Who we are
Rectask is a service for recruitment agencies in Australia and New Zealand. It reads new job ads and shows recruiters the people most likely to be hiring. Rectask is operated by Regna Operations (business ID 3302367-1) ("Rectask", "we", "us").
This policy covers two groups of people: customers, meaning the recruiters and agencies who hold a Rectask account, and business contacts, meaning the people at hiring companies whom Rectask shows to recruiters. Questions go to hello@regnaoperations.com.
If you are a business contact
You may be in Rectask because your employer advertised a job and you look like the person who owns that hire. Here is what that means for you.
| What we hold | At most your name, job title, seniority, employer, work email, work mobile, a link to your public professional profile, and the job ads that linked a recruiter to you. Never home addresses, dates of birth, or anything about your personal life. |
|---|---|
| Where it comes from | Collected by our own systems from public sources: job ads on Seek and LinkedIn, company websites and public professional profiles. Contact details printed in a job ad are shown as printed. |
| Why | So a recruiter can contact you about work: a candidate for a role you are hiring for, or recruitment services. Nothing else. |
| Who sees it | Your name and title are visible to Rectask customers who follow your industry and region. Your work email and mobile are only shown to a customer who has chosen to look them up, unless they were printed in the ad. |
| Your choice | You can ask us to remove you at any time on the remove my information page. You are hidden from every workspace the moment you send the request, and we delete your details once we have confirmed it was you. |
Every customer agrees to use this information only to contact people about work, to honour opt-outs, and never to resell it. We do not sell personal information to data brokers.
If you are a customer
When you use Rectask we hold:
- Account details: your name, work email, company name and a scrambled (hashed) version of your password. We cannot read your password.
- Workspace settings: the industries, regions and preferences you choose in onboarding.
- Your work in the app: statuses, notes, do-not-contact marks and which people you looked up, so the app shows your desk as you left it.
- Billing: your plan, credit balance and Stripe customer reference. Card details are handled by Stripe and never reach our servers.
- Basic logs: request times and errors, kept short-term to keep the service running and secure.
- Account activity: what each user does in the workspace (sign-ins, contact details unlocked, credits used, changes made), with the time, IP address and browser, kept for as long as the account exists and 24 months after, to secure accounts and to show exactly what credits were spent on.
The browser extensions. Customers can install the Rectask Connector, a Chrome extension that sends a lead they choose into their own recruitment CRM. It runs only on our app and on the customer's CRM pages. When the customer clicks Send, it passes that lead's details (name, position, company, the email and mobile they have revealed, LinkedIn, the job ad and the reason) from our app into the CRM's New contact form in their own browser; the customer checks the form and saves it themselves. When they save, it sends the address of the new CRM record back to our app so the lead shows as saved. It keeps the lead in the browser for up to 30 minutes and remembers which CRM address the customer uses. It does not read other pages, record browsing or keystrokes, or send anything to anyone else, and we do not sell this data.
The Rectask: Who's Hiring extension shows a panel on job ads on Seek. When the user opens an ad, it sends that ad's public details (its number, title, advertiser, location, dates and text) to Rectask to look the ad up, and keeps a record of the ad so we can tell when a role is reposted. It reads nothing else from the page and nothing from other websites, and it never reads or stores anything about the person browsing beyond their own Rectask sign-in.
We use this to run the service, bill you, support you and tell you about changes to Rectask. We do not use advertising trackers.
Legal basis
Australia. We handle personal information under the Privacy Act 1988 and the Australian Privacy Principles. Business-contact information is collected by our own systems from public sources, where it is unreasonable or impracticable to collect it from you directly (APP 3.6), and is used for direct marketing of work opportunities with an easy way to opt out (APP 7).
New Zealand. We follow the information privacy principles in the Privacy Act 2020.
European Union and United Kingdom. For business contacts we rely on legitimate interests (GDPR Article 6(1)(f)): helping recruiters reach the people who hire, limited to work details, with a simple right to object. For customers we rely on the contract with you (Article 6(1)(b)) and our legal obligations, for example tax records (Article 6(1)(c)).
Who we share it with
We use a small number of service providers who process information on our behalf, under contracts that limit them to that work:
| Provider | What for |
|---|---|
| Hosting provider | Runs the Rectask servers and database |
| Stripe | Payments, invoices and subscription management |
| Job ad collection | Runs our own systems that read public job ads on Seek and LinkedIn |
| Lookup and verification services | Help match a person to their work email and mobile, and check that an email still exists before anyone pays to see it |
| AI model provider | Reads job ad text and the names and titles of people at the company to suggest who to call. It does not see emails or mobiles, and does not train on this data. |
We will share information if the law requires it. If Rectask is sold or merged, this policy continues to apply to the information we hold.
Where information is stored
Some of our providers are based outside Australia and New Zealand, mainly in the United States and the European Union. When information leaves the country it was collected in, we use providers bound by contract to protect it to the standard of this policy, and for EU and UK information, the European Commission's standard contractual clauses.
How long we keep it
- Business contacts: deleted 12 months after we collect them if they have not been linked to a job ad by then, and otherwise 24 months after their company's last job ad, unless a customer is working with them. A removal request deletes them as soon as it is confirmed.
- Suppression list: when someone asks to be removed we keep a scrambled marker of their email, profile link or mobile so they are never added again. The marker cannot be turned back into the original details.
- Customer accounts: deleted within 90 days of the account closing, except billing records, which we keep for as long as tax law requires.
Security
Passwords are stored as salted scrypt hashes. Connections use HTTPS. Work emails and mobiles are only sent to the browser of a workspace that has looked them up, never in bulk. Access to the database is limited to the people who run Rectask. No system is perfectly secure; if a breach is likely to cause serious harm we will tell the people affected and the regulator, as the law requires.
Your rights
Wherever you live, you can ask what we hold about you, ask us to correct it, or ask us to delete it and stop showing you to recruiters. Use the remove my information page or email hello@regnaoperations.com. We confirm the request came from you before releasing or deleting anything. We answer within 20 working days in New Zealand, within 30 days in Australia, and within one month in the EU and UK, and usually much sooner.
Customers can also see and change most of their information in Settings and Billing.
Children
Rectask is a business tool for adults. We do not knowingly hold information about anyone under 18.
Changes and complaints
If we change this policy we update the date at the top, and tell customers by email when the change matters. If you are unhappy with how we handled your information, tell us first at hello@regnaoperations.com. You can also complain to the Office of the Australian Information Commissioner, the New Zealand Privacy Commissioner, or the data protection authority where you live.