Legal
Plain English first, legal precision second. Most of our users are students, many under 18, so this policy is written to be readable by the people it protects. Effective July 28, 2026. Updated November 3, 2026.
Your career record belongs to you. We collect what the product needs to work, we never sell personal information, we never show ads, and we delete your data when you ask. Students under 13 need verifiable parental consent. Schools that deploy Gigsup control their students' educational records, and we act on their instructions.
GIGSUP AI INC. ("Gigsup", "we") operates joingigsup.com and the Gigsup applications. We are a Canadian company. For anything in this policy, contact hey@joingigsup.com. Our designated Privacy Officer (PIPEDA) can be reached at the same address with the subject line "Privacy Officer".
Account and profile. Name, email, grade or education stage, school, city and province/state. Why: the product personalizes plans by jurisdiction and stage.
Career record ("career wallet"). VISI assessment responses and results, aptitude game results, journal entries, courses and grades you enter, activities, work experience, portfolio items, applications and their statuses. Why: this is the product. It exists to serve you, and it is yours.
Optional connections. If you use Computer Sync we read file names only, never file contents. If you import a résumé or LinkedIn text, we extract skills from the text you paste.
Technical basics. Log data and device information needed to run and secure the service. Inside the student, parent and counsellor portals we use no advertising trackers or advertising cookies. Our public marketing pages use them only after you choose Accept, as described below: in Canada outside Quebec and in the United States under "Your privacy choices" in the footer; in Quebec and outside Canada and the United States in the cookie banner.
We never sell personal information. We never use student data for targeted advertising. We never build advertising profiles of minors. We never message students on behalf of third parties.
Students 13 and over may hold accounts. Where school deployment applies, notice goes to parents through the school. Parents of students under 18 can request access visibility through the Parent Portal; a student's consent settings control what a parent sees, consistent with the maturing-minor principle, and school policies where a school governs the account.
Essential cookies keep you signed in and are always on. On our public marketing pages only, we use Google Analytics, Google Ads, the Meta Pixel, the TikTok Pixel and the LinkedIn Insight Tag to understand which pages help and to measure our advertising. In Canada outside Quebec and in the United States there is no cookie banner. Google Analytics and Google Ads run cookieless on these pages until you choose Accept under "Your privacy choices" in the footer, in Google's consent mode with every setting denied: they set no cookies and receive only cookieless measurement signals (the page, referring page, browser and device details, and IP address), which Google uses to estimate visits and ad results in aggregate. The Meta Pixel, the TikTok Pixel and the LinkedIn Insight Tag load there only if you choose Accept under "Your privacy choices". We honour Global Privacy Control: if your browser sends it, the Meta, TikTok and LinkedIn tags never load and Google stays cookieless. In Quebec, if your browser is set to French, outside Canada and the United States, or if we can't tell where you are, a cookie banner asks first and nothing loads until you choose Accept. When a form is submitted after you choose Accept we also send the same conversion to Meta and TikTok from our server, with your email hashed, so the two do not double count. When an account is created, our server also tells Google Analytics that a sign-up happened and which ad or link led to it, without your name, email, date of birth, IP address or account; for anyone under 19 it records only whether the sign-up came from an ad. If you are 19 or older and accepted cookies, the sign-up is linked to your visit and, if you came from a Google ad, reported to Google Ads with only the ad's click ID. None of this loads inside the student, parent or counsellor portals, none of it is ever tied to a student's name, school, grade or quiz answers, and you can change your choice any time under "Your privacy choices" in the footer of any public page or, once signed in to the student portal, under "Account & plan", then "Cookies and analytics" on the Account tab. Your choice is kept for six months.
Access everything we hold about you (most of it is visible in the product already), correct it, export it, and delete it. Withdraw any consent at any time.
Your career record persists while your account is active because longitudinal history is the product's value to you. Delete your account and we delete the record, keeping only what law requires (for example, financial records of purchases). School-deployment data follows the retention schedule in the school's agreement, and is deleted or returned at contract end.
Encryption in transit and at rest, access on a need-to-know basis, logging of administrative access, and vendor due-diligence on any subprocessor. Subprocessors are listed in our subprocessor register and bound to these same commitments. If a breach creates a real risk of significant harm we notify affected users, schools, and the appropriate regulator without unreasonable delay, as the law requires.
If we change this policy in a way that matters, we tell you in the product and by email before it takes effect. For school deployments, material changes require school notice per the agreement.
This document is a working draft prepared for review by qualified counsel in Canada and the United States before public launch. It is not legal advice.