allGigs is a job search and business development platform for freelancers, and the trading name of the service described here. This policy explains what personal data we hold about you, why we hold it, and what you can do about it; it applies to allgigs.ai and to your allGigs account. We are the controller of that data, and support@allgigs.nl reaches us for any question or request about it.
What we collect
We collect the information needed to run and secure your account, plus our own record of how allGigs is used. Optional Google Analytics is collected only after you allow it:
Account: your email address, your password, and whether your email has been verified. Passwords are stored only as an Argon2 hash, so we never hold the password itself.
Profile: your name, professional headline, city, region and country, timezone, availability, career summary, and any contact email addresses or phone numbers you add.
Professional details: work experience, education, certifications, skills, industries, domain expertise, methodologies, compliance types, website links, and your work preferences such as rates, engagement types and preferred locations. Profile photos are stored too, though photo upload is currently switched off.
Sign-ins: every attempt to sign in is recorded with your IP address, browser user agent, the time, and whether it succeeded. This is how we spot and block attacks on your account.
Product usage: while you are signed in, we record the actions you take on allGigs — searching, saving a job, writing a note, opening a listing, and the like — together with your account, IP address, browser user agent and the time. Account steps such as registering, verifying, signing in and resetting a password are counted too. This record is kept on our own servers for at most one year, uses no cookies beyond the one that signs you in, is never shared, and is not used for advertising. It does not depend on the cookie choice below, which covers Google Analytics only.
Optional usage analytics: after you choose Allow, Google Analytics may receive the pages and features you use, your interactions, a random browser identifier, browser and device information, and an approximate area derived from your IP address. Analytics must not receive account details, form contents, email addresses, authentication codes or tokens.
Marketing email choice: whether you agreed to receive product news and tips by email, when you answered, and which screen you answered on. We record a decline as well as an agreement, so that we know you were asked and do not keep asking.
We do not collect payment or billing details, because allGigs does not process payments. The job listings you search come from public job boards and contain no data about you.
Why we collect it
We use your account details to sign you in and keep your account secure, and your profile and professional details to match you to relevant gigs and to build the profile you choose to share. Sign-in records exist purely for security. Our legal bases are the contract you enter into when you create an account, our legitimate interest in keeping the platform secure and in understanding how allGigs is used so we can improve it — which is what the product-usage record above exists for — and your consent for optional Google Analytics and for marketing email. Marketing email is sent only to people who have agreed to it: verifying your address is not treated as agreement, and you can change your answer at any time. We do not sell your data, use analytics for advertising, or profile you for anyone else.
Who we share it with
Nobody buys your data from us. We rely on a small number of processors to run the service: Google Cloud Platform hosts the application, database and file storage in the EU region europe-west4; Brevo sends transactional email such as verification and password-reset messages, and — only if you agree to marketing email — also holds a marketing contact record for you containing your email address, your name, and your date of birth and gender if you have added them to your profile; and, only after you consent, Google Analytics processes usage analytics. We will also disclose data where the law requires it.
Sending data outside Europe
Some of our providers, including Google, may process data outside the European Economic Area. Where an adequacy decision does not apply, their contractual safeguards include the European Commission's standard contractual clauses. If you would like a copy or more information, email support@allgigs.nl.
How long we keep it
We keep account and profile data for as long as your account exists. The product-usage record is kept for at most one year; deleting your account erases the whole record at once, together with everything else. Deleting your account signs you out immediately and stops all access at once. If you change your mind, email support@allgigs.nl within 14 days and we can restore it. All of your account data is permanently deleted within 30 days of your deletion request. Your marketing email choice is kept with your account for as long as the account exists, including a record of a withdrawal, so that we can show we honoured it; turning marketing email off removes you from our Brevo mailing list, and it does not stop the emails you need to use your account. Google Analytics user-level and event-level data is configured for two months. Analytics cookies may otherwise last up to two years, but we remove them when you withdraw and ask for consent again after six months. Each pseudonymous consent receipt is deleted two years after its latest recorded decision.
Your rights under the GDPR
You have the right to access the data we hold about you, to correct it, to have it erased, to receive a copy in a portable format, and to object to how we use it. You can edit most of your profile yourself while signed in. You can withdraw analytics consent at any time with the Manage my cookies button at the top of this page, without losing access to allGigs; email support@allgigs.nl is also available. You can turn marketing email on or off at any time from the Account section of your profile page, in one click and without giving a reason — withdrawing is as easy as agreeing, and takes effect whether or not you ever agreed. For anything else, email us and we will respond within one month. If you are unhappy with how we have handled your data, you can complain to your national data protection authority.
Cookies and browser storage
The essential storage below keeps allGigs working. Google Analytics storage is optional and remains off unless you actively choose Allow.
Staying signed in: a cookie named _session holds the signed token that identifies your account. Scripts cannot read it, and it expires after seven days. Without it you could not stay signed in.
Language: a cookie named localePreference records whether you chose English, Dutch or French. It is written only when you actively pick a language, it holds nothing but that choice, and it lasts a year.
Appearance: whether you prefer light or dark mode is saved in your browser's local storage. It stays on your device.
Work in progress: while you are filling in onboarding or searching for gigs, your progress is held in your browser's session storage. Onboarding progress includes the name, headline and location you have typed so far. All of it is cleared when you close the tab.
One visit: a random id in your browser's session storage groups the actions you take in a single visit. It says nothing about you, is never shared, and is cleared when you close the tab.
Your analytics choice: local storage remembers your choice, the notice version, language, time and validity, and the random receipt ID returned after a grant. The backend receipt records only that random ID, the analytics purpose, notice version and language, grant and expiry times, and any withdrawal time. Choosing No thanks is counted only as an anonymous event holding the time, notice version and language, with no identifier at all. Neither record is linked to your account, IP address or browser details.
Google Analytics: after consent, first-party cookies named _ga and _ga_* distinguish one browser from another so visits and interactions can be counted. They may last up to two years. Google Tag Manager loads the consent-controlled analytics tag; advertising and personalisation storage remain disabled.
The session cookie and your chosen language, appearance and in-progress storage are necessary or requested settings and do not rely on consent. Optional analytics does. Use the Manage my cookies button at the top of this page — the Privacy & cookies link in the footer or dashboard brings you here — at any time to allow it, keep it off, or withdraw. Withdrawal takes effect in this browser immediately; if the receipt service is temporarily unavailable, the withdrawal is retried while analytics remains off.