Privacy Policy

Last updated 9 September 2026

This Privacy Policy for ANDRIUKHIN GLEB, doing business as GigAmigo ("we", "us", or "our"), explains how we process personal information when you visit https://gig-amigo.com, sign in to GigAmigo, connect the Chrome extension, prepare resumes, process LinkedIn applications, or contact support.

1. Controller and contact

The data controller is ANDRIUKHIN GLEB, NIF/NIE Z3540405C, at 23 C. del Puerto de Cerredo, Gijón, Asturias 33207, Spain. Privacy questions and rights requests can be sent to support@gig-amigo.com.

2. Information we collect

Account and authentication

• Google account identifier, email address, and basic account metadata used for OAuth sign-in.
• Authentication sessions, security events, account status, theme, and product settings.

Resume and application information

• Uploaded DOCX/PDF resumes, extracted resume text, structured resume fields, and generated base or tailored resume files.
• Vacancy title, company, description, URL/identifier, workplace type, selected resume, tailoring mode, application status, and timestamps.
• Application form questions, available options, AI-generated answer drafts, and answers that you explicitly provide or change.
• Saved answers, including information that may be sensitive depending on the form, such as work authorisation, salary expectations, disability/DEI responses, or other information you choose to confirm.

LinkedIn and outreach information

• The LinkedIn profile identifier linked to the account, public profile details needed for the workflow, and an indication of Premium capabilities.
• Recruiter or job-poster names, public profile URLs, outreach drafts, invitation/message status, connection acceptance state, follow-up state, and related timestamps.
• Normalised LinkedIn identity/profile data read by the extension from your active browser session. We do not ask for your LinkedIn password and do not send raw LinkedIn cookies or the raw Voyager session to our backend.

Extension, device, and usage information

• Extension version, installation/device public key, signed request proofs, session identifiers, revocation state, and security/audit events.
• Usage counters, configured activity limits, compute usage, product errors, IP address, browser/device characteristics, and diagnostic logs necessary to operate and protect the service.

Where the extension runs. The extension has access to HTTP and HTTPS websites. On LinkedIn, it reads the pages and form state needed for Easy Apply and recruiter outreach. On external sites, it checks the page URL before reading vacancy content locally to offer resume tailoring; detection can be disabled for individual sites. A detected vacancy URL may be checked against your account's outreach history to show an existing result. When you start tailoring or outreach, the required vacancy context is sent to our backend and AI providers. You can download the resulting resume or drag it into an employer's upload field; this does not submit the external application. Optional analytics records only selected GigAmigo website pages and our own extension panel, never LinkedIn or external websites.

Optional product analytics

With your consent, PostHog Cloud EU receives an opaque account or visitor identifier, a small set of product outcomes, timestamps, software version, limited campaign tags, and masked recordings of selected website pages and our extension panel. Recordings show interface structure, controls, clicks and cursor movements. Private text, form values and documents are masked or blocked. LinkedIn and other websites are not recorded. We do not send resumes, vacancy descriptions, recruiter messages, email addresses, full URLs, payment card data, console logs or network bodies to PostHog. Events and recordings may be linked to your GigAmigo account to analyse usage and improve the service. Client IP storage and location enrichment are disabled for these analytics.

Billing and support

• Subscription status, plan, billing period, free-trial usage, and the Stripe customer and subscription identifiers. Payment details, including full card numbers, are collected and held by Stripe and are never stored by GigAmigo.
• Messages and attachments you send to support.
• If you choose Telegram support, your Telegram user/chat identifiers, display name, messages, attachments, and the entry point (for example, the website or extension). Account email is optional and supplied by you; the bot does not automatically access your GigAmigo account, resume, browsing history, or diagnostics.

3. How we use information

• create and secure accounts, authenticate website and extension requests, and enforce one LinkedIn identity per account where applicable;
• create, normalise, store, download, and tailor resumes;
• classify user-selected vacancies, prepare application answers, fill forms, and record confirmed outcomes;
• fill and submit LinkedIn Easy Apply forms according to the search rules and activity limits you choose;
• find a relevant recruiter/job poster, draft vacancy-specific outreach, detect accepted connections, and prepare a user-initiated follow-up;
• reuse only answers you explicitly supplied or changed, according to product controls;
• apply activity limits, prevent abuse, investigate errors, revoke compromised sessions, and maintain backups;
• provide support, communicate service or policy changes, process billing, and comply with law.

4. Legal bases

Where the GDPR or UK GDPR applies, we rely on performance of a contract to provide requested product functions; legitimate interests to secure, maintain, and improve the service; consent where required for optional technologies or specific processing; and legal obligations for accounting, consumer, security, and rights requests. You may withdraw consent without affecting earlier lawful processing.

5. AI and automated assistance

Resume text, vacancy context, application questions, selected saved answers, and recruiter context may be sent through our private Openclaw compute gateway to our configured AI model provider, currently DeepSeek, to generate the requested output. GigAmigo uses automated assistance for tailoring, classification, and drafting, but the user chooses search rules and can review, override, pause, or stop actions. The service does not make employment decisions on behalf of employers.

6. Who receives information

• Google: OAuth sign-in.
• PostHog: optional product analytics, heatmaps and masked session replay in its EU Cloud region. You can withdraw consent using Cookie settings in the website footer, on the Cookies page, or in the extension panel.
• Telegram: optional support conversations. Our bot copies your messages and attachments to the product owner's private operator chat and delivers their replies to you. Telegram processes these conversations under its own terms and privacy policy. Support messages are not sent to our AI providers.
• Hosting and infrastructure providers: website, API, database, backups, monitoring, and transactional operations.
• Openclaw and DeepSeek: our private compute gateway and current task-scoped AI model provider for resume, vacancy, answer, and outreach generation.
• LinkedIn: information and files that the extension submits at your direction in your active browser session.
• Stripe: our payment processor for subscriptions. When you start checkout, Stripe collects and processes your payment details, billing address, and any tax identifier directly. Card numbers are never sent to or stored by GigAmigo; we receive Stripe customer, subscription and invoice identifiers, paid amounts and currency, the plan, the subscription status, and the current billing period.
• Professional advisers or authorities: only when reasonably necessary to comply with law or protect rights and security.

Providers act under their own terms or processing arrangements. Some may process data outside the EEA. Where required, we use legally recognised transfer mechanisms.

7. Cookies and local storage

We use authentication/security cookies and browser or extension storage needed for the service. Optional analytics is enabled only after consent. We do not use advertising cookies. See the Cookies Policy.

8. Retention

Account data, resumes and generated files, Saved answers, and application/outreach history are kept while the account is active or until a verified deletion request is completed. Runtime diagnostic logs rotate by size and are used only to operate and protect the service. Security and audit records are kept as long as reasonably necessary to prevent abuse, enforce session revocation, or meet legal obligations. Encrypted operational backups follow a 14-daily, 8-weekly, and 12-monthly rotation; data deleted from the live service may therefore remain in inaccessible backup snapshots for up to 12 months before aging out. Some records may be retained longer where required by law or necessary to establish, exercise, or defend legal claims.

For Telegram support, our separate service keeps delivery references and conversation routing for 30 days after the conversation's last activity. Delivery payloads are removed after successful delivery; unresolved delivery references expire with the conversation. Attachment files are copied within Telegram rather than downloaded to our server. This cleanup does not delete messages held in Telegram chats. The support store is separate from the account database and its account-backup rotation.

9. Security

We use access controls, account scoping, device-bound extension proofs, expiring/revocable sessions, request replay protection, finite compute budgets, restricted runtime files, and operational backups. No storage or transmission method is completely secure. Users must protect their Google and Chrome profiles and should disconnect or revoke access if a device is lost.

10. Sensitive information

Job application forms can ask sensitive questions. GigAmigo does not create a durable Saved answer from an automatic fill alone. A durable answer is created only when you explicitly answer or confirm/change a value through the product workflow. You can edit or delete Saved answers and should avoid providing information that is not necessary for an application.

11. Information about other people

To prepare outreach, GigAmigo processes a limited set of professional information about recruiters, job posters, and authors of hiring posts: name, public profile URL, headline or role, company, and the vacancy they are connected to. It comes from LinkedIn pages opened in your own session for a vacancy you selected — we do not buy or scrape contact lists — and it is stored with your application history so the product can track invitations, acceptance, and follow-ups. We rely on legitimate interests: connecting a candidate with the person responsible for a vacancy they are applying to. Invitations and messages are sent from your own LinkedIn account, so LinkedIn's terms and privacy policy apply to that contact as well. If you are one of these people and want your information deleted, or you object to the processing, write to support@gig-amigo.com and we will remove it unless we must keep it to establish, exercise, or defend legal claims.

12. Children

GigAmigo is a professional job-search service and is not directed to children. You must be at least 18 years old to create an account.

13. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal information, and to complain to a supervisory authority. We may need to verify identity before completing a request. Contact support@gig-amigo.com.

To delete your account, write to support@gig-amigo.com from the email address you sign in with. We verify identity and respond within the period required by applicable law. Deletion covers live copies of resumes and generated files, Saved answers, application and outreach history, extension sessions, and account settings; encrypted backup snapshots age out under the rotation described in section 8. Individual resumes and Saved answers can be deleted in the product at any time. We may keep a minimal record of the deletion request itself and any data we are legally required to retain.

14. Chrome Web Store and Google API Limited Use

Our use of information received through Chrome extension permissions complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use this data only to provide or improve GigAmigo's disclosed single purpose, do not sell it, do not use it for personalised advertising or lending decisions, and do not allow humans to read it except with the user's explicit consent for specific support, when necessary for security, when required by law, or in aggregated and anonymised form for internal operations.

Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including Limited Use requirements. Google OAuth is used for account authentication; GigAmigo does not request access to Gmail or Google Drive as part of the current product.

15. Changes to this policy

We may update this policy when the service, providers, law, or data practices change. The revision date appears at the top. Material changes may also be communicated in the product or by email.

16. Contact

ANDRIUKHIN GLEB
23 C. del Puerto de Cerredo, Gijón, Asturias 33207, Spain
support@gig-amigo.com