_Privacy Policy

GigOnUp (“we”, “us”, “our”) operates the online talent marketplace at gigonup.com. This policy explains how we collect, use, share, and protect your personal information when you use our platform.

Questions or concerns? Contact us at support@gigonup.com.

• Account information: Email address, password (hashed — we never store it in plaintext), full name, and profile photo when you create an account.
• Profile information: For Talent: biography, skills, instruments, hourly rate, portfolio photos, portfolio video URL, genres, and location (city/state). This information is publicly visible on your talent profile.
• Booking information: Event dates, booking details, messages, and booking status throughout the lifecycle of a gig.
• Payment information: We do not store card numbers or full payment details. Payments are processed by Stripe. We receive transaction confirmations and payout status from Stripe.
• Stripe Connect data: For Talent who connect a Stripe account, we receive and store your Stripe Connect account ID to facilitate payouts.
• Communications: If you contact us via email, we retain that correspondence to resolve your issue.
• Usage data: Server logs may include IP addresses, browser type, pages visited, and referring URLs. We use this for security monitoring and platform diagnostics.
• Consent record: We record the timestamp at which you accepted these terms and our Terms of Service.

• To create and maintain your account.
• To facilitate bookings between Clients and Talent.
• To process payments and remit payouts via Stripe Connect.
• To send transactional emails: booking confirmations, status updates, payout notifications, and vetting decisions.
• To comply with our obligations as a Stripe Connect platform, including fraud prevention and anti-money-laundering checks.
• To enforce our Terms of Service and investigate reported abuse.
• To improve the platform through aggregate, anonymised analytics.

We do not sell your personal information to third parties. Ever.

If you are located in the European Economic Area (EEA), we process your data under the following legal bases:

• Contract performance: Processing your account data and payments to fulfil our service.
• Legitimate interests: Security monitoring, fraud prevention, and platform improvement.
• Legal obligation: Compliance with Stripe’s Know Your Customer (KYC) requirements and applicable financial regulations.
• Consent: Where we have asked for and received your explicit consent (e.g. marketing communications, if any).

• Stripe: Payment processing, Connect account management, fraud screening. Governed by Stripe’s Privacy Policy.
• Supabase: Secure database and authentication infrastructure. Data is encrypted at rest and in transit.
• Resend: Transactional email delivery. Only your email address and the content of the email is shared.
• Vercel: Cloud hosting. Processes request data to serve the application.
• Legal disclosure: We may disclose information if required by law, court order, or government authority, or to protect the rights and safety of GigOnUp, our users, or others.
• Business transfer: In the event of a merger, acquisition, or sale of assets, user data may be transferred. You will be notified in advance.

When your Talent account is approved, your profile — including your name, bio, skills, genres, location, photos, and portfolio video — is publicly visible to anyone visiting the platform, including unauthenticated visitors. Your email address is never publicly displayed.

• Account data: Retained for as long as your account is active. Deleting your account removes your profile; booking records are retained for 7 years to satisfy financial record-keeping requirements.
• Payment records: Retained for 7 years in compliance with financial regulations.
• Server logs: Retained for up to 90 days for security purposes.

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your profile settings page.
• Delete your account and associated data (subject to financial retention requirements above).
• Restrict or object to certain types of processing.
• Data portability — a machine-readable copy of your data on request.
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, email support@gigonup.com with “Privacy Request” in the subject line. We will respond within 30 days.

California residents have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at support@gigonup.com.

We use only functionally necessary cookies — specifically, a secure session cookie managed by Supabase Auth to keep you logged in. We do not use advertising cookies, fingerprinting, or third-party tracking pixels.

All data is transmitted over HTTPS. Passwords are hashed by Supabase Auth and are never stored in plaintext. Payment data is handled entirely by Stripe and never touches our servers. We enforce Row-Level Security on our database so that users can only access their own records.

Despite our best efforts, no system is perfectly secure. If you discover a security vulnerability, please disclose it responsibly to support@gigonup.com before public disclosure.

GigOnUp is not directed at children under 18. We do not knowingly collect personal information from anyone under 18. If we become aware that a minor has provided us data, we will delete it promptly.

We may update this policy from time to time. Material changes will be communicated via email or an in-app notice at least 14 days before they take effect. The effective date at the top of this page will always reflect the latest version.

For privacy-related questions, requests, or complaints: support@gigonup.com.