Privacy & Data Protection

Welcome to Sweet Tasks. We operate a specialized digital educational and microtask monetization platform. We recognize that trust and transparency are the foundation of our user community. This Privacy Policy sets out the principles governing our collection, handling, processing, and protection of your personal and financial information.

By creating an account, enrolling in our Educational Plan (LKR 3,000/=), submitting tasks, or performing peer-to-peer fund transfers, you acknowledge and agree to the practices outlined in this Policy.

To provide our services, maintain regulatory compliance, and safeguard user balances, we collect the following categories of information:

• Account & Profile Information: Full legal name, chosen username, email address, contact phone number, country/region, and your permanent 8-digit Unique User ID (e.g. 10482914) generated upon registration.
• KYC & Identity Verification Documents:
  • Tier 1 (Identity): High-resolution photos of government-issued National Identity Card (NIC), Passport, or Driving License, including full name, birth date, document number, and portrait image.
  • Tier 2 (Address Proof): Official utility bill (electricity, water, telecom) or bank statement issued within the last 3 months matching your residential address.
• Financial & Payout Details: Commercial bank name, branch code, account number, account holder name, mobile reload numbers/service providers, cryptocurrency deposit addresses, or PayPal email IDs.
• Task Activity & Verification Proofs: Screenshots submitted for task validation, social media handles (YouTube, Telegram, TikTok, Facebook), campaign engagement history, and escrow approval logs.
• Transaction & P2P Transfer Records: Complete records of internal peer-to-peer transfers (Sender UID, Recipient UID, transferred amount, timestamps, custom transfer notes), withdrawal requests, deposit records, and referral bonus credits.
• Technical Telemetry & Security Logs: IP address, device hardware model, operating system, browser user agent, login timestamps, session IDs, and anti-fraud fraud-score indicators.

We process your data strictly for legitimate operational, security, and legal purposes, including:

• Educational Course Delivery: Providing access to the digital educational modules, instructional videos, and practical microtask walkthroughs unlocked via the LKR 3,000/= Educational Plan.
• Task Validation & Escrow Holding: Reviewing submitted task proofs during the 2-week to 1-month verification period to ensure genuine advertiser engagement before maturing points to active withdrawal balance.
• Processing Payouts & Handling Fees: Facilitating bank withdrawals (processed within 48 hours subject to 1 withdrawal/month and 6% handling fee) and instant mobile reloads.
• Peer-to-Peer Transfers: Authorizing real-time fund transfers between verified accounts via 8-digit User IDs and logging transparent double-entry ledgers for both parties.
• Referral Network Management: Tracking referral genealogy and crediting the instant LKR 500/= direct commission to the referrer's Referral Wallet upon qualified course activation.
• Platform Security & Anti-Fraud: Enforcing the single account per individual rule, detecting bot activity, preventing multi-accounting, and safeguarding community integrity.

Sweet Tasks employs rigorous enterprise-grade security protocols to protect all stored and transmitted data:

• Encrypted KYC Vault: Uploaded identity documents and proof of address files are stored in isolated, access-restricted repositories. They are accessible only by authorized compliance personnel during document verification.
• Automated Database Backups: System databases are continuously backed up in secure encrypted redundant environments to prevent data loss or server disruptions.
• Role-Based Access Control (RBAC): Administrative staff have strict tiered privileges; no staff member has access to your raw banking passwords, private keys, or unverified ledger alterations.

Our platform includes an internal Peer-to-Peer (P2P) fund transfer system allowing users to transfer funds using 8-digit User IDs. We have engineered privacy protections directly into this workflow:

• Double-KYC Verification Requirement: Both sender and recipient must have completed Tier 1 KYC verification before any transfer can be executed. This prevents anonymous money transfers and ensures full legal accountability.
• Private Transaction Ledger: Transfer activity is visible only in the personal wallet transaction histories of the sender and recipient, as well as internal administrative audit logs.

We maintain a strict and unambiguous data privacy posture regarding third parties:

• Zero Sale of Personal Data: We never sell, rent, trade, or lease user personal information, phone numbers, or email lists to third-party marketing companies, advertisers, or brokers.
• Payment & Banking Partners: We transmit only necessary banking credentials (account number, bank name, transfer amount) to commercial banks and mobile network reload providers solely to fulfill your requested withdrawals.
• Legal & Law Enforcement Disclosures: We may disclose user data if required by applicable Sri Lankan laws, formal court orders, or subpoenas from law enforcement authorities investigating financial fraud, cybercrime, or anti-money laundering violations.

Sweet Tasks uses secure HTTP cookies and session tokens to provide a smooth, reliable, and secure web application experience:

• Essential Authentication Cookies: Used to maintain your active login session, prevent cross-site request forgery (CSRF attacks), and securely verify requests across pages.
• Persistent "Remember Me" Tokens: Cryptographically hashed security tokens stored in cookies if you select "Remember Me", allowing automatic authenticated access from your trusted device.
• UI & Preference Cookies: Storing user preferences, notifications state, and modal dismissals to optimize browsing convenience.

You can adjust your browser settings to reject or delete cookies. However, disabling essential authentication cookies will prevent you from logging into your Sweet Tasks dashboard.

To preserve a fair earning environment for all members and protect our advertising partners, Sweet Tasks runs automated anti-fraud telemetry:

• VPN & Proxy Detection: Users accessing the system through commercial proxy servers or VPN networks will have their task submissions automatically flagged for manual review.
• One Account Per Device: Our security framework links hardware telemetry to individual accounts to prevent fraudulent referral farming and duplicate account creation.

We respect your privacy rights and give you transparent control over your personal information:

• Right of Access: You can review your profile information, submitted KYC documents, earning ledgers, and transaction history at any time from your Account Settings and Wallet.
• Right of Rectification: You may update outdated contact details, phone numbers, or payout channels directly within your account settings or by submitting a support ticket.
• Data Retention Period: We retain account and transaction records for as long as your account remains active and as required by Sri Lankan financial record-keeping standards to satisfy tax, accounting, and anti-money laundering obligations.
• Account Closure Requests: You may request account deactivation by contacting our support desk, provided there are no pending disputes, unsettled balances, or fraudulent investigations.

Sweet Tasks is designed strictly for individuals aged 13 years and older. We do not knowingly collect or solicit personal information from children under the age of 13.

If we discover that a user under 13 has registered or provided personal data, we will immediately delete that information and terminate the account. Parents or guardians who believe their child has registered may contact us for prompt removal.

Sweet Tasks reserves the right to amend or update this Privacy Policy at any time to reflect changes in our services, technological advancements, or statutory legal requirements.

When changes are published, the "Last Updated" date at the top of this document will be updated. Your continued use of the platform after any such revisions indicates your acceptance of the updated terms.

If you have any questions regarding this Privacy Policy, your personal data, KYC document status, or wish to exercise your privacy rights, please contact our Data Protection and Support Team: