PRIVACY POLICY

Effective Date: 25 April 2026
Last Updated: 25 April 2026

GigDay ("GigDay", "we", "us", or "our") is a brand owned and operated by VRDJ (UEN 53518780K), registered in Singapore. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the GigDay mobile application and website (collectively, the "Service").

By using GigDay, you agree to this Privacy Policy.

─────────────────────────────────

1. INFORMATION WE COLLECT

Data Linked to Your Identity:

- Contact Info: name, email, phone number
- User Content: photos, videos, audio, documents, messages, gig packages, quotations, contracts, invoices, client and event details
- Identifiers: user ID, device ID
- Usage Data: app interactions, feature usage
- Diagnostics: crash logs, performance data
- Financial Info: payout bank/PayNow details (we do not store full card numbers — handled by Stripe)
- Location: coarse city/country (from IP, for security alerts only — not precise GPS)

Data Not Linked to Your Identity:

- Aggregated analytics (e.g., total active users)
- Anonymised crash reports

We do NOT collect:

- Precise GPS location
- Health or fitness data
- Browsing history outside the app
- Contacts from your address book
- Photos/files outside what you explicitly upload

─────────────────────────────────

2. HOW WE USE YOUR INFORMATION

We use your information to:

- Provide and operate the GigDay platform
- Process bookings, payments, and payouts
- Send transactional emails (verification, receipts, notifications)
- Send push notifications (you can disable these in Settings → Notifications at any time)
- Detect and prevent fraud, abuse, and security threats
- Improve features and fix bugs
- Comply with legal obligations under Singapore law

We do NOT sell your personal data. Ever.
We do NOT use your data for third-party advertising.
We do NOT track you across other companies' apps or websites.

─────────────────────────────────

3. THIRD-PARTY SERVICES

We use trusted third-party providers to operate the Service:

- Stripe — payment processing
- Cloudinary — media storage
- Resend — transactional email delivery
- Supabase — database hosting
- Fly.io — application hosting
- Apple Push Notification Service (APNs) — iOS push notifications
- Sentry — error monitoring
- ipinfo.io — geo-IP lookup for security alerts

These providers process data only on our behalf and under contract. They do not use your data for their own purposes.

─────────────────────────────────

4. DATA SHARING

We share your information only:

- With other GigDay users when you choose to (e.g., sharing files, sending quotations, accepting bookings)
- With third-party service providers listed above to operate the platform
- When required by law, court order, or legal process
- To protect the rights, property, or safety of GigDay, our users, or the public

─────────────────────────────────

5. DATA RETENTION

- Active accounts: retained while your account is open
- Deleted accounts: personal data is removed or anonymised within 30 days, except where retention is required by law (e.g., tax records, fraud prevention)
- Booking and financial records: retained for 5 years per Singapore tax law

─────────────────────────────────

6. ACCOUNT DELETION

You can delete your account at any time:

- In the app: Settings → Account → Delete Account
- By email: support@gigday.app

Account deletion permanently removes your profile, content, and personal data within 30 days, subject to legal retention requirements.

─────────────────────────────────

7. YOUR RIGHTS

Regardless of where you live, you have the right to:

- Access the personal data we hold about you
- Correct inaccurate information
- Request deletion of your account and data
- Export your data in a portable format
- Withdraw consent for non-essential processing
- Opt out of push notifications and marketing emails

For California residents (CCPA): You have the right to know, delete, and opt out of the sale of personal information. We do not sell your personal information.

For EU/EEA/UK residents (GDPR): You have additional rights including the right to object to processing and lodge a complaint with your local data protection authority.

For Singapore residents (PDPA): You have the right to lodge a complaint with the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.

To exercise any of these rights, email support@gigday.app. We respond within 30 days.

─────────────────────────────────

8. DATA SECURITY

We protect your data using:

- Bcrypt password hashing
- TLS/HTTPS encryption in transit
- Encrypted storage at rest
- Rate limiting and brute-force protection
- Secure session tokens with 30-day expiry
- Geo-IP and unknown-device login alerts

No system is 100% secure, but we follow industry best practices and continuously improve.

─────────────────────────────────

9. CHILDREN'S PRIVACY

GigDay is intended for users 18 years and older and is not directed at children. We do not knowingly collect personal information from children under 13 (or the equivalent minimum age in your jurisdiction). If you believe a child has provided us with personal information, contact support@gigday.app and we will delete the account immediately.

─────────────────────────────────

10. TRACKING & ANALYTICS

GigDay does not use Apple's App Tracking Transparency (ATT) framework because we do not track users across other companies' apps or websites. We use only first-party analytics within our own Service to improve performance and fix bugs.

─────────────────────────────────

11. INTERNATIONAL TRANSFERS

GigDay is operated from Singapore. By using the Service, you consent to your data being processed in Singapore and any country where our service providers operate (including the United States and the European Union). We ensure all transfers comply with Singapore's Personal Data Protection Act (PDPA) and applicable international data protection laws.

─────────────────────────────────

12. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Material changes will be notified via in-app notification or email at least 7 days before they take effect. Continued use of GigDay after changes means you accept the updated policy.

─────────────────────────────────

13. CONTACT US

For privacy questions, data requests, or complaints:

Email: support@gigday.app

Operated by: VRDJ Singapore

UEN: 53518780K

Country: Singapore