• Bank name
• Bank account number
• Bank account holder name
• Paystack recipient or payout identifiers
• Payment transaction references
• Payment status and payout history
• Withdrawal requests and payout confirmations

We collect bank account information solely to verify payout details, process approved payouts, prevent fraud, maintain accurate financial records, comply with legal obligations, and support payment-related customer service.

Toritask does not collect, store, or have access to your full debit card or credit card details. Payment card information is securely processed by our third-party payment providers, such as Paystack, in accordance with their own privacy and security standards.

Your bank account information is not sold, rented, or used for marketing purposes and is only shared with payment providers, banks, or authorities where necessary to process payments or where required by law.

3.5 Verification, fraud prevention, and security information

• Device information, IP address, browser type, operating system, device identifiers, session data, login time, access time, pages viewed, referral source, and other technical logs.
• Fraud prevention signals, duplicate-account indicators, suspicious activity logs, proof validation records, payment-risk indicators, and abuse reports.
• Identity or additional verification information if we request it for fraud prevention, legal compliance, payout protection, dispute resolution, or platform safety.

3.6 Communications and support information

• Messages you send to Toritask, support tickets, email correspondence, community messages directed to Toritask, complaint records, dispute records, and feedback.
• Marketing preferences, notification preferences, waitlist information, and referral programme information.

3.7 Cookies and similar technologies

We may use cookies, pixels, local storage, device identifiers, and similar technologies to operate the platform, keep users logged in, remember preferences, secure accounts, prevent fraud, measure performance, understand usage, and improve services. More information is provided in Section 12 below.

4. Sensitive personal information

Toritask does not intend to collect sensitive personal information unless it is necessary for a specific lawful purpose, such as identity verification, fraud prevention, dispute resolution, legal compliance, or platform safety.

You should not upload sensitive information about yourself or any other person unless Toritask specifically requests it and explains why it is needed. Sensitive information may include government identity numbers, biometric data, health information, financial secrets, religious beliefs, political opinions, or information about children.

If Toritask later decides to collect government ID, BVN, NIN, biometric data, or similar sensitive information, this Privacy Policy will be updated before collection begins.

5. How we use personal information

We may use personal information for the following purposes:

• to create, verify, secure, and manage user accounts;
• to provide and operate the Toritask marketplace;
• to allow creators to create, fund, manage, and review campaigns;
• to allow earners to view, accept, complete, and submit proof for tasks;
• to verify task completion and manage approvals, rejections, disputes, and quality control;
• to calculate earnings, process payouts, manage refunds, handle failed transactions, and keep financial records;
• to detect, investigate, prevent, and respond to fraud, bots, fake accounts, fake proof, chargebacks, abuse, security incidents, and policy violations;
• to enforce our Terms of Service, Payout Policy, Acceptable Use Policy, and other platform rules;
• to provide customer support, respond to enquiries, and resolve complaints;
• to send service messages such as account alerts, payout updates, campaign updates, security notices, and policy changes;
• to send marketing messages, newsletters, waitlist updates, offers, and product updates where permitted by law and user preferences;
• to improve the platform, run analytics, test features, and understand usage trends;
• to comply with legal obligations, tax, accounting, audit, regulatory, law enforcement, and dispute-resolution requirements;
• to protect the rights, safety, property, and integrity of Toritask, users, partners, and the public.

6. Lawful bases for processing

We process personal information only where we have a lawful basis under applicable data protection laws. Depending on the context, our lawful bases may include:

• Contract: to provide the Toritask services you request, including account access, campaigns, task completion, verification, and payouts.
• Consent: where we ask for your consent, such as certain marketing messages, optional cookies, optional or certain verification activities.
• Legal obligation: to comply with laws, tax and accounting requirements, lawful requests, regulatory obligations, and dispute-resolution duties.
• Legitimate interests: to operate and improve the platform, prevent fraud, secure accounts, enforce policies, investigate abuse, communicate with users, and protect the platform, provided that such interests are not overridden by your privacy rights.
• Vital interests or public interest: in rare cases where processing is necessary to protect someone from serious harm or comply with a task carried out in the public interest.

Where we rely on consent, you may withdraw your consent at any time. Withdrawal of consent will not affect processing already carried out before withdrawal and may affect access to certain optional features.

7. How we share personal information

We do not sell users' personal information. We may share personal information only where necessary and appropriate, including with the following categories of recipients:

• Creators and earners: limited information may be shared between creators and earners to operate campaigns, verify task completion, review proof, resolve disputes, and maintain trust. For example, a creator may see proof submitted by an earner, and an earner may see campaign instructions, links, and creator content.
• Service providers: hosting providers, cloud infrastructure providers, payment processors, payout processors, email providers, SMS or WhatsApp messaging providers, analytics providers, customer support tools, fraud prevention providers, and security vendors.
• Payment and banking partners: payment processors, banks, payment gateways, and payout providers that process creator payments, refunds, and earner withdrawals.
• Professional advisers: lawyers, accountants, auditors, data protection consultants, insurers, and other professional advisers where necessary.
• Authorities and legal recipients: regulators, courts, law enforcement, government agencies, tax authorities, dispute-resolution bodies, or other persons where required by law or necessary to protect rights and safety.
• Business transfers: potential or actual buyers, investors, lenders, successors, or advisers in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar transaction, subject to appropriate confidentiality protections.
• With your consent or direction: where you ask us to share information or otherwise consent to sharing.

We require service providers to process personal information only for authorised purposes and to apply appropriate security and confidentiality measures.

8. Business Transfers and Changes in Ownership

If Toritask or Bolojar Technologies is involved in a merger, acquisition, investment, restructuring, financing, sale of assets, bankruptcy, or other business transaction, your personal information may be transferred or disclosed as part of that transaction, subject to applicable law and appropriate confidentiality obligations.

We will take reasonable steps to ensure that any successor or acquiring entity continues to protect your personal information in a manner consistent with this Privacy Policy.

9. Payment processors and financial information

Toritask may use third-party payment processors to collect creator payments and facilitate payouts to earners. These providers may collect and process payment information, transaction details, bank details, identity information, fraud prevention information, and other information required to process payments and comply with law.

Toritask is not a bank, savings provider, investment platform, financial institution, or money-deposit service. Information collected for payments and payouts is processed to facilitate campaign funding, rewards, withdrawals, refunds, chargeback handling, reconciliation, accounting, fraud prevention, and legal compliance.

When you use a payment provider, the provider's own terms and privacy policy may also apply. Toritask is not responsible for the independent privacy practices of payment providers, banks, or other financial intermediaries.

10. Third-party social media platforms

Toritask campaigns may involve third-party platforms such as Instagram, TikTok, Facebook, WhatsApp, X/Twitter, YouTube, and other services. Toritask is not affiliated with, endorsed by, sponsored by, or approved by those platforms unless expressly stated.

When you click links, visit third-party platforms, interact with content, post comments, like, follow, share, repost, upload stories, or take other actions outside Toritask, those third-party platforms may collect, use, and disclose your information under their own terms and privacy policies.

Users are responsible for understanding and complying with the rules and privacy practices of any third-party platform they use.

11. User-generated content, campaign content, and proof

Creators are responsible for the campaign content, links, captions, claims, products, services, pages, and instructions they submit. Earners are responsible for the proof, comments, screenshots, videos, links, and other materials they submit.

By submitting content to Toritask, you grant Toritask permission to store, review, display, process, moderate, and share that content as reasonably necessary to operate the platform, verify tasks, resolve disputes, prevent fraud, enforce policies, and comply with law.

Do not upload personal information belonging to another person unless you have a lawful basis and all necessary permissions to do so. Toritask may remove content that violates this Privacy Policy, our Terms of Service, or applicable law.

12. Communications

We may send you transactional and service messages, including account notices, verification messages, login alerts, campaign updates, task updates, payout updates, security notices, support replies, and policy changes. These messages are necessary for the operation of the platform and may not always be optional.

We may also send marketing messages, product updates, newsletters, offers, waitlist updates, and community announcements where permitted by law. You may opt out of marketing communications using the unsubscribe method provided or by contacting us. We may still send service messages after you opt out of marketing communications.

13. Cookies, analytics, and similar technologies

Toritask may use necessary cookies and similar technologies to provide core platform functions such as login sessions, security, fraud prevention, preference storage, and service availability.

We may also use analytics, performance, functionality, and marketing cookies or similar technologies to understand how users interact with Toritask, improve the platform, measure campaign performance, diagnose issues, and support marketing. Where required by law, we will request consent before using optional cookies or similar technologies.

You may manage cookies through your browser settings or through any cookie controls we provide. Blocking some cookies may affect how the platform works.

14. Data retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law, dispute resolution, fraud prevention, audit, accounting, tax, regulatory, or security requirements.

Our expected retention approach is as follows, subject to legal review and operational requirements:

Category

Expected retention period

Account and profile data

For as long as the account is active, then up to 6 years after closure where needed for disputes, fraud prevention, legal, tax, accounting, or regulatory purposes.

Campaign, task, and proof records

Generally up to 12 months after campaign completion, unless needed longer for disputes, fraud investigations, chargebacks, legal claims, or platform integrity.

Payment, payout, invoice, and transaction records

Generally up to 6 years or longer where required by tax, accounting, regulatory, payment, chargeback, or legal requirements.

Security, fraud, and technical logs

Generally 12 to 24 months, unless needed longer for fraud prevention, abuse investigations, security incidents, legal claims, or compliance.

Support and complaint records

Generally up to 3 years after the matter is closed, unless needed longer for legal, operational, or dispute-resolution reasons.

Marketing preferences

Until you opt out or withdraw consent, with suppression records retained as needed to respect your opt-out.

If you request account deletion, we may delete or anonymise information that is no longer needed. However, we may retain information where necessary for legal compliance, accounting, fraud prevention, dispute resolution, enforcement of agreements, or protection of platform integrity.

15. Security

We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse, alteration, disclosure, or destruction. These measures may include access controls, authentication, encryption where appropriate, secure hosting, monitoring, audit logs, fraud checks, staff restrictions, and security reviews.

No online platform can guarantee absolute security. Users are responsible for keeping their passwords, devices, email accounts, bank accounts, and social media accounts secure. You should notify Toritask immediately if you suspect unauthorised access to your account.

We restrict access to personal information to authorised personnel who require access to perform their duties.

16. International transfers

Toritask may process or store personal information in Nigeria or in other countries where our service providers, hosting providers, payment providers, support tools, analytics tools, or other partners operate.

Where personal information is transferred outside Nigeria, we will take steps required by applicable law to ensure appropriate protection for the information, which may include contractual safeguards, adequacy assessments, consent where appropriate, or other lawful transfer mechanisms.

17. Your privacy rights

Subject to applicable law and verification of your identity, you may have the right to:

• be informed about how your personal information is collected and used;
• request access to personal information we hold about you;
• request correction of inaccurate, incomplete, or outdated information;
• request deletion of personal information where there is no lawful reason for continued processing;
• withdraw consent where processing is based on consent;
• object to or request restriction of certain processing activities;
• request portability of personal information where applicable;
• complain to the Nigeria Data Protection Commission or another competent authority.

To exercise your rights, contact us at support@toritask.com. We may ask you to verify your identity before responding. We may refuse or limit a request where permitted by law, including where the request affects the rights of others, conflicts with legal obligations, undermines fraud prevention or security, or relates to information we must retain.

18. Automated decisions, fraud signals, and trust scores

Toritask may use automated or semi-automated tools to detect fraud, identify duplicate accounts, flag suspicious activity, assess proof quality, calculate trust scores, prioritise review, protect payments, or enforce platform rules.

These tools may influence whether a task is approved, whether a payout is delayed, whether a campaign is reviewed, or whether an account is restricted. Where required by law, users may request human review of decisions that significantly affect them.

19. Children's privacy

Toritask is intended only for individuals who are 18 years of age or older.

By creating an account, you represent and warrant that you are at least 18 years old and legally capable of entering into a binding agreement.

We do not knowingly collect personal information from individuals under the age of 18. If we become aware that a person under 18 has created an account or provided personal information, we may suspend or terminate the account and delete the information where appropriate and permitted by law.

20. Your responsibilities

You are responsible for ensuring that the information associated with your Toritask account remains accurate, complete, and up to date. This includes your email address, phone number, bank account details, and any other information necessary for us to provide our services, process payouts, communicate with you, and maintain platform security.

You should promptly update your account information whenever it changes.

Creators must ensure that campaign content, links, products, claims, and instructions comply with law, third-party platform rules, advertising standards, intellectual property rights, privacy rights, and Toritask policies.

Earners must complete tasks voluntarily and are responsible for how they interact with third-party platforms and other users.

21. Data breach and incident response

If we become aware of a personal data breach or security incident affecting personal information, we will investigate and take appropriate steps to contain, assess, and remediate the incident. Where required by applicable law, we will notify affected users, regulators, or other relevant parties.

Users should contact us immediately if they discover or suspect unauthorised access, account compromise, payment fraud, fake proof, data exposure, or another security incident involving Toritask.

22. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, legal obligations, business operations, or privacy practices.

When we make material changes, we will take reasonable steps to notify users, such as by posting the updated policy on the platform, sending an email, or displaying an in-platform notice. Continued use of Toritask after an updated Privacy Policy becomes effective means you acknowledge the updated policy.

23. Contact us

For questions, complaints, requests, or concerns about this Privacy Policy or how Toritask processes personal information, contact:

Company

Bolojar Technologies

Email

support@toritask.com

Address

Lagos, Nigeria

Subject line

Privacy Request / Data Protection Request

If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission or any other competent data protection authority available to you under applicable law.

Page