Legal
Plain English first, legal precision second. Most of our users are students, many under 18, so this policy is written to be readable by the people it protects. Effective July 28, 2026. Updated August 20, 2026.
Your career record belongs to you. We collect what the product needs to work, we never sell personal information, we never show ads, and we delete your data when you ask. Students under 13 need verifiable parental consent. Schools that deploy Gigsup control their students' educational records, and we act on their instructions.
Gigsup Inc. ("Gigsup", "we") operates joingigsup.com and the Gigsup applications. We are a Canadian company. For anything in this policy, contact hey@joingigsup.com. Our designated Privacy Officer (PIPEDA) can be reached at the same address with the subject line "Privacy Officer".
Account and profile. Name, email, grade or education stage, school, city and province/state. Why: the product personalizes plans by jurisdiction and stage.
Career record ("career wallet"). VISI assessment responses and results, aptitude game results, journal entries, courses and grades you enter, activities, work experience, portfolio items, applications and their statuses. Why: this is the product. It exists to serve you, and it is yours.
Optional connections. If you use Computer Sync we read file names only, never file contents. If you import a résumé or LinkedIn text, we extract skills from the text you paste.
Technical basics. Log data and device information needed to run and secure the service. We do not use advertising trackers, and we do not use third-party advertising cookies. There is no ad-based analytics on student surfaces.
We never sell personal information. We never use student data for targeted advertising. We never build advertising profiles of minors. We never message students on behalf of third parties.
Students 13 and over may hold accounts. Where school deployment applies, notice goes to parents through the school. Parents of students under 18 can request access visibility through the Parent Portal; a student's consent settings control what a parent sees, consistent with the maturing-minor principle, and school policies where a school governs the account.
Access everything we hold about you (most of it is visible in the product already), correct it, export it, and delete it. Withdraw any consent at any time.
Your career record persists while your account is active because longitudinal history is the product's value to you. Delete your account and we delete the record, keeping only what law requires (for example, financial records of purchases). School-deployment data follows the retention schedule in the school's agreement, and is deleted or returned at contract end.
Encryption in transit and at rest, access on a need-to-know basis, logging of administrative access, and vendor due-diligence on any subprocessor. Subprocessors are listed in our subprocessor register and bound to these same commitments. If a breach creates a real risk of significant harm we notify affected users, schools, and the appropriate regulator without unreasonable delay, as .
If we change this policy in a way that matters, we tell you in the product and by email before it takes effect. For school deployments, material changes require school notice per the agreement.
This document is a working draft prepared for review by qualified counsel in Canada and the United States before public launch. It is not legal advice.