Privacy Policy
Last Updated: May 5th, 2026
1.1. Introduction
Delegatoo (“we,” “us,” or “our”) is a product and brand operated by Movevirtual LLC, a company registered in Delaware. Delegatoo is a “doing business as” (DBA) name of Movevirtual. Movevirtual (doing business as Delegatoo) operates the platform and services available at delegatoo.com and app.delegatoo.com. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and your rights when you use our services. By using Delegatoo, you agree to the practices described in this Privacy Policy.
1.1.1 Data Controller
For the purposes of applicable data protection laws, including where relevant the GDPR and UK GDPR, Movevirtual LLC is the data controller responsible for your personal information. This means Movevirtual determines how and why your personal data is collected, used, and protected in connection with the Delegatoo platform.
1.2. Information We Collect
We collect information in two ways: information you give us directly, and information generated automatically when you use the platform.
1.2.1. Information You Provide
Account registration:
Full name and email address
Profile picture
Account type (Client or Virtual Assistant)
Virtual Assistant profile and application:
First and last name, pronouns, location, and timezone(s)
Professional bio, years of experience, industries, and top skills
Tools, software, and AI tools you use
Weekly availability, preferred working hours, and hourly rate range
Languages spoken and English proficiency level
Client-facing experience details
Resume link, portfolio link, LinkedIn profile URL, and video introduction link
Screening question responses (e.g., what makes you great, problem-solving examples)
How you heard about Delegatoo
Consent to promotional content
Client profile and onboarding:
Company name and role/title
Reasons for using Delegatoo and tasks to delegate
Tools and platforms you require VAs to know
Timezone preference, expected weekly hours, and comfortable hourly rate
VA preferences and hiring timeline
Job posts:
Job title, description, hourly rate range, commitment type, work location
Required skills and preferred tools
Your name and email as associated with the post
Applications:
Cover message, proposed rate, availability, hours per week
Relevant skills and work sample URLs
Messages and conversations:
Full content of messages exchanged between Clients and VAs
File attachments and their metadata
Message edit history
Invoices:
Invoice number, line item descriptions, quantities, unit prices, and totals
Currency, due date, notes, and status
PDF copies of invoices stored in cloud storage
Reviews:
Star rating and written review content
Support tickets:
Your issue description and any information you include in your support request
Waitlist submissions:
Name, email, company name, role, and hiring preferences
1.2.2. Information Collected Automatically
Account and session data:
IP address and browser user agent (collected per session for security purposes)
Login timestamps, last-seen timestamps, and session duration
Daily activity dates (used to calculate platform milestones)
Usage and behavioral data:
Pages you visit, actions you take, and features you use — collected via PostHog (see Section 6)
Job views, saved jobs, and favorited VA profiles
Push notification credentials:
If you opt in to push notifications, we store your browser push endpoint URL, encryption keys (
p256dhandauth), and device user agent. This data is used solely to deliver notifications and is removed when you unsubscribe.
Uploaded files:
Files you upload (e.g., profile pictures, invoice PDFs) are stored on Cloudflare R2, our cloud storage provider. Files are referenced by a storage key tied to your account.
1.3. How We Use Your Information
We use the information we collect to:
Create and manage your account
Match Clients with suitable Virtual Assistants
Enable messaging, invoicing, and job applications between users
Send transactional emails (e.g., account verification, OTP codes, invoice notifications, onboarding emails)
Send push notifications about messages, invoices, applications, and jobs (only if you opt in)
Improve platform features and user experience
Process payments and manage subscriptions through third-party payment providers such as Stripe, on behalf of Movevirtual (doing business as Delegatoo)
Categorize VA skills using AI-assisted matching (see Section 7)
Detect and prevent fraud, abuse, and policy violations
Respond to support requests
Comply with legal obligations
1.4. Legal Basis for Processing (EU/UK Users)
If you are located in the European Union or United Kingdom, we process your personal data under the following legal bases:
Contract performance — to provide you with the services you signed up for
Legitimate interests — to operate, secure, and improve the platform, and to send relevant platform notifications
Consent — for push notifications and analytics tracking (you may withdraw consent at any time)
Legal obligation — where we are required to process data by law
1.5. Data Sharing
We do not sell your personal information.
We share your information only in these circumstances:
Between platform users: When a Client views a VA profile, or when a VA applies to a job, relevant profile information is shared with the other party as part of the normal operation of the marketplace.
Movevirtual (doing business as Delegatoo) works with a limited number of trusted third-party service providers to operate the platform, including hosting, analytics, communications, and payments. These providers are given access only to the information necessary to perform their functions and are contractually obligated to protect your data. A list of key sub-processors may be provided upon request or updated within this policy.
| Provider | Purpose |
|---|---|
| Stripe | Subscription billing and payment processing |
| PostHog | Product analytics and user behavior tracking |
| Cloudflare R2 | File and media storage (profile pictures, invoice PDFs) |
| Ably | Real-time messaging and presence |
| Loops | Transactional and marketing email delivery |
| Upstash / QStash | Scheduled background jobs and notifications |
| OpenAI | AI-assisted skill categorization (see Section 7) |
| Slack | Internal team notifications (admin use only) |
Each provider processes data only as necessary for their stated purpose and under their own privacy and security commitments.
Law enforcement: We may disclose information if required by law, court order, or governmental authority, or where necessary to protect the rights and safety of our users.
1.6. Cookies and Analytics
We use cookies and similar technologies to operate and improve the platform.
Essential cookies are required for authentication and security. You cannot opt out of these without losing access to your account.
Analytics tracking: We use PostHog to collect usage data such as page views, clicks, and feature interactions. This helps us understand how the platform is used and where to improve. PostHog may set cookies or use local storage for this purpose.
If you are located in the EU or UK, we will request your consent before enabling analytics tracking. You can withdraw consent at any time through your browser settings or by contacting us.
You can control cookie settings through your browser. Note that disabling all cookies may affect platform functionality.
1.7. AI-Assisted Processing
We use OpenAI’s API (gpt-4o-mini) to automatically categorize Virtual Assistant skills into predefined categories. When a VA submits their skills (e.g., “React.js,” “Google Ads”), these are processed by OpenAI to assign them to a category (e.g., “Frontend Development,” “Marketing”) with a confidence score.
This is used to improve search and filtering for Clients and does not produce any decisions that significantly affect you. VA skills are not used to train OpenAI models under OpenAI’s enterprise API policies.
1.8. Data Retention
We retain your personal information for as long as your account is active. Specific retention rules:
Account data: Retained until you delete your account.
Messages: Retained until you delete your account. Soft-deleted messages (deleted by the sender) are retained for moderation purposes and permanently removed on account deletion.
Invoices: Retained for a minimum of 7 years from the invoice date to comply with applicable financial record-keeping requirements, even after account deletion.
Session data: Retained for 90 days after each session ends.
Push notification credentials: Removed immediately when you unsubscribe or when your account is deleted.
Support tickets: Retained for 2 years after resolution.
You may request deletion of your account and associated data at any time by contacting us at contact@delegatoo.com. We will process your request within 30 days, subject to legal retention obligations noted above.
1.9. Security
We implement reasonable technical and organizational measures to protect your personal information, including:
Encrypted data transmission (HTTPS/TLS)
Signed webhook verification for payment events
Session-based authentication with email verification and OTP
Security headers including
X-Frame-Options,X-Content-Type-Options, andReferrer-PolicyMessage content sanitization to prevent cross-site scripting
No method of transmission over the internet is completely secure. We cannot guarantee absolute security, and you use the platform at your own risk.
1.10. Data Controller
For the purposes of applicable data protection laws, including where relevant the GDPR and UK GDPR, Movevirtual [Full Legal Entity Name] is the data controller responsible for your personal information. This means Movevirtual determines how and why your personal data is collected, used, and protected in connection with the Delegatoo platform.
1.11. International Transfers
Delegatoo is operated from the United States. If you access the platform from outside the US — including from the EU or UK — your information will be transferred to and processed in the United States. We rely on appropriate safeguards for such transfers, including Standard Contractual Clauses where applicable.
1.12. Your Rights
Depending on your location, you may have the following rights:
Access: Request a copy of the personal data we hold about you
Correction: Request correction of inaccurate or incomplete data
Deletion: Request deletion of your data (subject to retention obligations)
Portability: Request your data in a structured, machine-readable format
Objection / restriction: Object to certain processing or ask us to restrict it
Withdraw consent: For analytics and push notifications, at any time
To exercise any of these rights, contact us at contact@delegatoo.com. We will respond within 30 days.
If you are in the EU or UK and are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
1.13. Children’s Privacy
Delegatoo is not intended for users under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has registered on our platform, please contact us and we will delete the account.
1.14. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and, where appropriate, by email. The “Last Updated” date at the top will always reflect the most recent version. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.
1.15. Contact Us
Delegatoo
If you have any questions about this Privacy Policy or how your information is handled, you can contact us at:
Movevirtual LLC
DBA: Delegatoo
Email: contact@delegatoo.com
Website: www.delegatoo.com