Privacy Policy
Effective and last updated 13 August 2026
Information DataM8 handles
Account and WorkOS identity details; contributor profiles and preferences; task answers, timing, revisions, quality and payment records; business account, project and uploaded dataset information; security and operational logs; and support communications.
Job evidence
Before an external job begins, DataM8 shows the exact approved websites and configured evidence types. Depending on that policy, the extension may collect approved-domain URLs, clicks, element identifiers, redacted changes, navigation, sanitized console messages, selection length or sanitized selected text, screenshots, and contributor-started screen recording without microphone audio. Raw keystrokes, clipboard contents, unrelated browsing, camera and microphone audio are not collected.
Contributor control
Website permission is requested only after the contributor accepts the disclosed scope. Contributors can stop or abandon capture, report an incorrectly scoped task, preview and delete screenshots and events before submission, or abandon the task and delete its draft and evidence. Capture ends on submission, abandonment, target-tab closure, assignment expiry, sign-out, extension reload or Chrome restart.
Use and disclosure
DataM8 uses information to authenticate users, allocate and verify work, deliver approved results to the relevant business customer, administer quality and rewards, prevent fraud, provide support, secure the service, and meet legal obligations. Customers receive task outputs and task evidence using contributor aliases rather than unnecessary direct identity information. DataM8 does not sell personal information or use browsing activity for behavioural advertising.
Service providers and overseas processing
DataM8 uses Cloudflare for Workers, D1 and R2; WorkOS for authentication; Chrome and the Chrome Web Store for extension delivery; and Stripe where payment features are activated. Information may be processed in Australia, the United States and other countries where those providers or their disclosed subprocessors operate.
Security and retention
DataM8 uses HTTPS, short-lived access tokens, rotating session handles, scoped endpoints, role controls, private object storage and audit records. External-task evidence has a project retention period from 1 to 365 days, defaulting to 90 days. A daily job deletes expired events, screenshots, recording chunks and drafts from active D1 and R2 storage; abandoned-task evidence is deleted immediately. Other records are retained only as needed to operate the service, fulfil contracts, resolve disputes, prevent fraud, and satisfy accounting, tax or legal duties.
Access, correction, deletion and complaints
Email louis@apparate.com.au to request access, correction, export or deletion, question an automated quality decision, report a privacy concern, or make a complaint. Include the account email and requested action. DataM8 may verify identity and retain records where law, security, fraud prevention, another person's rights or an unresolved dispute requires it. We aim to respond to complaints within 30 days.
Eligibility and changes
DataM8 is for people aged 18 or older who can lawfully enter the applicable contributor or business agreement. Material changes to capture or data use will be disclosed before the new practice begins and reflected in this policy and the Chrome Web Store listing.
This public summary describes the production service. Project-specific notices, customer contracts and data-processing terms may provide additional controls. Australian users may also contact the Office of the Australian Information Commissioner at oaic.gov.au.