GigHQ.ai Privacy Policy
Your career data belongs to you. We are committed to processing your personal information responsibly, powering transparent AI features, and protecting your data rights across all GigHQ.ai services.
Introduction
This Privacy Policy describes how GigHQ.ai, Inc. (“GigHQ.ai,” “we,” “us,” or “our”) collects, uses, discloses, and protects Personal Information in connection with our website, web application, browser extension, Model Context Protocol (“MCP”) server, and related services (collectively, the “Services”).
These Services are intended for individuals 18 years of age or older, consistent with our Terms of Service. See Section 11 (Children’s Privacy).
EU/UK/Swiss Users: If you are located in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR or UK GDPR described in Section 9.
California, Nevada, Colorado, Connecticut, Virginia, and other U.S. State Users: If you are a resident of a U.S. state with a comprehensive privacy law, you have rights described in Section 10, including the right to opt out of the sale or sharing of your Personal Information.
Definitions
To ensure clarity across this Policy, the following key terms are defined as follows:
Information We Collect
3.1 Information you provide directly
- Account information: Name, email address, password, and account settings.
- Career data: Resumes, work history, education, skills, career journal entries, job application records, notes, and related documents you upload or create in GigHQ.ai.
- Communications: Information you provide when you contact support or respond to surveys.
3.2 Information collected automatically
- Device and usage data: IP address, browser and device type, operating system, referring URLs, pages viewed, and timestamps.
- Browser extension activity: Job postings and application data you capture through the GigHQ.ai browser extension.
3.3 Information generated through AI features and the MCP server
When you use GigHQ.ai’s AI-assisted features (for example, Career Compass or Match Score), we process your career data using our AI infrastructure providers to generate insights, suggestions, and analysis.
If you connect the GigHQ.ai MCP server to a third-party AI assistant (such as Claude or ChatGPT) that you separately control, GigHQ.ai transmits the portions of your data necessary to fulfill your request to that third-party assistant, in accordance with your instructions. That third party’s own privacy policy governs its handling of your data once received; GigHQ.ai is not responsible for that third party’s practices.
3.4 Information from third-party sources
We may supplement the information above with information from public sources (e.g., publicly available professional profiles) and business-contact data providers, solely to help verify or enrich employer and company information within Job Market Radar — not to build profiles of individual Job Seekers beyond what you provide directly.
3.5 Analytics and cookies
We use cookies, web beacons, and similar technologies, including Microsoft Clarity, to understand how you use the Services and to improve our product. See Section 6 for details and your choices. Our Site does not currently respond to browser “Do Not Track” signals, though CCPA/CPRA opt-out preference signals (e.g., Global Privacy Control) are honored as described in Section 10.
How We Use Your Information
We use Personal Information to:
- Provide, operate, and maintain the Services, including job application tracking, career journal, browser extension, MCP server integration, and coach/organization dashboard features;
- Power AI-assisted features, including generating career insights and matching candidates to opportunities;
- Communicate with you about your account, updates, and support requests;
- Improve and develop new features, through aggregated or de-identified analysis;
- Detect, prevent, and investigate fraud, abuse, and security incidents;
- Comply with legal obligations; and
- With your consent, send marketing communications, which you may opt out of at any time.
We do not use your career data to train third-party foundation models. Where GigHQ.ai uses AI service providers to power in-product features, those providers are bound by contract not to use your data to train their own models, except where you separately connect a third-party AI assistant under Section 3.3, which is governed by that provider’s own terms.
How We Share Information
5.1 Service providers
We share Personal Information with vendors who perform services on our behalf, including cloud hosting, AI processing, analytics, email delivery, and payment processing, under contracts that limit their use of your data to providing services to us.
5.2 Employer and WDO partners — opt-in only
GigHQ.ai may share your candidate profile with prospective employer or workforce development organization (“WDO”) partners as part of our institutional matching features, but only where you have affirmatively opted in through your account settings. You may withdraw this opt-in at any time. GigHQ.ai does not share your profile with employer or WDO partners by default.
5.3 Aggregate and de-identified data
We may share aggregated or de-identified data (for example, in Job Market Radar) that does not identify you, for any lawful business purpose.
5.4 Legal and safety
We may disclose Personal Information where required by law, subpoena, or legal process, to protect the rights, safety, or property of GigHQ.ai or others, or to investigate fraud or security incidents.
5.5 Business transfers
If GigHQ.ai is involved in a merger, acquisition, financing, or sale of assets, Personal Information may be disclosed to counterparties and transferred to a successor, subject to this Privacy Policy or a policy providing at least equivalent protections.
5.6 No sale of Personal Information
GigHQ.ai does not sell your Personal Information for money. We do not share your Personal Information for cross-context behavioral advertising. If either practice changes, we will update this Policy and provide the opt-out mechanisms required by applicable law, described in Section 10.
Cookies and Analytics Technologies
We use the following categories of tracking technology:
Where required by law, we will request your consent before setting non-essential cookies, and provide a mechanism to withdraw that consent at any time.
Data Retention
We retain Personal Information for as long as your account is active, and for a reasonable period afterward to comply with legal obligations, resolve disputes, and enforce our agreements. Specifically:
Data Security
We use administrative, technical, and physical safeguards designed to protect Personal Information from unauthorized access, use, or disclosure, including encryption in transit and access controls.
No system can be guaranteed 100% secure. If we experience a security incident affecting your Personal Information, we will notify you and any applicable regulators as required by law.
Your Rights — EU, UK, and Swiss Users (GDPR)
If you are located in the EEA, UK, or Switzerland, you have the following rights under GDPR:
Legal Bases for Processing: Performance of a contract with you, our legitimate interests in operating and improving the Services, your consent (for marketing and non-essential cookies), and compliance with legal obligations.
Where we transfer Personal Information outside the EEA/UK, we rely on the European Commission’s Standard Contractual Clauses (SCCs) or another lawful transfer mechanism. To exercise these rights, contact us using Section 13 details. You also have the right to lodge a complaint with your local data protection authority.
Your Rights — U.S. State Privacy Laws
If you are a resident of California, Nevada, Virginia, Colorado, Connecticut, or another U.S. state with a comprehensive privacy law, you may have the right to:
- Know what Personal Information we have collected, used, disclosed, and (if applicable) sold or shared about you;
- Delete Personal Information we hold about you, subject to certain exceptions;
- Correct inaccurate Personal Information;
- Opt out of the sale or sharing of Personal Information, and out of targeted advertising — GigHQ.ai does not currently sell Personal Information or use it for cross-context behavioral advertising, so there is nothing to opt out of today, but we provide the mechanism below in case this changes;
- Not be discriminated against for exercising these rights; and
- (California) Limit the use of Sensitive Personal Information, and designate an authorized agent to submit requests on your behalf.
GigHQ.ai automatically recognizes and honors the Global Privacy Control (GPC) signal as a valid opt-out preference signal for California residents. We respond to all verified consumer requests within 14 business days (extendable once by an additional 14 business days when reasonably necessary).
Children’s Privacy
The Services are intended for individuals 18 years of age or older and are not directed to children. We do not knowingly collect Personal Information from anyone under 18. If we learn that we have collected Personal Information from someone under 18, we will delete it promptly.
If you believe a minor has provided us with Personal Information, please contact us immediately at Section 13 address.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised Policy on our Site and update the “Effective Date” above.
If we make a material change, we will provide notice — such as an email or in-product notice — at least 14 days before the change takes effect, and will obtain your consent first where required by applicable law.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Privacy & Compliance Team:
Submit privacy questions, data access requests, or deletion requests directly to our compliance officer. We respond within 14 business days.
