Privacy policy

01Who we are

GigSyc is a workforce platform operated from Kigali, Rwanda. Businesses (partners) post short-term shifts, and verified workers (Talents) find and work them through the GigSyc app. GigSyc is the data controller for the personal data described here.

Questions about this policy or your data: support@gigsyc.com.

02What we collect

• Account details: name, email address, phone number, password (stored only as a one-way hash), and your role on the platform.
• Talent profile: skills, languages, headline, availability, home area and city, and an optional map pin of your home area.
• Identity verification: photos of your national ID or passport and any other document you submit so GigSyc staff can confirm who you are.
• Location: your current position while you choose to share it, used to show shifts near you and to help a partner or Captain find you on the day. You can turn sharing off at any time in the app.
• Work history: the shifts you apply for and work, check-ins, ratings, substitute requests, Captain appointments and reports made about a shift.
• Money: your earnings, payout schedule and payout destination. Mobile money and bank account numbers are stored encrypted and shown masked.
• Partner details: organisation name, address, tax identification number, billing contact, invoices and signed agreements.
• Device and usage data: the device you signed in from, push notification tokens, and technical logs that keep the service secure.

03Why we use it

We rely on the contract between you and GigSyc, our legal obligations, your consent where the law requires it (for example location sharing), and our legitimate interest in running a safe service.

• To run the platform: matching Talents to shifts, confirming crews, check-in by QR code, ratings and payouts.
• To verify identity and keep the community safe for both partners and Talents.
• To send the emails and notifications the service depends on: verification codes, shift confirmations, reminders, payout notices and decisions on your requests.
• To issue invoices and agreements, calculate pay and taxes, and meet legal and accounting duties.
• To prevent fraud, abuse and misuse of the platform, and to handle reports and disputes.

04Who sees your data

We never sell personal data and we do not use it for third-party advertising.

• Partners see the profile of Talents who apply to or work their shifts: name, photo, skills, languages, ratings and reliability, and the phone number once a Talent is confirmed on a shift.
• Captains (lead Talents appointed on an event) see the crew of that event, including names and phone numbers, to run the shift.
• Service providers that process data on our behalf: email delivery (Brevo), push notifications (Google Firebase), file storage (DigitalOcean), payments and payouts (XentriPay, licensed by the National Bank of Rwanda), and our hosting provider. Each one is bound to use the data only for the service it provides.
• Authorities, when the law requires it, for example tax reporting or a lawful request.

05How long we keep it

Account and work data are kept while your account is active and for the period required afterwards by Rwandan accounting and tax law, which is generally ten years for financial records.

Identity documents are kept while your account is active and deleted within 30 days of its closure, unless a dispute or legal obligation requires us to keep them longer.

Location data is kept only as the latest shared position; it is replaced each time you share and removed when you stop sharing.

06Your rights

Under Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy, you may ask to see the data we hold about you, correct it, have it deleted, restrict or object to how we use it, and receive a copy in a portable format. You may also withdraw consent, for example by turning off location sharing.

Write to support@gigsyc.com and we will answer within 30 days. If you are not satisfied, you may complain to the National Cyber Security Authority (NCSA), the supervisory authority in Rwanda.

07Security

All traffic is encrypted in transit. Passwords are hashed, payout numbers are encrypted at rest, identity photos are stored in private storage reachable only through short-lived links, and access by GigSyc staff is logged.

08Cookies

The website uses one strictly necessary cookie to keep you signed in. There are no advertising or tracking cookies.

09Children

GigSyc is for people aged 18 and over. We do not knowingly collect data from anyone younger.

10Changes

When this policy changes in a way that matters to you, we will tell you in the app or by email before the change takes effect. The date at the top shows the current version.