Privacy Policy

Updated October 31, 2026.

This update clarifies account acceptance records, profile audiences, work records, service providers, and your choices. It does not publish a private profile or enroll you in optional marketing. Previous privacy policy.

This Privacy Policy describes how Valish Studios, LLC ("Company," "we," "us," or "our") collects, uses, and shares information about you when you use our website gigit.org and related services (collectively, the "Services").

1. Information We Collect

Information You Provide

We collect information you provide directly to us, including:

Account Information: When you create an account, we collect your verified email address and the name and area you provide. Sign-in uses an email link; the current application does not ask you for a password.
Profile Information: We collect information you add to your profile, including your profile photo, skills, occupations, work history, certifications, introduction, and work location preferences.
Portfolio Content: Photos and descriptions of your work that you upload to showcase your skills.
Gig Information: Details about gigs you post, including job descriptions, requirements, compensation, and location.
Communications: Messages you send through our platform, including applications and direct messages.
Payment Information: During the pilot, payments take place directly between participants. We store participant reports of amounts sent or received, not bank settlement or payment card details.
Work and Trust Records: Requests, offers, accepted terms and revisions, completion evidence, reviews, references you have permission to share, credential claims, private supporting documents, reports, and support correspondence.
Policy Choices: When you confirm the policies after signing in, we record your account identifier, the policy versions and links, confirmation wording, and time. We separately record sharing settings and notification preferences. We do not require a birth date or identity document merely to confirm that you are at least 18.

Information We Collect Automatically

During the pilot, we record which setup surfaces are opened and whether selected sign-in and work-action requests succeed or fail. These operational observations help us find problems; they do not establish why someone stopped using the service. The observations contain account identifiers, action names, times and error categories, not message bodies, work descriptions, exact worksites or invitation tokens. Sign-in observations use a keyed email fingerprint rather than the email address. Observation records are removed after 90 days by the scheduled cleanup; committed work and account audit records are retained separately as described below. Only authorized administrators can read pilot diagnostics.

When you use our Services, we automatically collect:

Technical Information: Our hosting and service providers may process IP addresses, browser and device information, request times, requested URLs, and errors to deliver and secure the service. Gigit’s application observations are described above; we do not use an advertising identifier to build a cross-site advertising profile.
Location Information: The town, service area, and worksite information you provide, including coordinates derived from an entered place when needed for nearby results. This is not continuous background tracking of your device.
Usage Information: Information about how you interact with our Services, including features used and actions taken.

Cookies and browser storage

We use session cookies to keep you signed in and browser storage to preserve drafts and selected preferences. These are used for the service’s functionality. Clearing site data or blocking storage can sign you out or remove an unsaved draft. Drafts stored on a shared device may be accessible to another person using that browser; use the clear-draft control when appropriate. We do not currently use third-party advertising cookies.

2. How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services
Match workers with relevant gig opportunities based on skills and location
Maintain gig agreements, payment reports, and related notifications
Send you technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and customer service requests
Communicate about promotions, upcoming events, and other news about the Services
Monitor and analyze trends, usage, and activities in connection with our Services
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Personalize and improve your experience on the Services

3. How We Share Your Information

We may share information about you as follows:

With Other Users: Sharing a work profile with signed-in members and publishing a portfolio on the open web are separate choices. A web portfolio is visible to anyone with its link and may appear in search engines only after you explicitly publish it. Existing member-sharing choices do not automatically publish a web portfolio. When you apply for a gig, the hiring party can see your application and relevant profile. Exact worksites and private attachments are restricted to authorized participants. Gig view counts are shown in aggregate; individual viewer identities are not published.
With Service Providers: We share information with vendors, consultants, and other service providers who need access to perform services for us. Our current service uses Vercel for hosting, Supabase for authentication, database and private file storage, Resend for application email, and OpenAI for optional AI assistance as described below. Providers process the data needed for their function; a private upload is not automatically made public because it is held by a storage provider.
For Legal Reasons: We may disclose information if we believe it is necessary to comply with applicable law, regulation, legal process, or governmental request.
Business Transfers: In connection with any merger, sale, or transfer of company assets, your information may be transferred.
With Your Consent: We may share information with your consent or at your direction.

We do not sell personal information or share it for cross-context behavioral advertising. A hiring party receives information relevant to an application or work relationship, not unrestricted access to your account. School and community participation does not itself authorize access to a participant’s private records. Any future partner reporting or new optional data use will be explained before it begins, with consent where required.

AI-assisted work descriptions

When you use AI assistance to describe work, we send the text you submit, the current draft, and recent briefing conversation to OpenAI to suggest structured details. Separate private worksite and contact fields are not included. Information you type into the description itself is included, so use an approximate area instead of a private address. You can edit a draft directly without asking the AI. Its suggestions do not publish a gig, send a request, or book work; those actions require your review and confirmation.

We request that OpenAI not store the response as a retrievable API conversation. This is not a promise of zero provider retention; OpenAI handles service and abuse-monitoring data under its API data controls. Our AI usage records contain account or hashed quota identifiers, token counts, estimated cost, timing, and error categories, without raw briefing text. Drafts and briefing history may be saved in this browser for up to seven days to help you resume. Sending a request or publishing saves the relevant work details as an application record.

Building a profile before signup

Skills, service areas, work history, and selected work photos can be kept as a draft in your browser before you create an account. Drafts expire after seven days and are removed when you next use the profile builder, clear the draft, or finish saving it. Enter the code from your verification email in the browser holding your draft; reading the email on another device does not transfer the draft there. Work photos are uploaded to your private account storage only after you sign in and save your profile.

If you choose “Read my résumé,” we send that file to OpenAI to suggest skills, occupations, and work history. Review the suggestions before adding them to your draft. Gigit does not retain the original résumé or publish it. We request non-stored API responses, subject to the provider data controls described above. Import is optional, and does not verify any experience or credential. Your profile and work examples are published only according to the sharing choices you make.

4. Your Privacy Choices

Account Information

You can update your account information at any time by logging into your account and visiting Your profile. You may also request deletion of your account, though some information may be retained as required by law or for legitimate business purposes described below. Send deletion, correction, or access requests to privacy@gigit.org. We may need to verify that the request is yours without collecting more information than reasonably necessary.

Profile Visibility

You can publish or hide your work profile, business profile, and individual work examples. Turning off web publication removes anonymous access through Gigit; separately shared member access remains controlled by your member-sharing setting. Copies already saved by visitors or cached by search engines may remain outside our control. Exact worksite and private contact details are restricted to the participants authorized for the relevant workflow and authorized operators when needed for support or safety. Credential documents are private; public checks show their source and date. Other participants can retain messages and work records they legitimately received; hiding your profile does not recall those records.

Communications

You can opt out of receiving promotional emails by following the unsubscribe instructions in those messages. You may also adjust your notification preferences in your account settings. Optional alerts are separate from essential sign-in, security, and service communications. Policy acceptance does not subscribe you to promotional email.

Data Download

Your profile includes a download of the profile data supported by the export feature. It is not a promise that every message, operational record, or provider log is included. Contact us for an access request covering other information about you.

Soft-launch operations

Authorized operators use a restricted activity dashboard to monitor saved account and work actions. Founder email alerts are currently limited to verified account activations and gig publications. These alerts contain limited account and gig context and omit private message bodies, exact worksites, and credential documents. Authorized support staff may access relevant private records when needed to resolve a report, investigate abuse, or operate the service. Operational alerts are separate from your optional email subscriptions.

5. Data Security

We take reasonable measures to help protect information about you from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. All data is transmitted over encrypted connections (HTTPS), and we use industry-standard security practices for data storage. No service can guarantee absolute security. Please avoid including unnecessary financial, identity, health, or third-party personal information in messages, résumés, and photos.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. We may retain certain information as required by law or for legitimate business purposes, such as to resolve disputes, enforce our agreements, or support business operations.

Retention depends on the record: browser drafts expire after seven days and are cleared when the relevant draft tool next runs; pilot diagnostics are scheduled for removal after 90 days; account, agreement, payment-report, support, and acceptance records may need to remain longer for service delivery, security, disputes, or legal obligations. We restrict retained records and remove or de-identify them when no longer needed for those purposes. Backup copies may persist until the applicable backup cycle expires. Deleting an account does not automatically erase the other party’s work history or copies outside Gigit.

7. Children's Privacy

Our Services are not directed to children under 18, and we do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete that information.

8. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services prior to the changes becoming effective. We encourage you to review this Privacy Policy periodically.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: privacy@gigit.org
Mail: Valish Studios, LLC, 649 Main St Suite 324, Stroudsburg, PA 18360

10. Privacy requests and regional rights

You may contact us to request access, correction, or deletion of your personal information regardless of your location. Depending on your residence and which laws apply to Gigit, you may have additional rights, including portability, restriction, objection, or appeal. We honor applicable rights and do not penalize you for exercising them. For California residents, where the California Consumer Privacy Act applies, these include the right to:

Know what personal information we collect, use, and share
Delete your personal information
Correct inaccurate personal information
Opt out of sale or sharing for cross-context behavioral advertising (we do neither)
Non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at privacy@gigit.org.