Back to Home

Privacy Policy

Last updated: May 7, 2026

1. Introduction

Welcome to Highzcore (formerly SubTask.ng). We are committed to protecting your privacy and handling your data in an open and transparent manner. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform.

Highzcore is a two-sided marketplace connecting YouTube content creators with workers who help them reach subscriber goals. By using our service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Google OAuth Data

When you sign up using Google OAuth, we collect:

  • Email Address: Used for account creation, login, and sending transactional notifications
  • Profile Information: Your name and profile picture for identification and personalization
  • Google Account ID: A unique identifier to link your Highzcore account with Google

2.2 YouTube Data

Important: We access minimal YouTube data

  • What we access: YouTube subscription status (read-only)
  • Why we access it: To verify that workers have subscribed to creator channels
  • When we access it: Only when a worker marks a task as complete
  • What we check: "Is this user subscribed to channel X?" (Yes/No)

What we DO NOT access: Watch history, liked videos, playlists, comments, video uploads, analytics, private information, or any other YouTube data beyond subscription status.

2.3 Financial Information

  • Bank Details: For workers requesting withdrawals (bank name, account number, account name)
  • Transaction Records: Earnings, withdrawals, and payment history
  • Wallet Balance: Your current earnings balance on the platform

2.4 Platform Usage Data

  • Tasks completed and verification status
  • Channel subscription orders (for creators)
  • Messages exchanged with platform administrators
  • Login timestamps and session data

3. How We Use Your Information

3.1 Account Management

  • Create and maintain your account
  • Authenticate your identity when you log in
  • Display your profile information in the dashboard
  • Communicate with you about your account

3.2 Task Verification

  • Verify that workers have completed subscription tasks
  • Prevent fraud and ensure creators receive real subscribers
  • Credit worker wallets after successful verification
  • Maintain platform integrity and trust

3.3 Payment Processing

  • Process withdrawal requests from workers
  • Transfer earnings to your bank account
  • Maintain transaction records for accounting
  • Comply with financial regulations

3.4 Communication

  • Send transactional emails (payment confirmations, task completions)
  • Notify you of important platform updates
  • Respond to support requests
  • Facilitate messaging between users and administrators

4. How We Store Your Information

4.1 Data Storage

All user data is stored securely in Supabase (PostgreSQL database) with industry-standard encryption:

  • Data is encrypted at rest and in transit (SSL/TLS)
  • OAuth tokens are stored encrypted
  • Bank details are encrypted before storage
  • Regular security updates and monitoring

4.2 Data Retention

  • Account Data: Retained while your account is active
  • Transaction Records: Retained for 7 years (regulatory requirement)
  • YouTube Verification Results: Only subscription status (yes/no) is stored, not raw YouTube data
  • OAuth Tokens: Automatically refreshed and can be revoked anytime

5. Third-Party Services

5.1 Google APIs

We use Google OAuth and YouTube Data API v3 for authentication and subscription verification. When you use our service, you're also subject to:

5.2 Supabase

We use Supabase for database hosting and authentication infrastructure. Supabase Privacy Policy: https://supabase.com/privacy

5.3 Vercel

Our platform is hosted on Vercel. Vercel Privacy Policy: https://vercel.com/legal/privacy-policy

6. Your Rights and Controls

6.1 Access Your Data

You can view your personal information anytime by logging into your dashboard.

6.2 Revoke YouTube Access

You can revoke Highzcore's access to your YouTube data at any time:

Note: Revoking access will prevent you from completing tasks, but won't delete your account or earnings.

6.3 Delete Your Account

To request account deletion, contact us at privacy@highzcore.com

We will:

  • Delete your personal information within 30 days
  • Retain transaction records for regulatory compliance (7 years)
  • Process any pending withdrawals before deletion

6.4 Opt-Out of Emails

You can unsubscribe from marketing emails (if any) by clicking the unsubscribe link. Transactional emails (payment confirmations, etc.) cannot be disabled as they're essential for service operation.

7. Data Sharing

We do NOT sell your personal information to third parties.

We may share data only in these cases:

  • With Google: When verifying subscriptions via YouTube API (minimal data)
  • With Banks: Your bank details to process withdrawals
  • Legal Requirements: If required by Nigerian law or valid legal process
  • Business Transfer: If Highzcore is acquired, data may transfer to new owner (you'll be notified)

8. Security

We implement industry-standard security measures:

  • SSL/TLS encryption for all data transmission
  • Encrypted storage for sensitive data
  • Regular security audits and updates
  • Secure authentication via Supabase Auth
  • Role-based access controls

However, no method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

9. Children's Privacy

Highzcore is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Compliance

Highzcore complies with:

  • Nigerian Data Protection Regulation (NDPR): We follow NDPR guidelines for data processing
  • GDPR Principles: We respect international privacy best practices
  • YouTube API Services Terms: We comply with YouTube's API policies

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Email notification to your registered address
  • Prominent notice on the platform
  • Updating the "Last updated" date at the top

Continued use of Highzcore after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related questions or requests:

Summary: We only collect data necessary to operate the platform. We use YouTube API solely to verify subscriptions (nothing else). Your data is encrypted and secure. You have full control and can revoke access anytime. We never sell your information.