Privacy Policy · GigProof

This Privacy Policy explains how the TalkyTools team (“we”, “us”, “GigProof”) collects, uses, and protects your personal data when you use GigProof. It applies to all visitors and account holders. We are committed to handling your data lawfully and minimally.

1. Information we collect

Account data — name, email, password hash, and optional profile details you provide.
Usage data — pages visited, features used, device and browser metadata, and approximate location derived from IP.
Content you submit — forms, files, messages, and other data you actively enter into GigProof.
Billing data — handled by our payment processors (Razorpay for INR, Stripe for USD). We never see or store your full card number.
Cookies — strictly necessary cookies for login and CSRF protection; optional analytics cookies only with your consent.

2. How we use your information

To provide, maintain, and improve GigProof.
To authenticate you and keep your account secure.
To process payments and send transactional emails (receipts, password resets, security alerts).
To detect abuse, fraud, and violations of our Terms of Service.
To comply with legal obligations under the laws of India.

3. Legal basis (GDPR / DPDP Act)

We process your personal data on one of the following bases: performance of a contract with you, your consent (e.g. marketing emails), our legitimate interests (e.g. fraud prevention), or compliance with a legal obligation. Under India’s Digital Personal Data Protection Act, 2023, you are a “Data Principal” and we are a “Data Fiduciary”.

4. Sharing & sub-processors

We do not sell your personal data. We share it only with vetted sub-processors that help us operate GigProof:

AWS / cloud hosting — application + database hosting.
Razorpay and Stripe — payment processing.
Resend — transactional email delivery.
Analytics providers — only if you have accepted analytics cookies.

We may also disclose data when legally required (subpoena, court order) or to protect the safety of our users and the public.

5. Data retention

We retain account data for as long as your account is active, and for a reasonable period afterward to comply with tax, accounting, and legal obligations (typically up to 8 years for financial records in India). You can request deletion at any time (see Section 7).

6. Security

We use HTTPS everywhere, hashed passwords (bcrypt / argon2), encryption at rest, principle-of-least-privilege access controls, and audit logging. No system is perfectly secure — please use a strong, unique password and enable two-factor authentication where offered.

7. Your rights

Depending on your jurisdiction, you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Delete your account and associated data.
Withdraw consent for optional processing.
Port your data in a machine-readable format.
Lodge a complaint with the Data Protection Board of India or your local supervisory authority.

To exercise any of these rights, email privacy@talkytools.com. We respond within 30 days.

8. Children

GigProof is not directed at children under 18. We do not knowingly collect personal data from minors. If you believe we have, please contact us and we will delete it.

9. International transfers

Our infrastructure is primarily hosted in India (AWS Mumbai). Some sub-processors may transfer data to other jurisdictions; in those cases we rely on standard contractual clauses or equivalent safeguards.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via email or an in-app notice at least 14 days before they take effect.

11. Contact

Questions, requests, or complaints? privacy@talkytools.com.