Privacy Policy

We collect the following types of information when you use Gigschat:

Account Information
When you create an account, we collect your email address and authentication credentials. If you sign up using a third-party provider (such as Google), we receive your name and email address from that provider.

Resume and Profile Data
When you upload your resume or manually enter profile information, we collect the professional data contained within it. This includes your work history, skills, certifications, education, contact information, and any other details present in your resume. You may also provide additional profile information such as preferred job roles, locations, salary expectations, and career preferences.

Chat and Interaction Data
When you interact with Gigschat's AI agent, we collect the messages you send, the searches you perform, and the actions you take within the application. This includes job search queries, resume tailoring requests, interview preparation sessions, and pipeline management activities.

Job Pipeline Data
We store information about the jobs you save, track, and apply to through Gigschat, including your application status, notes, and any documents generated for specific roles (tailored resumes, cover letters, outreach messages, and interview briefs).

Usage Data
We automatically collect certain technical information when you visit our site, including your IP address, browser type, device type, operating system, pages visited, time spent on pages, and referring URLs. This data is collected through analytics tools to help us understand how our service is used and to improve your experience.

Cookies
We use essential cookies to maintain your authenticated session and remember your preferences. We also use analytics cookies through our analytics providers to understand usage patterns. You can control cookie preferences through your browser settings.

We use your information for the following purposes:

To provide and operate the service. Your resume and profile data are used to match you with relevant job listings, tailor your resume for specific roles, generate cover letters and outreach messages, prepare interview briefs, and power all AI-driven features of the platform.

To process your data through AI. Your resume content, profile information, and chat messages are sent to third-party AI providers (see Section 4) to generate responses, tailor documents, and provide career guidance. This processing is essential to the core functionality of Gigschat.

To improve our service. We use aggregated and anonymized usage data to understand how features are used, identify areas for improvement, fix bugs, and develop new features. We do not use your personal resume content for training AI models.

To communicate with you. We may use your email address to send you important service updates, security notifications, and account-related communications. We will not send marketing emails without your explicit consent.

To ensure security and prevent abuse. We use technical data to detect and prevent unauthorized access, fraud, and other security threats to our platform and users.

Where your data is stored. Your data is stored on secure cloud infrastructure provided by Supabase and Vercel, with servers located in the United States. Data is encrypted in transit using TLS/SSL and at rest using AES-256 encryption.

How we protect your data. We implement industry-standard security measures to protect your personal information, including:

• Authenticated access with secure session management
• Row-level security ensuring users can only access their own data
• Rate limiting to prevent abuse
• Regular security audits and vulnerability assessments
• Encrypted database connections
• Secure API endpoints with proper authentication and authorization

No system is perfectly secure. While we take extensive measures to protect your data, no method of electronic storage or transmission over the internet is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your information using commercially reasonable measures and promptly addressing any security incidents.

We use the following categories of third-party services to operate Gigschat. These providers have access to your data only to the extent necessary to perform their specific functions:

AI Processing — OpenAI
Your resume content, profile data, and chat messages are sent to OpenAI's API for processing. This is how Gigschat generates job search results, tailored resumes, cover letters, interview preparation materials, and other AI-powered features. OpenAI processes this data according to their API data usage policies. Under OpenAI's current API terms, data submitted through the API is not used to train their models. We encourage you to review OpenAI's privacy policy and API data usage policy at openai.com for the most current information on how they handle data.

Infrastructure — Supabase
We use Supabase for database hosting, user authentication, and file storage. Your account data, profile information, and application data are stored in Supabase's infrastructure.

Hosting — Vercel
Our application is hosted on Vercel's platform, which processes your requests and serves the application.

Analytics
We use analytics tools to understand how our service is used. These tools collect anonymized usage data such as page views, feature usage, session duration, and interaction patterns. This data helps us improve the product. Analytics data is not linked to your resume content or personal career information.

Domain and DNS — Cloudflare
We use Cloudflare for DNS management and security. Cloudflare may process your IP address and request metadata as part of its standard security and performance services.

We do not sell your personal information to any third party. We do not share your resume content, profile data, or career information with advertisers, data brokers, or any other parties beyond what is described in this section.

You have the following rights regarding your personal data:

Access your data. You can view your profile information, resume data, and job pipeline at any time through your account settings.

Export your data. You can export your data from Gigschat at any time through your account settings. This includes your profile information, resume data, and job pipeline data.

Delete your data. You can delete your account and all associated data at any time from your account settings. When you delete your account, we will permanently remove your personal information, resume data, chat history, and job pipeline data from our active systems. Some data may persist in encrypted backups for a limited period (see Section 6).

Correct your data. You can update or correct your profile information, resume, and preferences at any time through the application.

Withdraw consent. You may stop using the service at any time. If you wish to withdraw consent for specific data processing activities, you can contact us at the address listed in Section 8.

For users in the European Economic Area (EEA), United Kingdom, or other jurisdictions with applicable data protection laws: You may have additional rights under applicable law, including the right to lodge a complaint with your local data protection authority. If you wish to exercise any rights under GDPR or similar regulations, please contact us using the information in Section 8.

For users in California: Under the California Consumer Privacy Act (CCPA), you have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information. To exercise your CCPA rights, contact us using the information in Section 8.

We retain your personal information for as long as your account is active or as needed to provide you with our service.

Active accounts. Your data is retained for as long as you maintain an active account with Gigschat.

Deleted accounts. When you delete your account, we initiate permanent deletion of your personal data from our active systems within 30 days. Encrypted backups containing your data may persist for up to 90 days after deletion, after which they are permanently removed.

Usage and analytics data. Anonymized and aggregated usage data that cannot be used to identify you may be retained indefinitely to improve our service.

Legal obligations. We may retain certain information for longer periods if required by applicable law, regulation, or legal process.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the “Last updated” date at the top of this policy and, where appropriate, providing additional notice through the application or via email.

We encourage you to review this policy periodically to stay informed about how we are protecting your information. Your continued use of Gigschat after any changes to this policy constitutes your acceptance of the updated terms.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: hello@gigschat.com

Website: gigschat.com/contact

We will respond to your inquiry within 30 days.