Privacy Policy
Effective October 30, 2026 · GiveGigs.com
1. Scope and feature coverage
This Policy applies to GiveGigs accounts and profiles; hiring, client directories, gigs, applications, charity and off-site-pay tasks; projects, tasks, organizations, CRM, invoices and timers; real estate; social, networking, work likes and dating; chat, media and notifications; referrals and share links; microMoney and sponsorships; calculators, Flippers, learning, writing, image, audio, browser and CryptArtist tools; AI services, REST APIs, MCP and Discord integrations; and support and moderation. A feature may be unavailable or experimental. The descriptions below apply when you use the feature and according to its actual configuration; listing a data category does not mean every feature collects it. This Policy provides notice, not a waiver of privacy rights or blanket permission to use personal information for unrelated purposes.
2. Who is responsible and how to contact us
MattyJacks LLC, a New Hampshire limited liability company in the United States, owns and operates GiveGigs.com and is the controller of personal information processed for the purposes described here. Contact [email protected] with the subject Privacy Request, or use givegigs.com/contact. This Policy covers our website, accounts, work tools, community features, AI services, and integrations. When an organization controls information it uploads about its own clients or staff, that organization may separately be responsible for responding to privacy requests. This Policy does not substitute for any required data processing agreement.
3. Information we collect and sources
We receive information you provide: account and authentication details; name, email, phone and other contact methods; worker profiles, skills, rates, location, availability, portfolios and media; gigs, applications, reviews and reports; projects, tasks, chat messages and uploaded files; invoice clients, billing records and time entries; newsletter and microMoney purchase-interest preferences; and support correspondence. Optional connection or dating profiles may include age, preferences, photos, and information that can reveal sensitive characteristics. Do not submit sensitive information unless the feature requires it and you choose to provide it. We also receive data from users who invite or interact with you, connected authentication or integration providers, and public information you choose to link. Technical processing can include IP addresses, browser/device details, request and security logs. With analytics consent, our page-view endpoint records visited paths, IP addresses, user agents, and view counts; Google Analytics also processes usage and device information. With advertising consent, Meta Pixel receives page-visit and device information. We do not request full payment-card details in worker profiles, chat, or time and invoice tools.
4. Purposes and legal bases
We use account, profile, project, communication, invoice, and time data to provide features you request and administer our relationship (performance of a contract or steps at your request). We use proportionate security, fraud prevention, abuse moderation, diagnostics, and support information to protect users and operate the Services (legitimate interests, balanced against individual rights). For safety compliance, fraud prevention, dispute resolution, and profile accuracy, authorized administrators (Master Admins and Sub Admins) maintain limited administrative possession capabilities ("Possession Mode") to inspect account interfaces and correct or remove erroneous or violating listings, worker profiles, client profiles, gigs, tasks, and posts. Administrative messaging impersonation is technically restricted. We process records when required for legal compliance, legal claims, and accounting (legal obligations or legitimate interests as appropriate). Optional analytics, advertising tracking, and marketing requiring consent rely on your separate, revocable consent. Where applicable law requires consent for sensitive data, that processing requires separate valid consent; publishing a policy or accepting Terms does not supply it. We do not claim an unrestricted license to train AI models on private messages or other personal information.
5. Public information and disclosures
Public worker profiles, contact blocks, public gigs, reviews, and other content marked public can be viewed by visitors, search engines, and automated systems. Other users receive content according to the feature's sharing and access controls. Service providers supporting hosting, authentication, databases (including Supabase), file storage, email delivery (including Brevo or Resend where enabled), security challenges (Cloudflare Turnstile), and requested AI tools process information needed for their functions. Google and Meta receive information only when their respective tracking category is enabled; advertising disclosures may constitute sharing or targeted advertising under some US laws. External video, social, or other services you choose to open apply their own policies. We may disclose information when legally required, to protect safety and legal rights, or in a business transaction subject to applicable safeguards. We do not authorize providers to use private information beyond their agreed purpose merely because this Policy lists them. Contact us for details of providers and recipients relevant to your information.
6. Cookies, sale, sharing, and targeted advertising
Necessary authentication and security storage supports requested services. Optional analytics and advertising start disabled until you choose them in Cookie settings. Rejecting optional tracking does not prevent ordinary use. Meta advertising disclosures may be considered sale, sharing, or targeted advertising under applicable definitions even without a monetary payment. Reject advertising to opt out of those browser-based disclosures, or contact us for a broader account or offline request. We recognize Global Privacy Control in the browser as a rejection of optional tracking. Consent is specific to this browser, expires after 180 days, and may be withdrawn at any time through the persistent Cookie settings control. See our Cookie Policy for providers, identifiers, durations, and limitations. We do not knowingly sell or share personal data of people under 18.
7. Retention, deletion, and security
Account and user-created information is retained while needed to provide the requested service, until deletion is requested or the relevant content is removed, subject to legal and operational exceptions. Retention depends on the category, account status, dispute and fraud risks, tax and accounting duties, and applicable limitation periods. Administrative access events, possession sessions, and profile or content corrections are logged for accountability; the audit system uses SHA-256 hash chaining as an integrity safeguard. This does not make logs infallible or exempt personal information from applicable retention limits and privacy rights. Security records and backups may remain for limited operational or legal periods rather than disappearing immediately. We may retain information necessary for legal obligations, security, claims, or evidence of privacy choices, and deidentified statistics where lawful. Ask us for retention information about a particular record. We use access controls and other reasonable safeguards, but no service can guarantee absolute security. Report suspected exposure promptly. Deleting your account cannot necessarily remove copies another user or a search engine independently retained.
8. Your choices and rights
Depending on applicable law, you may request confirmation of processing, access and a copy, correction, deletion, portability, restriction, withdrawal of consent, or objection to processing, and opt out of sale, sharing, targeted advertising, or certain profiling. You may have rights to limit sensitive-information uses and obtain information about recipients or categories of disclosures. You will not be unlawfully discriminated against for exercising rights. Email [email protected] with your request and enough detail to locate the relevant account. We verify identity proportionately when necessary, do not require identity verification merely to reject browser tracking, and allow authorized agents subject to legally permitted authority checks. Do not send government identification unless specifically needed and securely requested. Marketing emails include an unsubscribe option; service and security messages may still be sent. Withdrawal does not invalidate lawful processing before withdrawal.
9. New Hampshire and other United States residents
Where New Hampshire RSA 507-H applies, residents may confirm processing, access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale, and profiling in furtherance of solely automated decisions producing legal or similarly significant effects. We do not use the consent banner to authorize such profiling. We respond to covered requests without undue delay and within 45 days, with a further 45-day extension where permitted after timely notice explaining the reason. If we decline a request, reply with Privacy Appeal; we will respond to a covered appeal within 60 days, explain the result, and, if denied, explain how to contact the New Hampshire Attorney General at doj.nh.gov. We honor qualifying authorized-agent requests and universal opt-out signals as required. California and other US residents may have comparable rights, including disclosure of categories of information, sources, business purposes, recipients, and sale or sharing, and additional appeal or complaint rights. Those disclosures appear above. Applicable statutory exceptions and coverage thresholds govern; contact us even if you are unsure whether a law applies.
10. EEA, United Kingdom, Switzerland, and other locations
Where relevant law applies, you may exercise access, rectification, erasure, portability, restriction, objection, and consent-withdrawal rights by contacting us. We ordinarily respond to GDPR-covered requests within one month; permitted extensions will be communicated with reasons within that period. You may complain to your local supervisory authority, including in your place of habitual residence, work, or alleged infringement, or the UK ICO. Users elsewhere may contact their local privacy regulator. Information may be processed in the United States and other countries with different protections. Transfers requiring safeguards must use a lawful mechanism, such as applicable standard contractual clauses and additional measures, or another permitted basis; mere use of the website does not waive these requirements. Contact us for the safeguards applicable to a specific transfer or any required local representative's details.
11. Children and sensitive features
The Services are intended for adults aged 18 or older. We do not knowingly collect personal information from children. Contact us if a child has supplied data so we can investigate and take appropriate action. Connection or dating information can be sensitive, and public disclosure may carry significant risks. Provide only information you intend to share, review visibility controls, and request correction or deletion when needed. A general agreement to Terms is not consent for sensitive-data processing.
12. Updates and questions
Material changes will be identified by an updated effective date and notified where required. We will obtain new consent when a changed purpose requires it. Contact MattyJacks LLC at [email protected] for privacy questions, requests, appeals, retention details, provider information, or concerns about a particular feature.
13. Feature data: hiring, organizations, CRM, and work records
Worker and client profiles, gigs, applications, reviews, portfolios, and contact blocks contain information supplied by their publishers and people interacting with them. Projects and task boards can hold assignments, membership, notes, dates, attachments, and completion history. CRM records may contain third-party contacts, deal details, follow-ups, notes, comments, access grants, and event histories. Invoice and timer features can contain client addresses, amounts, currencies, tax-related entries, invoice settings, work descriptions, and time records. We process these records to store, retrieve, collaborate on, search, export, and manage the work you request. Authorized collaborators, organization members, administrators, delegates, and recipients may receive information within their permissions. An invitation or shared link may disclose information to its recipient; verify access and destination before sharing. Organization-controlled records may remain available to that organization after your membership ends. People whose information was entered by another user may contact us about their rights even without an account. We assess whether we or the uploading organization is responsible for responding and assist as required by law.
14. Feature data: real estate
Real estate records can include property addresses and locations, descriptions, pricing, ownership or agent contact claims, property attributes, listings, photographs and other media, favorites, saved searches, inquiry messages and contact details, viewing arrangements and status, organization permissions, and scenario inputs and results. We use them to display listings, match searches, route inquiries, arrange viewings, and save the analyses you request. Public listing information and media can reveal an occupied home, people, or location; remove unnecessary identifying details and file metadata before publication. Inquiries and viewing details are disclosed to the relevant listing owner, authorized organization members, or other intended recipients rather than becoming public solely because a listing is public. Saved information follows the feature's access controls. Third-party contact recipients can retain messages independently. Do not include access codes, identity documents, financial credentials, or unnecessary occupant information in public listings.
15. Feature data: social, work likes, networking, and dating
Posts, replies, reposts, embeds, reactions, polls and votes, follows, tags, profile links, streaks, likes, blocks, favorites, reports, and connection activity are used to provide feeds, discovery, interactions, preferences, and abuse prevention. Visibility differs by feature: public posts and profiles may be indexed and accessed through authorized APIs, while a private preference, block, or unshared record is not made public merely because it relates to a public profile. Tagging and sharing can identify another person and trigger a notification. Dating profiles, media, age, preferences, and interaction patterns may reveal sexual orientation, sex life, or other legally sensitive characteristics even when not explicitly requested. Where explicit consent or another special legal condition is required, it must be obtained separately for that processing. Do not infer that agreeing to this Policy supplies it. Change or remove optional information through available controls or contact us. A match or connection does not authorize unrelated marketing or disclosure of private information.
16. Feature data: messages, recordings, and notifications
Chat processing can include thread membership, invitations, message text, attachments, timestamps, delivery or read information where supported, and reports. Participants and authorized integrations can access information shared with them; authorized staff may access relevant records when necessary for support, safety, security, or legal duties under restricted access. We do not represent chat as end-to-end encrypted. Voice, microphone, camera, or screen recording tools, where available, process the media you select after the relevant browser permissions. Locally exported recordings are not automatically public, and cloud recording uploads are currently unavailable. A separate upload, sharing action, or AI request can transmit media as described by that feature. Notification processing includes category and channel preferences, consent and opt-out records, mute settings, notification content, recipient destinations, queue records, delivery attempts, outcomes, and read state where supported. Email and Discord delivery can disclose relevant content or previews to the delivery service and to people with access to the destination account or device. Configure available preferences and avoid including unnecessary sensitive information in messages or notification previews.
17. Feature data: AI, creative tools, calculators, and local storage
Requested AI features may transmit prompts, selected text, images, attachments, task context, relevant conversation history, and technical or usage metadata to the configured inference provider. Depending on the tool and configuration, providers include OpenAI, MetaMuse, and fal.ai; contact us for the provider and processing arrangements applicable to a particular request. This can occur for writing and profile assistance, learning, image generation or analysis, upscaling, CRM assistance, and Flippers workflows. Removing identifiers or redacting inputs can reduce exposure but cannot guarantee anonymization. Send only information you are authorized to disclose. Provider retention and processing depend on the service and contractual configuration; this Policy does not promise zero retention or categorically exclude provider training where that has not been verified. Any use requiring additional notice, a lawful basis, or consent remains subject to those requirements. We do not obtain an unrestricted AI-training license over private data through the Terms. Browser-based tools, including calculators, audio processing, painting, slicing, writing, SEO previews, and CryptArtist, may process files, drafts, code, settings, and saved work on your device. Local processing alone does not mean an account copy exists. Uploading, cloud saving, requesting AI, fetching remote content, or exporting to a connected service can separately transmit selected information. Clearing storage or changing devices may erase local work. Learning, calculator, Flippers, and real estate scenarios can include commercial assumptions and location inputs; do not enter unnecessary confidential details. Generated output and usage records may be saved where the feature supports history. Camera, microphone, and screen permissions can be revoked in browser or device settings; previously saved or shared media must be deleted separately.
18. Feature data: API access, agents, delegation, and administrative logs
REST APIs, MCP clients, Discord bots, and other integrations process the account identifiers, permission scopes, request data, tool results, and activity needed to perform authorized operations. API key records and security metadata help authenticate and limit access; keep the secret value confidential. External agents receive the information returned to them and may keep independent copies under their own policies. Delegated access permits the selected person or agent to act within granted authority, which may include access to records or creating content attributed to the managed account. Review and revoke grants when appropriate. Administrative possession is distinct from your voluntary delegation and is restricted to legitimate operational, moderation, and safety purposes. Audit records may include administrator and affected account identifiers, session details, actions, timestamps, IP addresses, and content-change metadata. Hash chaining is an integrity safeguard, not a guarantee that every action is captured or that records are impossible to alter. Retained audit data remains subject to minimization, access restrictions, applicable retention limits, and privacy rights, with lawful exceptions for security and legal claims.
19. Feature data: quotas, sponsorships, referrals, and outreach preferences
microMoney and AI quota records may include account and organization identifiers, grants, balance and window counters, usage reservations and reconciliations, model or provider usage and estimated costs, sponsorship eligibility, recipients, and allocation histories. We use these records to enforce limits, account for consumption, administer sponsored access, investigate abuse, and resolve usage disputes. Sponsors and organization managers may see allocation and usage information permitted by the feature; sponsorship alone is not permission to read private prompts or messages. Referral and sharing features process codes, source and destination records, referring accounts, attribution events, and aggregated results subject to access and consent controls. Contact preferences and consent histories record permitted channels, choices, timestamps, and relevant notices to support outreach rules. EasyDNC and CRM screening process submitted contact or phone information and screening outcomes as needed for the requested check; a result is not proof of lawful consent. Optional analytics or advertising still requires the choices described in the Cookie Policy; describing referrals or quota enforcement does not authorize optional tracking.
20. Sensitive data, automated assistance, and use limitations
Personal information described here includes identifiers and contact data; account and device identifiers; work, education and professional information you provide; transaction and commercial records; internet activity; communications; photographs, audio and other user content; location information you submit; and preferences or inferences generated by enabled features. Precise locations, private communications, credentials, dating information, and some uploaded material can be sensitive under applicable law. We use sensitive information only for the requested feature, permitted safety or legal purposes, or other specifically disclosed lawful purposes with required consent. A photograph or voice recording is not, by itself, a representation that we create biometric identification templates. Do not submit government IDs, payment credentials, health records, or similarly sensitive material to general-purpose fields. Search, ranking, recommendations, moderation assistance, matching, and quota enforcement can use automated rules or AI. Outputs can be inaccurate; contact us to request correction or review of a consequential result. This Policy does not authorize solely automated decisions with legal or similarly significant effects or unrelated profiling based on sensitive data. Such processing, if introduced, requires its own applicable disclosures, legal basis, safeguards, and rights. We do not describe ordinary service-provider processing as unrestricted permission for independent advertising, data brokerage, or AI training.
21. Category-level retention and recipients
Profiles, listings, work records, messages, preferences, and saved outputs are generally kept while needed for the account or requested feature and then reviewed for deletion, subject to valid removal requests and legal exceptions. Local drafts and files persist according to browser storage or your own saved copies. Inquiries, viewings, and organization or client records may need to remain with the controlling organization for active transactions, disputes, or legal duties. Usage accounting, consent evidence, moderation and audit records, security logs, and support records are retained for periods proportionate to abuse prevention, financial reconciliation, demonstrating compliance, and applicable legal claims. Deleted information may remain temporarily in backups until the relevant rotation, with restricted use. We do not claim indefinite retention merely because a record was hashed or called immutable. Specific retention periods depend on the record and applicable obligations; contact us for details. Depending on the feature, recipients include the public for published content; selected counterparties, collaborators, organization members, and delegates for shared records; hosting, database, authentication, storage, email, security, AI inference and other operational providers for the information needed to deliver their services; analytics and advertising providers when enabled; and legally authorized recipients for legal or safety needs. If you opt in to microMoney purchase updates, your email and signup preference are sent to our email marketing provider and stored on the GiveGigs newsletter and microMoney interest lists so we can send launch and purchase-availability news. Marketing emails include an unsubscribe option. Advertising disclosures described above may qualify as sale or sharing even without payment. We do not treat necessary processing as consent to unrelated commercial disclosure. We apply applicable contractual and privacy requirements to providers and disclose information in corporate transactions only subject to lawful safeguards. For categories disclosed about you, applicable retention criteria, or information concerning a particular recipient, submit a privacy request.
22. SideKick browser extension and marketplace information
When installed and enabled, SideKick uses browser permissions for supported marketplace pages, active tabs, scripts, context menus, its side panel, and local extension storage. It reads relevant listing content on supported sites such as Amazon, eBay, Facebook Marketplace, ShopGoodwill, Poshmark, Mercari, Vinted, and HiBid to provide sourcing and valuation tools. Listing records can include page URLs, titles, prices, images, descriptions, and other extracted details, some of which may identify sellers or locations. Settings and deal queues can be stored in the browser profile. Requested quick evaluations send relevant item and calculation inputs to GiveGigs. Sending a deal to your account stages it through an authenticated GiveGigs tab; the extension does not copy login cookies, API keys, or bearer tokens into its local storage. Pending records may remain locally when you are signed out. Server staging is temporary rather than durable inventory storage. Local extension data is shared with people who can access the same browser profile. Review captured information before sharing or streaming it; masking is not a guarantee of anonymity. Disable or uninstall the extension and use browser or extension controls to clear local data; this does not itself delete previously submitted server records. Source marketplaces independently process your visits under their own policies.
Questions or rights requests: [email protected]. Contact GiveGigs.