Privacy Policy

# Privacy Policy Effective Date: December 21, 2024 Gignox ("we," "us," "our," or the "Platform") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, store, and protect information when you use our website, mobile applications, and services. By accessing or using Gignox, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree with this Privacy Policy, please do not use our Platform. ## 1. Introduction ### 1.1 About This Policy This Privacy Policy applies to all users of Gignox, including buyers, sellers (freelancers), and visitors. It describes the types of information we collect, how we use that information, the circumstances under which we may share it, and the choices you have regarding your information. ### 1.2 Our Commitment We are committed to: - Collecting only the information necessary to provide and improve our services - Being transparent about our data practices - Protecting your information with appropriate security measures - Giving you control over your personal data - Complying with applicable data protection laws and regulations ### 1.3 Scope This Privacy Policy covers information collected through: - Our website at [gignox.com](http://gignox.com) - Our mobile applications - Our customer support channels - Email communications - Any other interactions with our Platform and services ## 2. Information We Collect ### 2.1 Information You Provide Directly Account Registration Information: When you create an account on Gignox, we collect: - Full name - Email address - Username (chosen by you) - Password (stored in encrypted form) - Account type (buyer, freelancer, or both) - Profile photo (optional) Profile Information: When you set up your profile, we may collect: - Professional bio and description - Skills and expertise areas - Languages spoken and proficiency levels - Education history - Work experience and employment history - Professional certifications - Location (city and country) - Timezone preferences - Availability status and working hours - Website and portfolio links - Social media profile links - Video introduction (optional, for sellers) Seller-Specific Information: If you register as a seller, we additionally collect: - Pre-seller education completion status - Seller onboarding information - Gig listings and service descriptions - Pricing and package details - Delivery timeframes - Portfolio items and work samples - Skill test results and certifications - Payout preferences and banking information - Tax identification information (where required) Identity Verification (KYC) Documents: For identity verification and fraud prevention, we may collect: - Government-issued identification documents (passport, driver's license, national ID) - Proof of address documents - Selfie or photo for identity matching - Business registration documents (for business accounts) Communication Data: When you communicate through our Platform, we collect: - Messages exchanged with other users - File attachments shared in conversations - Custom offer details and negotiations - Order requirements and specifications - Support ticket submissions and responses - Feedback and survey responses Transaction Information: When you make or receive payments, we collect: - Order details and purchase history - Payment method information (processed by third-party providers) - Transaction amounts and dates - Invoice and billing information - Refund and dispute records - Wallet balance and transaction history - Withdrawal requests and payout history Content You Create: We collect content you post or upload, including: - Gig descriptions and images - Portfolio items and case studies - Reviews and ratings you provide - FAQ entries and service documentation - Quick response templates - Any other content you submit ### 2.2 Information Collected Automatically Device and Browser Information: When you access our Platform, we automatically collect: - Device type (desktop, mobile, tablet) - Device manufacturer and model - Operating system and version - Browser type and version - Screen resolution and color depth - Hardware specifications (processor cores) - Device language settings Technical Identifiers: We collect technical identifiers including: - IP address - Device fingerprint (a unique identifier generated from device characteristics) - Browser fingerprint - Unique device identifiers - Session identifiers Usage Information: We track how you interact with our Platform: - Pages and features visited - Time spent on pages - Click patterns and navigation paths - Search queries and filters used - Gigs viewed and saved - Features used and preferences set - Errors encountered Analytics Data: For sellers, we collect and generate analytics data: - Gig impressions (how often your gig appears in search results) - Gig views (how often users visit your gig page) - Click-through rates - Conversion rates (views to orders) - Response times to buyer inquiries - Order completion rates - Average delivery times - Customer satisfaction scores - Revenue and earnings data Location Information: We may collect location information: - IP-based geolocation (city, region, country) - Timezone information - Location you provide in your profile ### 2.3 Information from Third Parties Payment Processors: We receive limited information from payment processors: - Transaction confirmation and status - Payment method type (not full card details) - Billing address (for verification) - Fraud risk assessments Authentication Providers: If you sign up using third-party authentication: - Basic profile information from the provider - Email address (if authorized) - Profile photo (if authorized) Fraud Prevention Services: We may receive information from fraud prevention services: - Risk scores and assessments - Known fraud indicators - Suspicious activity alerts ## 3. How We Use Your Information ### 3.1 Providing and Operating Our Services We use your information to: - Create and manage your account - Authenticate your identity and prevent unauthorized access - Display your profile to other users - Enable communication between buyers and sellers - Process orders and facilitate transactions - Hold payments in escrow and release upon completion - Process refunds and handle disputes - Deliver customer support and respond to inquiries - Send transactional emails (order confirmations, delivery notifications, etc.) - Maintain accurate records of transactions and communications ### 3.2 Improving and Personalizing Our Services We use your information to: - Analyze usage patterns to improve Platform features - Personalize your experience based on preferences and behavior - Recommend relevant gigs and sellers - Optimize search results and discovery features - Test new features and functionality - Conduct research and analysis to enhance our services - Identify and fix bugs and technical issues - Develop new products and features ### 3.3 Safety, Security, and Fraud Prevention We use your information to: - Verify user identities through KYC processes - Detect and prevent fraudulent activities - Monitor for suspicious behavior and unauthorized access - Track devices and IP addresses for security purposes - Enforce our Terms of Service and community guidelines - Block malicious users and prevent platform abuse - Investigate reports of misconduct or policy violations - Maintain platform integrity and user safety - Comply with legal obligations and law enforcement requests ### 3.4 Communications We use your information to: - Send important account and service notifications - Notify you of order updates and status changes - Alert you to messages from other users - Inform you of dispute resolutions and outcomes - Send deadline reminders for orders - Communicate policy updates and changes - Send promotional communications (with your consent) - Deliver newsletters and platform updates (if subscribed) - Conduct surveys and gather feedback ### 3.5 Legal and Compliance We use your information to: - Comply with applicable laws and regulations - Respond to legal processes and government requests - Enforce our Terms of Service and policies - Protect the rights, property, and safety of Gignox and our users - Investigate and address violations and potential illegal activities - Maintain required business records - Support audits and regulatory examinations ### 3.6 Analytics and Reporting We use your information to: - Generate seller analytics dashboards - Create platform-wide statistics and reports - Analyze marketplace trends and patterns - Measure advertising and marketing effectiveness - Produce financial reports and reconciliation - Monitor platform health and performance metrics ## 4. Information Sharing and Disclosure ### 4.1 Sharing with Other Users When you use Gignox, certain information is shared with other users: For Buyers: - Your username and profile photo - Your location (city/country, if provided) - Your account creation date - Reviews you have left for sellers - Your online/offline status during active orders For Sellers: - Profile information you choose to display publicly - Gig listings and service details - Portfolio items and work samples - Reviews and ratings received - Seller level and badges - Skills and certifications - Response time and availability status - Order completion statistics - Video introduction (if provided) During Orders: - Buyer requirements and specifications - Order-related communications - Delivered files and work products - Revision requests and feedback ### 4.2 Sharing with Payment Processors We share information with third-party payment processors to facilitate transactions: Stripe: - Transaction amounts and currency - Order details for payment processing - Customer identification for fraud prevention - Billing address for verification Razorpay: - Order information and amounts - Customer contact details for payment notifications - Transaction metadata for reconciliation PayPal: - Payment amounts and descriptions - Customer email for payment processing - Order references for tracking These payment processors have their own privacy policies governing their use of your information. We encourage you to review their policies. ### 4.3 Sharing with Service Providers We may share information with trusted service providers who assist us in operating our Platform: Email Service Providers: - Email addresses for transactional and marketing emails - User names for personalization - Email preferences and subscription status Cloud Hosting Providers: - All data stored on our Platform is hosted on secure cloud infrastructure - Data is encrypted in transit and at rest Analytics Providers: - Anonymized usage data for analysis - Aggregated statistics and trends Customer Support Tools: - Support ticket information - Communication history for support purposes ### 4.4 Legal and Safety Disclosures We may disclose your information when required or permitted by law: - In response to subpoenas, court orders, or legal processes - To comply with government or regulatory requests - To protect the rights, property, or safety of Gignox, our users, or the public - In connection with investigations of fraud, intellectual property infringement, or other illegal activity - To enforce our Terms of Service and policies - In emergency situations involving potential threats to safety ### 4.5 Business Transfers If Gignox is involved in a merger, acquisition, sale of assets, or bankruptcy: - Your information may be transferred as part of that transaction - You will be notified via email and/or prominent notice on our Platform of any change in ownership - You will have the opportunity to delete your account before such transfer ### 4.6 Aggregated and Anonymized Data We may share aggregated or anonymized information that cannot reasonably be used to identify you: - Platform statistics and market trends - Industry reports and research findings - Marketing materials and case studies - Performance benchmarks and averages ## 5. Data Retention ### 5.1 Retention Periods We retain your information for as long as necessary to: - Provide our services to you - Maintain your account (while active) - Comply with legal obligations - Resolve disputes and enforce agreements - Support business operations and analysis Specific retention periods: Active Account Data: Retained for the duration of your account plus 3 years after account deletion or inactivity. Transaction Records: Retained for 7 years to comply with financial and tax regulations. Communication Records: Messages and order communications are retained for 5 years after order completion. Analytics Data: Aggregated analytics are retained indefinitely; individual session data is retained for 2 years. Security Logs: Device fingerprints, IP logs, and security events are retained for 3 years. Support Records: Support tickets and responses are retained for 3 years after resolution. Legal Hold: Data may be retained longer if subject to legal proceedings or regulatory requirements. ### 5.2 Account Deletion When you request account deletion: - Your profile will be removed from public view within 48 hours - Your personal data will be deleted or anonymized within 30 days - Some information may be retained for legal compliance as described above - Transaction records with other users may be retained in anonymized form - Backups may contain your data for up to 90 days before complete deletion ## 6. Your Rights and Choices ### 6.1 Access and Portability You have the right to: - Access the personal information we hold about you - Request a copy of your data in a portable format - Review your transaction history and records - View the information visible to other users You can access most of your information through your account settings and dashboard. ### 6.2 Correction and Update You have the right to: - Correct inaccurate personal information - Update your profile and contact details - Modify your preferences and settings - Change your email address and password You can update most information directly through your account settings. ### 6.3 Deletion You have the right to: - Delete your account and associated data - Request removal of specific content you have posted - Withdraw consent for optional data processing To delete your account, go to Settings and select the account deletion option, or contact our support team. ### 6.4 Opt-Out and Preferences You can control: Email Communications: - Manage email preferences in your account settings - Unsubscribe from marketing emails using the link in any email - Note: Transactional emails related to your account and orders cannot be disabled while your account is active Notifications: - Control push notification preferences - Manage in-app notification settings - Choose which updates you want to receive Cookies and Tracking: - Adjust browser settings to block or delete cookies - Use browser privacy modes for anonymous browsing - Note: Some features may not work properly without cookies ### 6.5 Account Restrictions You can request: - Temporary deactivation of your account - Limitation of data processing in certain circumstances - Restriction of your profile visibility ### 6.6 Exercising Your Rights To exercise any of these rights: - Use the self-service options in your account settings - Contact us at [**privacy@gignox.com**](mailto:privacy@gignox.com) - Submit a request through our Support Center We will respond to requests within 30 days. We may need to verify your identity before processing requests. ## 7. Security Measures ### 7.1 Technical Safeguards We implement industry-standard security measures: - Encryption of data in transit using TLS/SSL - Encryption of sensitive data at rest - Secure password hashing using bcrypt - Regular security assessments and penetration testing - Web application firewalls - DDoS protection - Intrusion detection systems - Regular software updates and security patches ### 7.2 Access Controls We protect your data through: - Role-based access controls for employees - Multi-factor authentication for administrative access - Principle of least privilege for data access - Regular access reviews and audits - Employee background checks - Confidentiality agreements ### 7.3 Device and Account Security We employ additional security features: - Device fingerprinting to detect unauthorized access - IP address monitoring for suspicious activity - Forced logout capabilities for compromised accounts - Session management and timeout controls - Account lockout after failed login attempts - Suspicious activity alerts ### 7.4 Fraud Prevention We protect against fraud through: - Real-time transaction monitoring - Fraud detection algorithms - KYC verification for high-risk activities - IP blocking for malicious actors - Content filtering for prohibited materials - User reporting and investigation systems ### 7.5 Data Breach Response In the event of a data breach: - We will investigate promptly and take corrective action - Affected users will be notified as required by law - Regulatory authorities will be notified where required - We will provide guidance on steps users can take to protect themselves ## 8. Cookies and Tracking Technologies ### 8.1 Types of Cookies We Use Essential Cookies: - Authentication and session management - Security features - Load balancing and performance - User preferences and settings These cookies are necessary for the Platform to function and cannot be disabled. Functional Cookies: - Remember your preferences - Customize your experience - Enable personalized features - Store language and region settings Analytics Cookies: - Track page views and user journeys - Measure feature usage and performance - Identify popular content and services - Analyze user behavior patterns ### 8.2 Local Storage We use browser local storage to: - Store authentication tokens - Save user preferences - Cache frequently accessed data - Improve performance and load times ### 8.3 Third-Party Tracking We may use third-party services that set their own cookies: - Analytics providers for usage tracking - Payment processors for transaction security - Support tools for customer service ### 8.4 Managing Cookies You can manage cookies through: - Browser settings to block or delete cookies - Privacy extensions and tools - Opting out of third-party tracking - Using private/incognito browsing modes Note: Disabling cookies may affect Platform functionality. ## 9. International Data Transfers ### 9.1 Data Storage Location Your data is primarily stored on servers located in secure data centers. Our hosting infrastructure may use servers in multiple geographic regions to ensure performance and reliability. ### 9.2 Cross-Border Transfers When we transfer data internationally: - We ensure appropriate safeguards are in place - We comply with applicable data transfer regulations - We use standard contractual clauses where required - We work with processors that maintain equivalent protection ### 9.3 Your Consent By using Gignox, you consent to the transfer of your information to countries outside your country of residence, including countries that may have different data protection laws. ## 10. Children's Privacy ### 10.1 Age Restrictions Gignox is not intended for users under 18 years of age. We do not knowingly collect personal information from children under 18. ### 10.2 Parental Rights If you believe we have collected information from a child under 18: - Contact us immediately at [**privacy@gignox.com**](mailto:privacy@gignox.com) - We will promptly investigate and delete such information - Parents or guardians may request deletion on behalf of minors ### 10.3 Verification We may implement age verification measures where required by law or where we have reason to believe a user is underage. ## 11. Third-Party Links and Services ### 11.1 External Links Our Platform may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any information. ### 11.2 Third-Party Integrations When you use third-party integrations or connect external services: - Those services may collect information according to their own policies - We are not responsible for their data practices - Review their terms and privacy policies before use ### 11.3 Social Media If you interact with our social media presence: - Those platforms have their own privacy policies - Information shared there is subject to their terms - We may collect publicly available information from your social profiles ## 12. Seller-Specific Privacy Considerations ### 12.1 Public Profile Information As a seller, certain information is publicly visible: - Your username, profile photo, and bio - Your gig listings and pricing - Your portfolio and work samples - Your reviews, ratings, and seller level - Your response time and availability - Your skills and certifications - Order statistics (e.g., orders completed) You can control some visibility settings in your profile preferences. ### 12.2 Buyer Information Access As a seller, you will have access to: - Buyer usernames and profile information - Order requirements and specifications - Communication history for active orders - Buyer reviews of your services You must handle this information responsibly and in accordance with our Terms of Service. ### 12.3 Analytics Access Sellers have access to detailed analytics including: - Gig performance metrics - Viewer demographics (aggregated) - Conversion statistics - Revenue and earnings data This data helps you optimize your services but must be kept confidential. ## 13. California Privacy Rights ### 13.1 California Consumer Privacy Act (CCPA) If you are a California resident, you have specific rights: - Right to know what personal information we collect - Right to know whether we sell personal information (we do not) - Right to access your personal information - Right to request deletion of your personal information - Right to non-discrimination for exercising your rights ### 13.2 Exercising California Rights To exercise your California privacy rights: - Submit a request through your account settings - Email us at [**privacy@gignox.com**](mailto:privacy@gignox.com) - We will verify your identity before processing ### 13.3 Authorized Agents You may designate an authorized agent to submit requests on your behalf. We may require verification of the agent's authority. ## 14. European Privacy Rights ### 14.1 GDPR Rights If you are in the European Economic Area, United Kingdom, or Switzerland, you have rights including: - Right of access to your personal data - Right to rectification of inaccurate data - Right to erasure ("right to be forgotten") - Right to restrict processing - Right to data portability - Right to object to processing - Rights related to automated decision-making ### 14.2 Legal Basis for Processing We process your data based on: - Contract performance (providing our services to you) - Legitimate interests (improving and securing our services) - Legal obligations (compliance with applicable laws) - Consent (where specifically obtained) ### 14.3 Supervisory Authority You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have violated your privacy rights. ## 15. Changes to This Privacy Policy ### 15.1 Policy Updates We may update this Privacy Policy from time to time to reflect: - Changes in our data practices - New features or services - Legal or regulatory requirements - Industry best practices ### 15.2 Notification of Changes When we make material changes: - We will update the "Effective Date" at the top of this policy - We will post a notice on our Platform - We may send you an email notification for significant changes - We will obtain consent where required by law ### 15.3 Continued Use Your continued use of Gignox after changes to this Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with changes, you should stop using the Platform and delete your account. ## 16. Data Protection Officer ### 16.1 Contact Information For privacy-related inquiries and concerns, you can reach us at: Email: [**privacy@gignox.com**](mailto:privacy@gignox.com) Subject: Privacy Inquiry Our team will respond to inquiries within 30 days. ### 16.2 Escalation If you are not satisfied with our response, you may: - Request escalation to senior management - File a complaint with the appropriate regulatory authority - Seek legal remedies as permitted by law ## 17. Contact Information For general inquiries about this Privacy Policy: Email: [**privacy@gignox.com**](mailto:privacy@gignox.com) Support: Visit our Help Center at /support Address: [Your Business Address] For urgent security concerns: Email: [**security@gignox.com**](mailto:security@gignox.com) For data protection requests: Email: [**privacy@gignox.com**](mailto:privacy@gignox.com) --- By using Gignox, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and sharing of your information as described herein.