Privacy Policy

1. Introduction

SprintGigs (“we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

2. Information We Collect

Personal Information

We collect information you provide directly, including:

• Name and email address
• Phone number (for withdrawals)
• Language preference
• Account credentials (password is stored hashed)
• Profile information and avatar

Automatically Collected Information

When you use SprintGigs, we automatically collect:

• IP address and device information
• Browser type and version
• Usage patterns and task interactions
• Session data and cookies

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve our services
• Process transactions and withdrawals
• Verify your identity and prevent fraud
• Send you important account notifications
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We may share data with:

• Payment processors (Telebirr, CBE, Awash Bank) for withdrawals
• Cloud storage providers for file uploads (Cloudinary)
• Law enforcement when required by law

5. Data Security

We implement industry-standard security measures including encryption at rest and in transit, HTTP-only session cookies, CSRF protection, rate limiting, and regular security audits. Your password is hashed using bcrypt/scrypt and never stored in plain text.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and associated data
• Object to processing of your data
• Export your data in a portable format

7. Cookies

We use essential cookies for authentication and session management. We do not use tracking cookies or third-party analytics cookies. You can control cookie settings through your browser preferences.

8. Third-Party Services

SprintGigs uses Cloudinary for file storage and Neon (PostgreSQL) for database hosting. These providers have their own privacy policies and data processing agreements. Google OAuth is available as an alternative login method.

9. Data Retention

We retain your account data for as long as your account is active. Upon account deletion, we remove or anonymize your data within 30 days, except where retention is required by law (e.g., transaction records for tax purposes).

10. Contact

For privacy-related inquiries, contact us at privacy@sprintgigs.me.