Privacy Policy

This Privacy Policy describes how GigFlow collects, uses, and protects information in connection with the GigFlow service. It works together with our Terms of Service, which govern your use of GigFlow.

1. Information We Collect

We collect the account information you provide when you sign up, including your name, email address, business name, and a hashed version of your password (we never store your password in plain text).

We also store the tenant content you and your customers enter into GigFlow, such as client records, event details, and related business data.

We collect usage and analytics data about how GigFlow is used, via PostHog, to help us understand and improve the product. We use cookies to manage authentication and sessions; we do not use cookies for third-party advertising or tracking.

2. How We Use Your Information

We use the information we collect to operate, maintain, and improve GigFlow, to authenticate your account, to process billing, to provide customer support, and to communicate with you about the Service. We do not sell your information.

3. Subprocessors & Third-Party Services

We use the following subprocessors to operate GigFlow. Each receives only the data necessary to perform its function:

• Vercel — hosting and infrastructure
• Neon — Postgres database storage
• Stripe — payment processing and billing
• Resend — transactional email delivery
• Twilio — SMS messaging, only if and when a tenant configures SMS features
• Google — calendar sync, only for performers or users who explicitly authorize it
• Sentry — error monitoring and crash diagnostics
• PostHog — product analytics and usage tracking

4. Data Retention

We retain your data for as long as your account is active. If you delete your account through Settings → Delete Account, your data and your tenant content are permanently deleted.

5. Your Rights & Choices

You can export all of your data at any time from Settings → Export All Data. You can permanently delete your account and all associated data from Settings → Delete Account. For any other request regarding your data, contact us at hello@gigflow.app.

6. California Privacy Rights

GigFlow does not sell personal information. California residents may exercise their rights to access or delete personal information under the California Consumer Privacy Act (CCPA) through their account settings (Settings → Export All Data or Settings → Delete Account) or by emailing hello@gigflow.app.

7. Children's Privacy

GigFlow is not directed to individuals under the age of 16, and we ask that individuals under 16 not use the Service.

8. Security

We use TLS encryption to protect data in transit, and our database provider, Neon, encrypts data at rest. Each tenant's data is logically isolated so that one tenant cannot access another tenant's data. Accounts are protected by password-based authentication.

9. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through an in-app notice. Continued use of GigFlow after changes take effect constitutes your acceptance of the updated policy.

10. Contact

Questions about this Privacy Policy can be sent to hello@gigflow.app.