Privacy Policy & Data Rights

FinTech Consulting LLC dba ApTask and its affiliates (“we,” “our,” or “us”) are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you interact with our website (the “Site”) and services.

1. Collection and Use of Personal Information

We may collect the following “Personal Information,” which identifies you as an individual or relates to an identifiable individual:

Name and contact details (email, phone number, and address).
Job search criteria, employment experience, educational history, and skills.
Reference information, background data, and resume details.
Login credentials (e.g., username, email address, and password).

By providing your contact information, including your mobile phone number, you consent to receiving communications, including text messages (which may be sent through an automated system), emails, and other notifications. Marketing communications via text messages are optional, and you may opt out at any time by replying “STOP” to SMS communications or contacting us at businessexcellence@aptask.com.

Use of SMS Opt-In Data:

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties for purposes unrelated to providing you with the services of the campaign you opted into.

We may share your Personal Information, including your SMS opt-in or consent status, with third parties that assist us in providing messaging services. This includes, but is not limited to:

Platform providers.
Phone companies.
Other vendors who assist in the delivery of text messages.

We use Personal Information to:

Register you with the Site and provide you with requested information or services.
Send automated email messages, text messages (message and data rates may apply), or marketing materials.
Conduct data analysis, audits, and service improvements.

Categories of Personal Information Collected (CCPA/CPRA)

In the preceding twelve (12) months, we have collected the following statutory categories of Personal Information as defined by the California Consumer Privacy Act (Cal. Civ. Code § 1798.140(v)):

Identifiers: name, postal address, email address, telephone number, IP address, unique online identifiers, and account credentials.
Personal information categories listed in Cal. Civ. Code § 1798.80(e): contact details and employment history (overlaps with Identifiers above).
Internet or other electronic network activity information: browser type, device information, pages viewed, referral URLs, session duration, and interaction data from the Site.
Geolocation data: approximate location derived from IP address (city / region level; we do not collect precise GPS coordinates).
Professional or employment-related information: résumé content, work history, job titles, skills, certifications, and job search criteria.
Education information: education history and academic credentials, as provided by you in a résumé or application.

We do not knowingly collect the remaining CCPA categories: protected classification characteristics (such as race, religion, or medical condition beyond what is volunteered on a résumé), commercial information (products or services purchased), biometric information, sensory data (audio, visual, thermal, or olfactory), or inferences drawn to create a consumer profile.

Sources of Personal Information

We collect Personal Information directly from you (when you submit a form, résumé, or application), automatically through the Site (via cookies and analytics), and from third parties such as job boards, professional networking sites, and authorized referrers.

Retention Periods

We retain Personal Information only as long as necessary for the purposes described above and to comply with our legal, tax, and recordkeeping obligations. Typical retention windows:

Candidate and applicant records (résumé, work history, interview notes): up to seven (7) years after last activity, to support recruiter outreach and comply with EEOC recordkeeping obligations (29 C.F.R. § 1602.14).
Placed contractor / W-2 employee records: retained per federal and state payroll and tax law (up to seven years post-engagement).
Marketing contact information: retained until you unsubscribe or three (3) years after last interaction, whichever is earlier.
Cookie and analytics data: retained per the cookie’s stated lifetime (see Section 3); typically 30 days to 24 months.
SMS consent records and opt-in/opt-out logs: retained for the duration of consent plus four (4) years for TCPA audit purposes.
Legal-hold or dispute records: retained for the duration of the matter plus applicable statute of limitations.

2. Disclosures of Personal Information

We may disclose Personal Information in the following circumstances:

Service Providers: To third-party vendors performing functions on our behalf, including those supporting our messaging services.
Legal Compliance: To comply with applicable laws, legal processes, or regulatory requirements.
Business Transfers: During mergers, reorganizations, or sales of business assets.
Protection: To safeguard rights, property, and safety, or to prevent fraud and security risks.

3. Collection and Use of Other Information

“Other Information” includes data that does not directly identify you, such as:

Browser and device information, cookies, and analytics data.
IP address, geographic location, and browsing behavior.

We may use Other Information to:

Personalize your experience and improve website functionality.
Analyze website traffic and measure marketing performance.
Deliver retargeted advertising.

When you first visit the Site, you will see a consent banner that lets you accept or decline non-essential cookies. We describe three categories of cookies and tracking technologies, of which two are currently in use:

Essential cookies: required for the Site to function — they remember your consent choice, your visitor pathway preference (Employer / Candidate), and core security state. These are set without consent because the Site cannot operate without them.
Analytics and performance cookies: optional. Set only after you affirmatively accept on the consent banner. They help us understand how visitors use the Site so we can improve content and performance. We do not use these cookies to identify you personally.
Advertising cookies: we do not currently set advertising or cross-site tracking cookies. If we introduce them in the future, this Privacy Policy will be updated and we will re-prompt you for consent.

Your consent choice is stored in your browser’s local storage under the key aptask:cookie-consent. To change it, clear that entry in your browser’s site data, refresh the page, and the consent banner will reappear. We also re-prompt automatically whenever this policy is materially revised.

Opt-Out Mechanism

You can also manage cookie settings through your browser’s built-in controls or opt out of third-party analytics tools directly (e.g., Google Analytics Opt-Out). Blocking essential cookies through your browser may break parts of the Site.

Legal Basis (EU/UK and California Residents)

For visitors located in the European Union, United Kingdom, Switzerland, and other jurisdictions with comparable laws (including the California Consumer Privacy Act), our legal basis for processing analytics cookie data is your explicit, affirmative consent given through the cookie consent banner. You may withdraw consent at any time using the method described above; withdrawal does not affect processing carried out before withdrawal.

4. Security

We use organizational, technical, and administrative measures to protect your Personal Information. However, no system is 100% secure. If you suspect a security issue, please contact us immediately at help@aptask.com.

5. Choices and Rights

Subject to applicable law and reasonable identity verification, you have the following rights with respect to your Personal Information:

Marketing Communications: You can opt out of marketing emails by following the unsubscribe link or contacting us directly.
Right to Access / Know: You may request confirmation that we process your Personal Information and a copy of the categories and specific pieces of Personal Information we hold about you.
Right to Delete: You may request that we delete Personal Information we have collected from you, subject to statutory retention obligations (see Section 1).
Right to Correct: You may request that we correct inaccurate Personal Information we maintain about you.
Right to Data Portability: You may request a copy of your Personal Information in a portable, readily usable format.
Right to Opt Out of Sale or Sharing: We do not “sell” or “share” Personal Information as those terms are defined under the CCPA/CPRA and similar state laws. If this ever changes, we will update this Policy and provide a clear opt-out mechanism.
Right to Non-Discrimination: We will not discriminate against you for exercising any of these rights — you will not be denied services, charged different prices, or receive a lesser quality of service because you made a privacy request.
Right to Withdraw Consent: Where processing is based on your consent (e.g., analytics cookies, marketing SMS), you may withdraw consent at any time. Withdrawal does not affect processing carried out before withdrawal.

Please note that opting out of SMS communications will not impact the functionality of non-marketing messages related to the services or campaigns you are enrolled in.

How to Submit a Request

To exercise any of the rights above, contact us using the details in Section 11 and include the words “Privacy Request” (or, if you are a California resident, “CCPA Request”) in the subject line, along with the specific right you wish to exercise.

Identity Verification

To protect your Personal Information, we verify your identity before responding to a rights request. Verification typically requires you to confirm two or more data points we already hold about you (for example, your name and the email address or phone number associated with your account or application). For deletion or correction of sensitive records, we may require additional verification, such as a signed declaration under penalty of perjury or, where legally permitted, government-issued identification.

Response Timeline

We will acknowledge receipt of your request within ten (10) business days and respond substantively within forty-five (45) calendar days. If additional time is required due to the complexity or volume of your request, we may extend the response window by an additional forty-five (45) days and will notify you of the extension in writing.

Authorized Agents

You may designate an authorized agent to submit a rights request on your behalf. The agent must provide (1) written permission signed by you authorizing the agent to act on your behalf, and (2) sufficient information for us to verify your identity as described above. We may require you to verify your identity directly with us or confirm to us that you provided the agent permission to submit the request.

6. California Consumer Privacy Rights (CCPA / CPRA)

This section supplements the information in this Privacy Policy and applies to California residents (each, a “Consumer”) whose Personal Information we collect. It is provided to comply with the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act (collectively, the “CCPA”), and applies in addition to the general rights described in Section 5.

Categories of Personal Information We Collect and Disclose

Section 1 above lists the CCPA statutory categories of Personal Information we have collected in the preceding twelve (12) months and the sources of that information. We disclose those same categories to service providers (as defined by the CCPA) for the business purposes described in Section 2 (Disclosures of Personal Information), including hosting, email delivery, SMS delivery, analytics, and applicant tracking.

We do not sell your Personal Information for monetary or other valuable consideration, and we do not share it for cross-context behavioral advertising, as those terms are defined by the CCPA. We have not sold or shared Personal Information in the preceding twelve (12) months. If this ever changes, we will update this Policy and provide a clear “Do Not Sell or Share My Personal Information” link and process before any such sale or sharing begins.

No Sensitive Personal Information Used for Inferring Characteristics

We do not use or disclose sensitive Personal Information (as defined by the CCPA) for purposes other than those permitted under Cal. Civ. Code § 1798.121, and therefore do not offer a separate “Limit the Use of My Sensitive Personal Information” right.

Your California Rights

You have the following rights under the CCPA. All rights listed in Section 5 apply to California residents, including specifically:

Right to Know: to request the specific pieces and categories of Personal Information we have collected, sources, business or commercial purpose, and third parties with whom we have disclosed it (over the preceding 12 months, or a longer period if you request).
Right to Delete: to request deletion of Personal Information we have collected from you, subject to CCPA exceptions (e.g., legal recordkeeping, security, and fraud prevention).
Right to Correct: to request correction of inaccurate Personal Information.
Right to Opt Out of Sale / Sharing: as noted above, we do not sell or share; this right is preserved for you should our practices change.
Right to Limit Use of Sensitive Personal Information: as noted above, our current use is limited to permitted purposes.
Right to Non-Discrimination: we will not deny goods or services, charge different prices, or provide a different level of quality because you exercised a CCPA right.
Right to Portability: to receive a copy of your Personal Information in a portable, readily usable format.

How to Exercise Your California Rights

To submit a request, follow the process described in Section 5 (“How to Submit a Request”). You may also submit a request by email to privacy@aptask.com with “CCPA Request” in the subject line. Verification, response timeline (45 days, extendable to 90), and authorized-agent procedures are described in Section 5.

Notice at Collection

This Privacy Policy, together with any point-of-collection notices provided on forms across the Site, constitutes our Notice at Collection under Cal. Civ. Code § 1798.100(b). The categories, sources, purposes, retention periods, and no-sale declaration set out above apply.

“Shine the Light” (Cal. Civ. Code § 1798.83)

California residents may also request information about disclosures of their Personal Information to third parties for those third parties’ direct marketing purposes. We do not disclose Personal Information to third parties for their direct marketing purposes.

7. Other U.S. State Privacy Rights

If you are a resident of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), Texas (TDPSA), Oregon (OCPA), Delaware (DPDPA), Montana (MCDPA), New Hampshire (NHPA), New Jersey (NJDPA), Iowa (ICDPA), Tennessee (TIPA), or another U.S. state with a comparable consumer privacy law, you have substantially similar rights to those described in Section 5, which may include the right to access, delete, correct, port, and opt out of the sale of Personal Information and targeted advertising, as well as the right to appeal a denial of a request.

As described in Section 6, we do not sell Personal Information or use it for targeted advertising. To exercise any state privacy right, contact us using the details in Section 11 and include the applicable state and the right you wish to exercise in your message.

Appeals

If we decline to act on your request, we will notify you of the reason. Residents of states that provide an appeals right (including VA, CO, CT, OR, DE, MT, NH, NJ, TN, and TX) may appeal our decision by replying to our response email within sixty (60) days. We will respond to the appeal within the timeframe required by applicable law (typically 45–60 days). If the appeal is denied, you may contact your state attorney general to submit a complaint.

8. Use of the Site by Minors

The Site and our services are directed to adults and are not intended for children.

Children Under 13 (COPPA)

We do not knowingly collect Personal Information from children under the age of 13 in violation of the Children’s Online Privacy Protection Act (“COPPA”). If we learn that we have collected Personal Information from a child under 13 without verifiable parental consent, we will delete that information promptly. Parents or guardians who believe we may have such information should contact us at privacy@aptask.com.

Minors Aged 13–15 (CCPA)

We do not knowingly sell or share the Personal Information of California residents under the age of 16, and would not do so without affirmative opt-in consent as required by CCPA § 1798.120(c).

California Minors – Right to Removal

California residents under the age of 18 who are registered users may request removal of content or information they posted on the Site pursuant to Cal. Bus. & Prof. Code § 22581 by contacting privacy@aptask.com.

9. Jurisdiction and Data Transfers

The Site is controlled and operated in the United States. By using the Site, you agree to the processing and storage of your data in the U.S., subject to applicable U.S. laws.

10. Updates to This Privacy Policy

We may revise this Privacy Policy periodically. Changes will be effective upon posting, and the “Effective Date” at the top of this Policy will reflect the latest revision. Material changes affecting your rights will be communicated via a banner on the Site or by other reasonable means. Your continued use of the Site constitutes acceptance of the revised Policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

Privacy Requests: privacy@aptask.com (include “Privacy Request” or “CCPA Request” in the subject line)
General Inquiries: help@aptask.com
Mailing Address: FinTech Consulting LLC dba ApTask, Attn: Privacy Officer, 120 Wood Avenue South, Suite # 300, Iselin, NJ 08830

Privacy Policy

Policy contents