Privacy Policy

What this version covers

• Describes information collected through the public website, request intake, interest forms, login, and request-status tools.
• Explains browser session drafts, cookies used for sign-in and request-status access, and limited automated request analysis.
• Explains how to contact CityTask about access, correction, deletion, or communication preferences.

Scope

This policy covers citytask.app public pages and the tools used to submit or follow up on a request during the current operating phase (accepting service requests). It does not describe future payment, escrow, or marketplace features as if they were live.

Information CityTask collects

Depending on what you enter or how you use the site, CityTask may collect:

• Contact information, including your name, email address, phone number, and communications with CityTask.
• Service-request information, including requested services, descriptions, property type, address, unit, access and parking notes, timing, budget range, and other details you choose to provide. Photos or attachments are collected only when a form actually supports them; the main public intake currently focuses on text and structured fields rather than photo upload.
• Business-request information, such as a business name, contact title, expected service frequency, insurance requirements, provider or organization details, markets, unit counts, and operational notes submitted through interest, waitlist, or property-operations forms.
• Request-processing information, including generated reference numbers, request status, support notes, duplicate-request indicators, summaries, classifications, missing-information prompts, and safety flags.
• Account and session data, such as sign-in email, one-time verification codes, device or browser identifiers used for login continuity, and request-status access sessions after verification.
• Technical and usage information that may be created by hosting, security, logging, and analytics systems, such as IP address, browser or device information, page views, referring pages, timestamps, and error or security events. Analytics operates only when it is configured.

The main intake may temporarily save an unfinished draft in your browser's session storage so you can move between steps. The draft is designed to clear after successful submission and ordinarily ends when that browser session is closed, but browser behavior and manual clearing can vary.

Information you should not submit

Do not enter Social Security numbers, bank or card information, medical records, government identification numbers, alarm codes, permanent lockbox combinations, passwords, or other highly sensitive information in a service description or access note. CityTask does not currently collect payment information through the public intake.

Sources of information

• Directly from you when you submit forms, status lookups, or support messages.
• Automatically from browser and site use, including cookies and similar technologies described below.
• From service providers that host, deliver email, secure, analyze, or support CityTask systems.
• From prospective or assigned independent providers when they communicate about a request.
• From CityTask's internal request-review and support activity.

How CityTask uses information

CityTask may use information to:

• Receive, validate, organize, and manually review a request.
• Contact you about missing details, availability, possible providers, scope, timing, and price.
• Identify possible duplicate, abusive, unsafe, or fraudulent submissions.
• Coordinate with prospective or assigned independent service providers when appropriate.
• Provide status tools, support, maintain request history, troubleshoot errors, and protect CityTask systems.
• Understand site usage and improve forms, pricing content, operations, and customer experience.
• Comply with legal obligations and respond to lawful requests or safety concerns.

Browser storage and cookies

CityTask may use the following categories of cookies and browser storage:

• Necessary session cookies for signed-in app access (HttpOnly session token) and related CSRF protection after a successful broker/app login.
• Request-status access cookies after email and one-time-code verification for the request-status hub (HttpOnly, time-limited).
• Identity login cookies for account sign-in continuity after OTP verification (refresh session and device identifier).
• Browser session-storage drafts for unfinished main-intake steps (for example, citytask-intake-draft).
• Analytics technologies only when analytics is configured for the environment. CityTask does not present the public website as cookie-free.

Secure status links that use a dedicated token in the URL may operate without setting a long-lived cookie. You can clear browser site data or end a session to remove unfinished drafts; some functions such as staying signed in or returning to a verified status session may stop working if necessary cookies are blocked.

Automated request analysis

CityTask may use automated systems to organize or summarize request text, suggest service categories, identify missing details, check for possible duplicate requests, and flag possible safety concerns. Request descriptions, general location fields, and service categories may be processed by CityTask systems or operating vendors that support those functions. Automated output is not a final provider assignment, price, schedule, or safety decision; requests remain subject to human review.

How information may be shared

CityTask may disclose information in limited circumstances:

• To prospective or assigned independent service providers, but only when CityTask determines that details are reasonably needed to evaluate or coordinate the requested work.
• To vendors that support hosting, databases, email delivery, analytics, security, customer support, or request analysis, for the services they provide to CityTask.
• To professional advisers, insurers, authorities, or other parties when reasonably necessary for legal, security, fraud-prevention, emergency, or dispute purposes.
• In connection with a financing, reorganization, sale, or transfer of all or part of the business, subject to appropriate confidentiality and legal requirements.

CityTask does not currently operate as a data broker and does not sell public-intake information for money. Privacy laws may define "sale," "sharing," or targeted advertising more broadly, so this statement should not be read as a legal classification of every vendor relationship or statutory category.

Request-related communications

By submitting a request, you ask CityTask to contact you by email or phone about that request, including for clarification, coordination, status, and support. Submitting the intake is not consent to unrelated marketing, and it does not authorize a payment or charge. Security or account messages may also be sent when needed to protect access to a request or account.

Retention, access, correction, and deletion

CityTask retains request information for as long as it is reasonably needed for coordination, support, safety, recordkeeping, fraud prevention, dispute handling, and legal or operational requirements. A single fixed deletion schedule has not yet been independently verified for every database, log, email, and backup system. Copies may remain for a limited period in backups, security logs, email systems, or vendor systems after an operational record is removed.

You may ask CityTask to locate, correct, or delete information associated with your request by emailing support@citytask.app. Include your CityTask reference number when available. CityTask may need to verify your identity and may limit or deny a request when information must be retained, another person's rights would be affected, the request cannot reasonably be matched to a record, or applicable law permits an exception. CityTask does not promise a fixed statutory response deadline or automatic deletion from every backup, log, or vendor system.

Security limitations

CityTask uses administrative, technical, and operational safeguards intended to reduce unauthorized access, loss, misuse, or disclosure. Websites, email systems, databases, transmissions, and storage methods cannot be guaranteed completely secure. Please avoid submitting sensitive information that is not necessary to review the work.

Children

CityTask's public intake is directed to people requesting home-service help and related business or property operations. It is not directed to children, and CityTask does not knowingly operate a children's service or parental-consent workflow for the public intake. If you believe a child submitted information, contact support@citytask.app.

Your choices and geographic rights

• You may choose not to submit a request or omit optional information.
• You may close the browser session or clear site data to remove an unfinished browser-session draft.
• You may use browser or device controls to limit cookies or analytics, although some site functions may change.
• You may contact CityTask about access, correction, deletion, or communication preferences.

Depending on where you live, applicable law may provide additional rights. Rights can vary by jurisdiction. CityTask will evaluate verified requests under the law that applies. This policy does not claim that a particular statutory right applies in every situation.

Policy changes

CityTask may revise this policy as its systems and operating model change. The effective date, last-updated date, and version on this page identify the current public version. Material changes to payment, identity verification, messaging, or marketplace features will be reflected here before those features are treated as publicly available.

Related terms

Use of CityTask is also subject to the Terms of Service.

Contact

Questions or verified requests about your information can be sent to support@citytask.app. Include your CityTask reference number when available, but do not email passwords, payment information, or government identification numbers.