Last updated: October 13, 2026 · Effective date: October 13, 2026
Right Image Digital ("Gig," "we," "our," or "us") operates the Gig mobile application and related websites (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information. By using the Service, you agree to this Privacy Policy.
The Service is operated by Right Image Digital, the data controller for personal information processed through the App. Contact: isaac@rightimagedigital.com.
With your permission, we collect your device's precise or approximate location to show nearby providers and display your general location to potential customers. You can disable this in your device settings at any time.
In chat you can choose to send a location to the person you're talking to, either once or as live location for a period you pick (15 minutes, 30 minutes, 1 hour or 12 hours). While a live share is on, your device keeps sending its position to us — including while the app is in the background — and only that person can see it. Sharing stops when the period ends, when you tap Stop, or if either of you blocks the other. We keep the last shared point with the message until it is deleted.
With your permission, we access your camera and photo library so you can upload profile pictures and service photos, and send photos and videos in chat. Chat photos and videos are visible only to the two people in the conversation.
If you enable push notifications, Expo issues a push token we store to deliver message and activity alerts.
If you purchase the one-time Trusted membership (or pay the application fee), subscribe to a recurring paid subscription tier, or found or join a Team (a one-time founding fee or recurring monthly dues), your payment is processed by Stripe, Inc. directly — we do not receive or store full card numbers — or, if you buy in the iPhone app, by Apple through In-App Purchase, in which case we receive a record of the purchase signed by Apple (the product, its dates, price and currency, and your App Store country) and never your payment details. We do store your membership status, your subscription tier, status, and renewal date, your team, who invited you, and your position in your team's invite network, the amount and date of your payments, the commissions your invite network generates, and Stripe's or Apple's customer, subscription, and transaction identifiers.
If you participate in the referral program, we store your referral code, the user who referred you (if any), the referral rewards you have earned (an earnings ledger), and any payout records. To pay out your earnings we use the peer-to-peer payment handle (e.g., Venmo, PayPal, Cash App, or Zelle) you choose to provide in your profile. See Section 4 of our Terms of Service for how the referral program works.
If you order printed business cards, we store the card you design (the text, colors and layout you choose, and your profile photo or any photo or logo you upload for it), the print file made from it, your order and its status, and the shipping name, address, phone number and email address you give when you pay (for example from Apple Pay or Google Pay). Our print partner, Gelato, receives the print file and your shipping details so it can print and deliver the cards. See Section 8.2 of our Terms of Service.
If you turn on Monthly Spotlight participation, we store your participation preference and, if you are selected, an award record (the month, amount, and payout status). To pay a Spotlight award we use the peer-to-peer payment handle you choose to provide in your profile. See Section 4B of our Terms of Service.
If you use voice search, your speech is turned into text by your device's built-in speech recognizer (Apple's on iPhone, Google's on Android), which may process the audio on Apple's or Google's servers under their own privacy policies. Gig does not receive or store the audio, only the text you then choose to search for. The microphone is also used when you record a video to send in chat.
Where GDPR or UK GDPR applies, we process personal data on these legal bases: (a) performance of a contract (to provide the Service you request, including the Trusted membership, the referral program, and the Teams program), (b) consent (for push notifications, marketing, precise location), (c) legitimate interests (security, fraud prevention, product improvement), and (d) legal obligation (including tax reporting on referral and team earnings).
We do not sell your personal information. We disclose information only as described below.
Your name, profile photo, bio, social links, Trusted status, ratings, reviews, service listings, and approximate location are visible to other users of the Service to facilitate connections.
When you post a job request, its description, timing, budget, an approximate area, and your first name, profile photo and rating are shared with the matching Providers it is sent to (up to a few dozen per request). Any private address you add to a request is not shared with them. The text of a request is processed by our AI provider to structure it and screen it for prohibited content.
We use the following third parties to operate the Service. Each receives only the data they need for their function:
| Processor | Purpose | Data Shared |
|---|---|---|
| Railway (hosting) | Backend infrastructure | All app data processed server-side |
| Firebase / Google (Auth) | Social sign-in, phone auth | Auth tokens, email, phone |
| Expo | Push notifications, build delivery | Push tokens, device info |
| Voyage AI | Generate embeddings for semantic search | Service titles, descriptions, search queries, user bios |
| Pinecone | Vector database for search | Embeddings (not raw text) |
| Anthropic (Claude API) | AI translation; scam, fraud and prohibited-content screening; structuring job requests | Bios, service titles and descriptions, chat messages, reviews and job requests. A message being screened for scams is sent with the few messages before it and basic account signals (such as account age) so it can be judged in context. |
| Resend | Email delivery | The name and email address of new accounts, in internal notifications to our team |
| Stripe | Trusted membership, subscription, Teams, and business card payment processing | Payment-card details handled by Stripe directly; we receive membership status, subscription tier/status, team dues status, and transaction identifiers |
| Gelato | Printing and shipping business cards you order | The print file of your card (which shows whatever you put on it, such as your name, contact details and profile photo) and your shipping name, address, email and phone number |
| Apple | In-App Purchase in the iPhone app (subscriptions, Teams) | Apple handles your payment details; we receive Apple-signed purchase records (product, dates, price, currency, App Store country) and an anonymous account token that ties a purchase to your Gig account |
| Apple / Google | Platform services (App Store, Maps) | As required by the platform |
| komoot Photon (OpenStreetMap data) | Place search and place names when your device can't look them up itself (for example, when location access is off) | The place-search text you type; map coordinates rounded to about 100 m |
AI processing. The AI features above are performed by Anthropic on our behalf. Only the text needed for each task is sent, together with the language to translate into; Anthropic's commercial terms do not permit it to use this data to train its models. Translated text is stored by us so the same text isn't sent again. Scam screening is a safety feature that applies to all chat messages and job-request replies that match our risk patterns.
These processors are contractually required to use your data only for the purposes we specify and to maintain appropriate security. The exception is the public place-search service (komoot Photon), which we use without a contract and which receives only the rounded, non-identifying data described above, sent from our servers rather than your device.
We may disclose information when we believe in good faith it is necessary to (a) comply with law, subpoena, or court order; (b) protect the rights, property, or safety of Gig, our users, or the public; (c) investigate fraud or violations of our Terms; or (d) respond to a government request.
If you approve a connection for an AI assistant (for example, Meta Muse), that assistant can access, on your behalf, the Gig information you could see in the app through the features it uses: search results and public profiles, your conversations and messages, your job requests and job offers and the responses to them, and your own profile (including payment handles) and listings, which it can also change or delete. That information is then handled by the assistant's operator under its own privacy policy. We keep a record of each connection (the assistant's name, when you approved it and when it was last used), and you can disconnect it at any time in the app.
If we are involved in a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change in ownership.
| Data Type | Retention |
|---|---|
| Account & profile | Until account deletion |
| Messages | Until you or the other party deletes, or account deletion |
| Membership, subscription & team payment and earnings records | Retained as required for financial, tax, and audit purposes (typically 7 years), even after account deletion, no longer linked to your deleted profile |
| Business card photos and logos you upload | Until you remove them from your card or delete your account (we keep your 20 most recent) |
| Business card orders | The card design and print file are deleted 90 days after the order ships or ends. The order, its amount and the shipping details are kept as transaction records (typically 7 years), no longer linked to your deleted profile |
| Ratings & reviews | Until account deletion (reviews you wrote and reviews written about you are deleted with your account) |
| Logs & usage data | Up to 24 months |
| Tax/transaction records | As required by law (typically 7 years) |
We use encryption in transit (TLS) and at rest, hashed passwords, parameterized database queries, role-based access controls, and regular security reviews. No system is 100% secure; you use the Service at your own risk. Promptly notify us at the email above if you believe your account has been compromised.
You have the right to (a) know what personal information we collect, use, and disclose; (b) request deletion; (c) request correction; (d) opt out of sale or sharing (we do not sell or share for cross-context behavioral advertising); (e) limit use of sensitive personal information; and (f) not be discriminated against for exercising these rights. Submit requests to the email above. We will verify your identity before responding.
You have the right to access, rectify, erase, restrict processing, object to processing, withdraw consent, and data portability. You also have the right to lodge a complaint with your local supervisory authority. International transfers of your data are made under appropriate safeguards (Standard Contractual Clauses where applicable).
Nevada residents may direct us not to sell certain personal information. We do not sell personal information as defined by Nevada law.
The Service is intended for users 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us personal information, contact us and we will delete it.
We are based in the United States. When you use the Service from outside the U.S., your information may be transferred to and processed in the U.S. and other countries where our service providers operate. By using the Service, you consent to such transfers.
The Service does not respond to Do Not Track signals. We do not track users across third-party websites for behavioral advertising.
We may update this Privacy Policy from time to time. Material changes will be announced in the app and/or by updating the "Last updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
Right Image Digital
Email: isaac@rightimagedigital.com