Datenschutzrichtlinie

Websites Matter, LLC ("Company," "we," "us," or "our"), a Florida limited liability company, operates the Gigtime application and website (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our Service.

By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account Information: Name, email address, and password when you create an account.
• Profile Information: Optional details you add to your account.
• Time Tracking Data: Time entries, clients, projects, and related notes you create within the Service.
• Communications: Messages you send to us for support or feedback.
• Contact & Newsletter Data: If you contact us or sign up for launch notifications through our website, we collect your name, email, and message on our own servers (Supabase) and forward them to our support inbox by email. Cloudflare Turnstile checks that the form was sent by a person and not a bot. This data is used only to respond to your inquiry or send you updates you requested.

1.2 Information Collected Automatically

• Device Information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage Data: Features used, time spent in the app, clicks, navigation patterns, session duration, and app version.
• Log Data: IP address, browser type, access times, pages viewed, and referring URLs.
• Crash Reports: Technical information about errors and crashes to improve the Service.

1.3 Information from Third Parties

• Payment Processors: Stripe, Apple App Store, and Google Play Store provide transaction confirmation and subscription status. We do not receive or store your full payment card details.
• Authentication Providers: If you sign in using a third-party service (e.g., Google, Apple), we receive basic profile information as permitted by your settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, maintain, and improve the Service
• Process your transactions and manage your subscription
• Sync your data across devices in real-time
• Send service-related communications (account verification, billing, security alerts)
• Respond to your inquiries and support requests
• Display relevant advertisements to free-tier users
• Analyze usage patterns to improve user experience
• Detect, prevent, and address technical issues and security threats
• Send you updates you've opted in to (such as launch notifications)
• Comply with legal obligations

3. Advertising

The free tier of Gigtime displays advertisements. We use the following third-party advertising partners:

• Google AdMob on iOS and Android
• Google AdSense on the web application

These partners may collect device identifiers, cookies (web), and usage data to serve relevant advertisements. We do not share your personal account data or time tracking data with advertisers.

You can opt out of personalized advertising through your device settings:

• iOS: Settings > Privacy & Security > Tracking
• Android: Settings > Privacy > Ads
• Web: Use your browser's cookie settings or install an ad blocker

When invoices are sent via email, we include a tracking pixel (a small transparent image) that notifies the sender when the recipient opens the email. This allows users to see when their clients have viewed an invoice. The tracking pixel records the time of the email open. Invoice recipients can disable this by blocking images in their email client.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

4.1 Service Providers

We share information with third-party vendors who assist in operating our Service:

Provider	Purpose	Data Shared
Supabase	Database, authentication, real-time sync	Account data, user content
Stripe	Payment processing	Email, subscription details
Apple App Store	In-app purchases	Transaction data
Google Play Store	In-app purchases	Transaction data
Google AdMob	Advertising (free tier, mobile)	Device identifiers, usage data
Google AdSense	Advertising (free tier, web)	Cookies, browsing data
Firebase Analytics	Usage analytics	Device info, usage data, cookies (web)
Firebase Crashlytics	Crash reporting	Crash reports, device info
Firebase Cloud Messaging	Push notifications	Device tokens, platform type
Google Analytics	Marketing website analytics	Browsing data, cookies, IP address
SendMatter (Websites Matter, LLC, via Amazon SES)	Transactional email delivery	Email addresses, email content
Reddit Pixel	Marketing conversion tracking	Browsing data, cookies
Cloudflare Turnstile	Spam protection on website forms	IP address, browser and device signals
Google Fonts	Web font delivery	IP address, browser info
Font Awesome (Fonticons, Inc.)	Icon font delivery	IP address, browser info

These providers are contractually obligated to protect your information and use it only for the services they provide to us. We encourage you to review their respective privacy policies.

4.2 Legal Requirements

We may disclose your information if required by law, court order, or governmental authority, or when we believe disclosure is necessary to:

• Comply with legal obligations
• Protect the rights, property, or safety of Websites Matter, LLC, our users, or others
• Detect, prevent, or address fraud or security issues

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity. We will notify you of any such change.

5. Data Retention and Deletion

We retain your information for as long as your account is active or as needed to provide the Service. If you wish to delete your account:

• You can request account deletion from your account settings or by contacting us
• All your data — including time entries, clients, projects, and invoices — will be permanently deleted within 30 days of your request
• Some information may be retained in backups for a limited period
• This action cannot be undone

We may retain anonymized, aggregated data that cannot identify you for analytical purposes. We may also retain certain information as required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance).

For fraud and abuse prevention, we retain your email address in our trial claims database for up to one year after account deletion. This is used solely to prevent repeated free trial abuse and is automatically purged after one year.

6. Data Security

Your data is stored using Supabase, which is built on PostgreSQL and hosted on secure cloud infrastructure. We implement the following security measures:

• Encryption of data in transit (TLS/SSL)
• Encryption of data at rest
• Row-level security (RLS) ensuring users can only access their own data
• Automatic database backups
• Secure authentication practices
• Industry-standard access controls
• Regular security assessments

While we take reasonable measures to protect your data, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.

7. Your Rights and Choices

7.1 Access and Export

You have the right to access and export your data. You can request a copy of your data by contacting us at support@gigtime.app or using the export feature within the Service when available. CSV export is available for Pro users.

7.2 Correction

You can update or correct your account information at any time through the Service settings.

7.3 Deletion

You have the right to request deletion of your account and personal data. To delete your account:

• Use the "Delete Account" feature in the Service, or
• Contact us at support@gigtime.app

Deletion requests will be processed within 30 days. Some information may be retained as described in Section 5.

7.4 Portability

You may request your data in a portable format. CSV export is available for Pro users.

7.5 Marketing Communications

You can opt out of promotional emails by clicking the "unsubscribe" link in any marketing email. You will still receive transactional communications related to your account.

8. International Users and GDPR

8.1 Data Transfers

If you are located outside the United States, your information will be transferred to and processed in the United States, where our servers are located. By using the Service, you consent to this transfer.

8.2 European Economic Area (EEA) Users

If you are in the EEA, UK, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limited processing of your data
• Right to Portability: Receive your data in a portable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at support@gigtime.app. We will respond within 30 days.

8.3 Legal Basis for Processing (EEA Users)

We process your data based on:

• Contract: To provide the Service you requested
• Legitimate Interests: To improve our Service, ensure security, and communicate with you
• Consent: For advertising and marketing where required
• Legal Obligation: To comply with applicable laws

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: We do not sell personal information
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights

To exercise these rights, contact us at support@gigtime.app.

10. Children's Privacy

Gigtime is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from someone under 18, we will take steps to delete it promptly. If you believe a child has provided us with personal information, please contact us at support@gigtime.app.

11. Third-Party Links

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

12. Cookies and Tracking

The Gigtime web application uses cookies and local storage for authentication, session management, analytics, and user preferences such as notification dismissals and usage frequency tracking. Third-party services embedded in the web application — including Google AdSense (advertising) and Firebase Analytics — may also set cookies.

Our marketing website (gigtime.app) uses Google Analytics and Reddit Pixel for traffic analysis and advertising conversion tracking. These services set cookies and collect browsing data.

The mobile application does not use cookies or local storage. Firebase Analytics on mobile uses device identifiers rather than cookies. Advertising partners in the free tier may use device identifiers as described in Section 3.

You can manage cookies and local storage through your browser settings. Disabling cookies or clearing local storage may affect the functionality of the web application.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page
• Updating the "Last updated" date
• Sending an email or in-app notification for significant changes

Your continued use of the Service after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Company: Websites Matter, LLC
• Location: Florida, United States
• Email: support@gigtime.app

For data protection inquiries from the EEA, you may also contact your local data protection authority.