GigToolbox

NULLBYTE AUTOMAÇÃO E DESENVOLVIMENTO LTDA (CNPJ 54.621.428/0001-80) ("Company," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the GigToolbox platform and related services (collectively, the "Service").

By accessing or using our Service, you agree to the collection and use of your information in accordance with this Privacy Policy and our Terms of Service.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

• First name
• Last name
• Email address
• Date of birth
• Account preferences and settings

1.2 Third-Party Platform Integration Data

To enable our automation tools to work with gig economy platforms, we collect:

• Login Credentials: Username and password for third-party platforms (passwords are not stored - see Section 4.1)
• Authentication Tokens: Generated tokens that allow our tools to access third-party platforms on your behalf
• Profile Information: Phone numbers, profile pictures, and other account details as required by specific platforms
• Location Data: GPS coordinates and location information necessary for gig work automation
• Platform-Specific Data: Order history, earnings data, vehicle information, and other data required for tool functionality

1.3 Usage Information

We automatically collect:

• Service usage patterns and feature interactions
• Technical information about your device and browser
• IP address and general location information
• Error logs and performance data

1.4 Communication Data

When you contact us, we collect:

• Support ticket content and correspondence
• Feedback and survey responses

2. How We Use Your Information

2.1 Service Provision

We use your information to:

• Provide and maintain our automation tools
• Connect to authorized third-party gig platforms on your behalf
• Process your requests and execute automated tasks
• Manage your account and subscription

2.2 Communication

We may use your email address to:

• Send important service updates and security notifications
• Provide customer support responses
• Notify you of significant changes to our Service or policies
• Note: We do not send marketing emails or promotional materials

2.3 Service Improvement

We use aggregated and anonymized data to:

• Improve our Service functionality and performance
• Develop new features and tools
• Conduct internal analytics and research

2.4 Legal Compliance

We may use your information to:

• Comply with applicable laws and regulations
• Respond to legal requests and prevent fraud
• Protect our rights and the rights of our users

3. Legal Basis for Processing

Under Brazilian General Data Protection Law (LGPD) and other applicable data protection laws, we process your personal data based on:

• Consent: When you explicitly authorize us to connect to third-party platforms
• Contract Performance: To provide the services you've subscribed to
• Legitimate Interest: To improve our Service and ensure security
• Legal Obligation: To comply with applicable laws and regulations

4. Data Storage and Security

4.1 Password Security

We do not store your third-party platform passwords. Instead:

• Passwords are used only to generate secure authentication tokens
• Passwords are immediately discarded after token generation
• Only encrypted authentication tokens are stored on our servers

4.2 Encryption and Security Measures

We implement industry-standard security measures including:

• Data Encryption: All sensitive data is encrypted both in transit and at rest using AES-256 encryption
• Secure Servers: Our servers are hosted in secure facilities with physical and network security controls
• Access Controls: Strict access limitations ensure only authorized personnel can access user data
• Regular Security Audits: We conduct regular security assessments and vulnerability testing

4.3 Data Location

Your data is stored on secure servers. We ensure that all international data transfers comply with applicable data protection laws.

5. Data Sharing and Disclosure

5.1 Third-Party Platforms

We share your information only with:

• Third-party gig platforms you have explicitly authorized us to connect to
• The specific data shared is limited to what's necessary for our tools to function on your behalf

5.2 Service Providers

We may share limited data with trusted service providers who assist in:

• Payment processing (Stripe)
• Server hosting and maintenance
• All service providers are bound by strict confidentiality agreements

5.3 Legal Requirements

We may disclose your information when required to:

• Comply with applicable laws, regulations, or legal processes
• Protect our rights, property, or safety, or that of our users
• Investigate and prevent fraud or security issues

5.4 No Other Sharing

We never sell, rent, or share your personal information with other third parties for marketing purposes.

6. Cookies and Tracking Technologies

6.1 Essential Cookies

We use essential cookies that are necessary for our Service to function properly:

• Session Management: To maintain your login status and preferences
• User Preferences: To remember your settings like website theme and language
• Security: To protect against unauthorized access and maintain security

6.2 Cookie Management

Essential cookies cannot be disabled as they are crucial for:

• Maintaining your authenticated session
• Preserving your account preferences
• Ensuring proper Service functionality

6.3 Third-Party Cookies

We do not use third-party tracking cookies or analytics services that collect personal information for any purposes.

7. Your Rights and Choices

7.1 Access and Portability

You have the right to:

• Access all personal data we have collected about you
• Request a copy of your data in a machine-readable format
• View your data through your user dashboard

7.2 Correction and Updates

You can:

• Update your account information at any time through your dashboard
• Request correction of inaccurate personal information
• Modify your third-party platform connections

7.3 Deletion

You have the right to:

• Delete your account at any time through your user dashboard
• Note: Account deletion is immediate and irreversible, resulting in complete data removal

7.5 Exercising Your Rights

To exercise these rights, contact us through the means provided in our Help center.

8. Data Retention

8.1 Active Accounts

We retain your personal data for as long as:

• Your account remains active
• You maintain subscriptions to our tools
• It's necessary to provide our Service

8.2 Inactive Accounts

For inactive accounts (no active subscriptions):

• Account data is retained for convenience in case of resubscription
• You may request immediate deletion at any time

8.3 Deletion Upon Request

When you delete your account or request data deletion:

• Personal data is immediately and permanently removed from our active systems
• Legal or regulatory requirements may require retention of certain data

9. International Data Transfers

9.1 Cross-Border Processing

Your data may be processed in countries other than your own. We ensure:

• All transfers comply with applicable data protection laws
• Appropriate safeguards are in place to protect your data
• Transfer agreements include adequate data protection clauses

9.2 Adequacy and Safeguards

For transfers to countries without adequacy decisions, we implement:

• Standard contractual clauses approved by data protection authorities
• Additional technical and organizational security measures
• Regular monitoring of transfer arrangements

10. Children's Privacy

10.1 Age Restrictions

• Our Service is not intended for individuals under 18 years of age
• We do not knowingly collect personal information from minors
• We reserve the right to deny service to anyone we suspect is underage

10.2 Parental Notice

If we become aware that we have collected personal information from a child under 18:

• We will take immediate steps to delete such information
• Parents or guardians may contact us to request deletion of their child's information

11. Changes to This Privacy Policy

11.1 Policy Updates

We reserve the right to modify this Privacy Policy at any time. When we make changes:

• The updated Privacy Policy will be posted in our Help Center
• The "Last Updated" date will reflect the most recent changes
• Material changes will be prominently displayed

11.2 Continued Use

Your continued use of our Service after any changes constitutes acceptance of the updated Privacy Policy.

12. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the means provided in our Help center.

Company Information: NULLBYTE AUTOMAÇÃO E DESENVOLVIMENTO LTDA; CNPJ: 54.621.428/0001-80; São Paulo, Brazil

13. Regulatory Information

This Privacy Policy is designed to comply with:

• Brazilian General Data Protection Law (LGPD)
• European General Data Protection Regulation (GDPR) for EU users
• California Consumer Privacy Act (CCPA) for California residents
• Other applicable international data protection laws

If you are a resident of the EU, California, or other jurisdictions with specific data protection rights, additional protections may apply. Please contact us for jurisdiction-specific information.