Privacy policy

We collect only what we need to run the Services:

• Website enquiries: your name, work email, mobile number, company, the kind of enquiry (brand, agency, partner, vendor or worker) and your message.
• Account data: name, email address, mobile number, password (stored only as a one-way hash) and your role in an organisation. Gig workers may add a profile photo, date of birth and gender.
• Organisation data for companies and vendors: legal entity type, PAN, GSTIN, CIN where applicable, and a bank account for settlements (account holder name, account number and IFSC). We never show a full account number once it is saved.
• Task proof from the worker app: photos taken in the app, the GPS location (latitude and longitude), address, pincode and time of each submission, and answers to the campaign form.
• Work records: campaigns, work orders, assignments, team membership, review decisions, reject reasons, earnings and feedback between organisations and workers.
• Verification and one-time passwords: codes sent to your email or mobile to register, reset a password or change a mobile number.
• Technical data: IP address, device and browser type, app version, crash and error logs, and pages visited, used to keep the Services secure and working.

The worker app asks for camera access to take proof photos and for location access to record where a task was completed. Location is read only while the app is in use and only when you take or submit task proof. We do not track your location in the background or between tasks.

You can withdraw these permissions in your phone settings at any time. Without them you can still use the app, but you cannot submit proof for tasks that require a photo or a location.

• To create and secure your account, sign you in and verify your email or mobile.
• To run campaigns: assign work, show tasks to the right workers, collect proof, route it to the assigned reviewer and report progress to the company and vendor.
• To check that work is genuine, for example that a submission falls inside the campaign’s area and is not a repeat of earlier work.
• To calculate earnings and process settlements and payouts for approved work.
• To send service messages such as invitations, task updates, review results and password resets.
• To reply to enquiries from this website and, where you asked us to, contact you about a demo or partnership.
• To keep the Services safe, prevent fraud and misuse, fix errors and improve features.
• To meet legal, tax, accounting and regulatory obligations and to respond to lawful requests.

We do not sell personal data. We do not use task photos or location for advertising.

We process personal data with your consent, which you give when you submit a form, create an account, accept an invitation or allow a device permission. You can withdraw consent at any time (see section 9). Withdrawal does not affect processing that already took place.

Some processing does not need consent under section 7 of the DPDP Act, for example where you share data voluntarily for a specific purpose, where the law requires it, or to respond to a medical emergency or threat to safety.

Inside the Services, access follows each person’s role. A worker’s task proof is visible to the worker, their team lead, their vendor, the company that runs the campaign and the reviewer assigned to it. Organisations cannot see each other’s private records, and team leads do not see rates or payouts.

Outside GigMoney, we share personal data only with:

• Service providers who host, store, email or support the Services for us (for example cloud database, file storage and email delivery providers), under contracts that require them to protect it and use it only on our instructions.
• Banks and payment providers, to make settlements and payouts.
• Financial partners, only when online distribution is live and only with the customer’s explicit consent, limited to what the partner needs to process an application.
• Government, regulators, courts or law enforcement where the law requires it.
• A buyer or successor if GigMoney is merged, acquired or restructured, subject to this policy.

Data is stored with reputable cloud providers. Some providers may process data outside India. Where they do, we transfer it only to countries the Government of India has not restricted under section 16 of the DPDP Act, and under contracts that protect it.

We keep personal data only as long as we need it for the purpose it was collected, or as the law requires:

• Account data: while the account is active, then deleted or anonymised once it is closed and no longer needed.
• Task proof and work records: for the life of the campaign and afterwards as long as needed to settle payments, resolve disputes and meet audit, tax and accounting obligations.
• Website enquiries: until the enquiry is closed and for a reasonable follow-up period, unless you become a customer.
• Removed team members: membership records are kept so past work and audit history stay accurate, but the person loses all access.

• Encrypted connections (HTTPS) between your device and our servers.
• Passwords stored as one-way hashes; one-time codes expire and lock after repeated wrong attempts.
• Role-based access: every request is checked against the user’s organisation and role.
• Task photos kept in private storage and shown only to people allowed to see them.
• Limited staff access, on a need-to-know basis, under confidentiality obligations.

No system is perfectly secure. If a personal data breach occurs, we will inform the Data Protection Board of India and affected users as the DPDP Act requires.

Under the DPDP Act you have the right to:

• Get a summary of the personal data we hold about you and how we use it.
• Correct, complete or update inaccurate or outdated data.
• Erase data that is no longer needed, unless we must keep it by law.
• Withdraw consent you have given.
• Have your grievances addressed by us, and then by the Data Protection Board of India.
• Nominate another person to exercise your rights if you die or become incapable.

You can update most account details in the app or dashboard. For anything else, write to [privacy email]. We may need to verify your identity first. Please note your duties under section 15 of the DPDP Act: give accurate information and do not file false complaints.

This website uses only the cookies it needs to work and stay secure. The dashboard uses cookies or local storage to keep you signed in. If we add analytics, we will update this policy and ask for your consent where required. You can block or delete cookies in your browser, but parts of the Services may stop working.

The Services are for people aged 18 and over. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

The Services may link to other websites and apps, such as app stores or a partner’s application page. Their own privacy policies apply, and we are not responsible for them.

We may update this policy as the Services or the law change. We will post the new version here with a new date and, for significant changes, tell you by email or in the app before they take effect.

If you have a question or complaint about how we handle personal data, contact our Grievance Officer:

• Name: [Grievance Officer name]
• Email: [grievance email]
• Address: [Registered company name], [Registered office address]

We acknowledge complaints within 24 hours and aim to resolve them within 15 days. If you are not satisfied with our response, you may approach the Data Protection Board of India.