GigUpp Privacy Policy
This policy explains what personal data we collect, why, who we share it with, how long we keep it, and your rights. It applies to the GigUpp website, mobile apps and support channels, and should be read with the Terms of Service and the Cookie Policy. We process personal data in line with Ghana's Data Protection Act, 2012 (Act 843).
1. Contact
| Privacy and data requests | [email protected] |
| Support | [email protected] |
| Company | Scryptic Technologies Ltd, KNUST, Kumasi, Ghana · [email protected] |
2. Who this applies to
Everyone who uses GigUpp: creators, clients, guests who pay a quote by email, and visitors. GigUpp is for adults 18 and over; we do not knowingly collect data from anyone younger (§ 13).
3. What we collect
3.1 Account and profile
| Data | Why |
|---|---|
| Name, email address | Your account, sign-in, receipts and notices |
| Google account basics (name, email, profile picture) if you sign in with Google | Signing you in |
| Date of birth | Confirming you are 18 or over |
| Username, profile picture, banner, craft, location label (for example a city), bio | Your public profile |
| How you heard about GigUpp (optional) | Understanding where people find us |
| Settings and consent choices | Remembering your choices and proving consent |
3.2 Work and bookings
| Data | Why |
|---|---|
| Projects, photos and videos you upload | Showing your work |
| Quotes, packages, prices, client first names and emails a creator adds | Sending quotes and running bookings |
| Booking requirements, deliveries, revision and extension requests | Running bookings |
| Feedback and work records | Showing completed work |
| Dispute statements and evidence | Deciding disputes |
| Quote requests you send to a creator | Passing your request to that creator |
3.3 Payments
| Data | Why |
|---|---|
| Payment records: amounts, dates, status, references | Running payments, refunds and accounts |
| From the payment provider after a payment: payer name, channel, network (for example MTN, or card brand), last four digits, card country | Audit, support and fraud prevention. Shown only to authorised GigUpp staff. |
| Payout accounts (mobile money number or bank account, account name) | Paying Earnings; checking the account is in your name |
| Withdrawal records | Payouts and accounting |
We never see or store full card numbers, CVVs or PINs. Card details go directly to the payment provider.
3.4 Messages and files
Chat messages and files you share with other users, and messages you send our support team. Chat is not end-to-end encrypted. Text you write on GigUpp, such as chat messages and notes, is checked automatically and blocked words are hidden (Community Guidelines § 3). We may also review chat to prevent fraud and abuse and to decide disputes.
3.5 Device and usage
| Data | Why |
|---|---|
| IP address, browser or device type, app version | Security, fraud prevention and fixing errors. Where we store IP addresses and device strings with records such as consents, we store a keyed one-way code rather than the raw value. |
| Push notification tokens (mobile app) | Sending notifications you allow |
| Product usage events (pages and actions) | Improving GigUpp. Linked to a pseudonymous code, not your name. |
| Error reports | Fixing crashes |
3.6 What we do not collect
We do not collect biometric data, health data, or precise location. We do not collect government ID unless the law or our payment provider requires an identity check, or we need one to look into fraud (Terms of Service §4); we then use it only for that check. We do not ask for your phone number to sign in; a phone number is used only as a mobile money payout account and for its confirmation codes.
4. Why we use your data (lawful bases)
| Purpose | Lawful basis |
|---|---|
| Creating your account, running quotes, bookings, payments, withdrawals and disputes | Performing our contract with you |
| Keeping GigUpp secure, preventing fraud and abuse, fixing errors | Our legitimate interests |
| Showing your public profile and projects, and featuring standout work in GigUpp's own marketing | Our contract with you and our legitimate interests; you can hide your profile at any time |
| Optional analytics cookies and marketing emails | Your consent, which you can withdraw at any time |
| Keeping financial and audit records, answering lawful requests | Legal obligation |
We do not sell your personal data, and we do not use your content to train third-party AI models.
5. What other people can see
- Public by design: a creator's name, username, profile picture, banner, craft, location label, bio, projects, prices "from", and completed work records. Search engines may index public pages. A creator can hide their profile in settings.
- Shared with the other party in a booking: the details needed for the work, such as names, requirements, messages, deliveries and dispute statements.
- Never shown to creators: a client's payment details, or the payer details we receive from the payment provider.
6. Who we share data with
We use trusted service providers who process data on our instructions:
| Provider | What they do |
|---|---|
| Paystack | Processes payments, refunds and payouts; verifies payout account names; holds payment funds |
| Appwrite | Sign-in and accounts; payment and ledger records |
| Amazon Web Services (DynamoDB) | Profiles, quotes, bookings and other app data |
| Cloudflare (R2 storage and CDN) | Stores and serves uploaded files and public images |
| ZeptoMail (Zoho) | Sends emails |
| mNotify | Sends SMS confirmation codes for mobile money payouts |
| Ably | Delivers chat messages in real time |
| "Continue with Google" sign-in | |
| Sentry | Error and crash reports |
| Hosting providers | Run our servers and website |
We also share data when the law requires it (for example with courts, regulators or law enforcement), to protect people's safety, or as part of a sale or reorganisation of our business, in which case this policy continues to apply.
7. International transfers
Some providers store or process data outside Ghana. We choose providers with strong security and use contractual and other safeguards required by Act 843. Write to [email protected] for details.
8. How long we keep data
| Data | How long |
|---|---|
| Account and profile | While your account exists. Removed when your account is deleted (§ 9). |
| Trying GigUpp without an account | If you start without signing up and do not add an email, what you created is deleted after 30 days |
| Delivered files | 365 days after delivery, then deleted. The client is emailed 14 days before. |
| Data export files | 7 days, then deleted |
| Usage events | Up to 400 days if you allowed analytics; 7 days otherwise |
| Payment, ledger, withdrawal and audit records | Kept after account deletion as long as the law requires for tax, accounting and fraud prevention. Payment records keep the payer details the payment provider sent (§ 3.3). |
| Booking records (bookings, deliveries, disputes) and chat messages | Kept after account deletion, because the other person in the booking or chat still needs them and they are evidence of what was agreed and paid. Your name on them is replaced with "Deleted user". |
| Consent records | As long as needed to prove consent |
9. Your rights
You can:
- access your data: request an export in settings; we email you a download link, which expires after 7 days;
- correct it: edit it in the app, or request a correction in settings;
- delete your account: request deletion in settings. Deletion runs after a 7-day cooling-off period, during which you can cancel. To protect your money, deletion is possible only once you have no active booking, no open dispute, and no Funds or Earnings left. We then delete your profile, projects, quotes, files, payout accounts, referral code and other personal data, sign you out everywhere, and keep only the records described in § 8;
- object to processing based on legitimate interests, or ask us to restrict it;
- withdraw consent for analytics or marketing at any time, in settings or through the cookie banner;
- complain to the Data Protection Commission (§ 15).
We respond within 30 days. We may need to confirm your identity first. Email [email protected] for anything you cannot do in the app. If you cannot sign in, see justgigupp.com/delete-account.
10. Marketing and notices
We send service messages (sign-in codes, receipts, booking updates, security alerts and policy notices) because they are needed to run your account. We send marketing only with your consent, and every marketing email has an unsubscribe link.
11. Security
We use encryption in transit (HTTPS), access controls, a tamper-evident audit log of sensitive actions, confirmation codes for withdrawals, and security reviews of our providers. No system is perfectly secure, so we cannot guarantee absolute security.
12. Data breaches
If a breach is likely to put your rights at risk, we will notify the Data Protection Commission and affected users without undue delay, as Act 843 requires.
13. Children
GigUpp is for adults 18 and over. If we learn that a user is under 18, we will close the account and delete their personal data, except records the law requires us to keep. Contact [email protected] if you believe a child is using GigUpp.
14. Changes to this policy
We will give at least 30 days' notice in the app and by email before a material change takes effect, and you may be asked to accept the new version. Minor changes may take effect when posted.
15. Complaints
Please contact us first at [email protected]. You can also complain to the Data Protection Commission of Ghana (www.dataprotection.org.gh). If you live outside Ghana, you may also complain to the data protection authority where you live.