Last updated: 10 September 2026

This notice explains how AoyTasks handles information when you browse the website, operate a publisher network, purchase advertising or use earning activities. For privacy questions or a request about your information, contact contact@aoytasks.com.

This notice describes data handling; using the website is not blanket consent to optional tracking or every form of processing. The Terms & Conditions separately explain the rules for accounts, rewards and advertising.

1. Information we handle

  • Account and profile information: account identifiers, name or username, email address where provided, role, verification status, profile choices and account settings. Partner accounts use password credentials; passwords are stored as hashes. Earner access can use a provider-linked identity and browser credentials instead of a conventional email login.
  • Wallet and payment information: linked wallet email or account identifier, wallet addresses, selected assets and networks, balances, revenue shares, deposit or purchase references, payout details, fees and provider transaction responses. We do not need a wallet seed phrase or private key.
  • Activity and reward records: publisher-network selections and attributions, activities opened, viewing progress, completion and verification status, reward amounts, reversals, faucet claim and roll records, advertising purchases and campaign-delivery records.
  • Device and security information: IP address, IP-derived country and proxy-risk information, browser/user-agent information, browser identifiers, login and activity timestamps, session information, CAPTCHA checks and anti-abuse signals. Some identifiers are stored as hashes or tokens. This is not a claim that we read your personal files or unrelated browsing history.
  • Telegram and authentication information: when you connect Telegram, the Telegram user and chat identifiers, username where available, verification state, trusted-device records and notification preference. We also retain the verification messages and delivery records used by our bot. Two-factor authentication uses a verification secret and related verification state.
  • Communications: support emails, information you send when reporting an issue, account notices and notification delivery or read status.

2. Where information comes from

Information comes from you, from your browser while you use AoyTasks, and from connected publishers, identity or wallet services and activity providers. Providers return records such as whether an activity was approved, the reward amount, a payment reference or a reversal. IP-information services may return approximate location and proxy-risk results.

When you visit an advertiser, complete a survey or use an external offerwall, that service may collect additional information directly. Its own privacy notice explains that collection. AoyTasks does not receive every answer or every item of information you submit to an external provider.

3. Why we use information

We use account, browser and verification information to give you access, remember the selected network and protect accounts. Activity and provider records let us validate completions, calculate network shares, show balances and histories, reconcile payments and investigate missing rewards or chargebacks. Campaign and payment records let us process advertising purchases and track delivery.

Security information helps detect duplicate identities, automated activity, invalid locations, unauthorised access and other misuse. Communications and notification records support account verification, service notices and responses to your requests. Records may also be used to meet applicable legal obligations and establish or respond to disputes.

Where data-protection law requires a lawful basis, processing necessary to provide a requested account, activity or payment relies on performing the relevant service agreement; fraud prevention, service security and handling disputes may rely on legitimate interests, subject to your rights; legally required recordkeeping relies on the relevant legal obligation. Optional processing that requires consent must rely on that consent, which can be withdrawn. The applicable basis depends on the specific purpose and law.

4. Cookies and browser storage

AoyTasks uses cookies or similar browser storage for sessions, request security, browser-based earner access, trusted-device verification and interface preferences such as the theme. Clearing or blocking these can sign you out, remove a trusted-device state, or prevent a viewing session from being verified. Browser-linked earners should follow the available account-recovery or device-verification flow before clearing access data.

Embedded advertisements, offerwalls, external scripts and their destinations can receive your IP address and browser information and may use their own cookies or identifiers for delivery, measurement and fraud prevention. This can happen when embedded content loads, even without clicking an advertisement. AoyTasks currently uses third-party resources on some pages; this notice does not imply that all such resources wait for an on-site consent preference.

You can use browser controls to inspect, block or remove cookies and storage. Provider controls apply to their own services. Contact us about additional choices or rights available where you live. Browser settings and this notice do not replace consent where the law requires it.

5. Who receives information

  • Publishers: the network associated with your activity can receive the account identifiers, activity, attribution and financial reporting needed to operate that network and review its revenue. This does not give a publisher your password or two-factor secret.
  • Activity and advertising providers: enabled integrations, which may include AoyWallet, BitcoTasks, CPX Research, Gemiwall, Offerwall.me and shortlink services, receive the identifiers and request information needed to deliver, attribute and verify their activities. Depending on the integration, this can include a provider-specific account token, IP address, country, browser information or payment-linked identifier. Providers can also receive information directly through embedded content or external visits.
  • AoyWallet and payment providers: account or wallet identifiers, recipient details, selected asset and network, amounts and transaction references needed to validate deposits, purchases or payouts. An external wallet account remains subject to that provider's own terms and privacy notice.
  • Telegram: bot communications and chat identifiers used to verify a device and deliver enabled notifications. Connecting our bot does not give AoyTasks general access to your private Telegram conversations.
  • Operational providers: hosting, email delivery, content delivery, CAPTCHA, IP-risk and security services receive information needed for their respective functions. Authorised administrators may access relevant records for support, reconciliation and security.
  • Legal recipients: information may be disclosed in response to a valid legal requirement or where necessary to establish, exercise or defend legal rights.

Provider availability can change. Review the identity and privacy notice of a provider before using its offer or payment flow. The list above does not mean every provider receives every category of your information.

6. International processing

Hosting, communication, advertising and payment providers may process information in countries other than yours. Their locations and data-protection rules can differ. Contact us for information about the recipients and transfer arrangements relevant to your account. Any safeguards or additional requirements imposed by applicable law still apply.

7. How long information is kept

There is no single retention period for every record. Account and network data are kept while needed to provide the account or resolve closure requests. Activity, reward, payment and advertising records may need to remain available after an activity or account ends to reconcile balances, handle provider reversals, investigate fraud, resolve disputes and meet applicable recordkeeping obligations.

Session and verification credentials have their own validity periods; expiry of a credential does not necessarily delete its audit record. Restricted backups can retain earlier copies after live information is removed. A deletion request is reviewed against the purpose of the record, outstanding transactions, applicable requirements and backup handling. Ask us about the retention applicable to a particular record or request its deletion where appropriate.

8. Your choices and requests

Depending on the law that applies to you, you may have rights to access or obtain a copy of personal information, correct it, request deletion, restrict or object to processing, receive portable data, withdraw consent for processing based on consent, or complain to the relevant data-protection authority. These rights can have exceptions, including necessary transaction, fraud-prevention or legal records.

Use account settings for changes they support, or email contact@aoytasks.com. Tell us the account or provider-linked identity concerned and what you want to request. We may ask for proportionate proof that you control it before releasing or changing data. Do not send passwords, authentication codes, seed phrases or private keys. We will handle requests within the timeframe required by the applicable law.

You can change available Telegram notification preferences in the service. Verification requirements are separate from optional notifications. Account closure does not automatically erase records held independently by AoyWallet, Telegram, publishers or activity providers; requests concerning their independent services should also be directed to them.

9. Security and automated checks

Measures used by AoyTasks include hashed passwords, protected session credentials and access controls. You can use available two-factor authentication and trusted-device controls. No system can guarantee absolute security; report a suspected incident to our contact address.

Automated checks may reject or pause access, task credit or payout requests because of verification, device, location, duplication or provider signals. If you believe a result is wrong, request a review with the relevant activity or transaction reference. These checks do not read the content of an unrelated browser tab.

10. Children, updates and contact

AoyTasks is not intended for children under 13. Individual activities and providers may set a higher minimum age. If you believe a child has supplied information contrary to these requirements, contact us so the account and appropriate removal steps can be reviewed.

We update this notice when our practices change. The date above identifies this version. Material changes will be highlighted on the website, and further notice or consent will be provided where required by law.

Privacy and account-data contact: contact@aoytasks.com.