Privacy notice

Who this notice is about

Gen GiggZ is a hyperlocal gig marketplace being prepared for launch in Bengaluru. People will be able to find short jobs nearby, hire local help, or both, and switch between Work and Hire.

A registered company does not exist yet. When it does, that entity will be the data fiduciary for the Digital Personal Data Protection Act, 2023 (“DPDP Act”), and this notice will name it, with its address. Until then, the product and this website are described here, and the contact is contact@gengiggz.com.

The DPDP Act

This draft is written against the Digital Personal Data Protection Act, 2023, and the rules made under it. It uses “personal data” and “data principal” in the sense the Act uses them. It is not a substitute for the Act, and it is not legal advice.

Where the Act requires a consent notice, a purpose, or a retention period to be stated in a particular way, the final notice will follow that form. This draft says what the product is built to do, in sentences a person can read.

Data the product is built to use

• Phone number, and the one-time code used to sign in.
• Profile details you add, such as your name, the work you offer, and the area you can cover.
• Job details: the description, place, time, status, and the start-code event.
• Chat messages about a job.
• Location, only while a job is active.
• Identity information, if you later use DigiLocker or a Work Passport. Those paths are planned, not live.
• Payment and withdrawal references. Full card numbers and bank passwords are for the payment partner, not for a Gen GiggZ screen.
• Device and log data needed to keep accounts secure and to diagnose faults.
• Support messages you send us, including the forms on this website.

Why

• To create the account and to check it is you.
• To show nearby jobs and hire requests.
• To mask personal contact details between users.
• To carry chat, and to review it for abuse.
• To confirm a job has started, and to share location only for that active job.
• To take payment and to pay withdrawals.
• To verify identity when those tools are switched on.
• To answer you, fix the product, and meet the law, including records we are required to keep.

The final notice will say, for each purpose, whether it rests on consent or on a legitimate use the DPDP Act allows. Where it rests on consent, you will be able to refuse, and to withdraw later, and we will say what the product can no longer do if you do.

Masking and chat

The product is built so that phone numbers and similar personal details stay masked between users. The other person sees what the job needs them to see.

Chat is inside the app so that a job does not depend on a personal SMS thread. Messages may be reviewed for abuse. That review is a purpose, not an accident, and a final notice will describe who can do it and when.

Location

Location is for an active job: so two people can meet at the address. It is not a background record of the rest of the day. When the job ends, that sharing is meant to end. The phone’s own operating system will also ask permission, and the app is not supposed to ask for location outside an active job.

Identity checks

DigiLocker and a Work Passport are planned so a person can confirm identity without sending documents into a chat. They are not connected. If they are connected, the notice will say what is requested, what is stored, and what the other user is allowed to see. The aim is a result — that a check happened — not a copy of an identity document in the other person’s phone.

Payments

Payments and withdrawals are meant to be handled with a payment partner. We expect to store a result and a reference, not your full card number or your bank password. The partner’s own notice will apply to what they process. We will name the partner in the final notice. We will not name one here before there is a contract.

Who else sees data

• The other person on a job, limited to what that job requires.
• Companies that host the service, deliver messages, or process payments, under a contract that limits their use.
• Authorities, if the law requires it.

We do not sell personal data. The final notice will repeat that as an obligation, not only as an intention.

The product is built for people in India. If a processor is outside India, any transfer will follow the DPDP Act, including restrictions the Central Government places on transfers to particular countries. This draft does not claim a transfer that has not been chosen.

How long

Account data is kept while the account is open, and for a limited period after, longer where a law, a dispute, or a safety investigation requires it. Exact periods will be set with counsel before launch and written into the final notice. We will not keep personal data for a purpose after that purpose is gone, except where the Act allows or requires it.

Security

The product is built around phone sign-in, masked contact details, server-side permission checks on every request, and location limited to active jobs. Access inside the team is meant to be limited to people who need it for a stated purpose.

No notice can honestly promise that a breach is impossible. If one happens, and the DPDP Act requires notice to you or to the Data Protection Board, that notice will be given.

Your rights

Under the DPDP Act, a data principal can, in the manner the Act and the rules provide:

• Ask for a summary of personal data being processed, and of the people it has been shared with.
• Ask for correction, completion, and updating.
• Ask for erasure, where the Act requires us to erase.
• Use a grievance process.
• Nominate another person to exercise these rights if you die or become unable to.

Where processing is based on consent, you may withdraw it. Withdrawal does not undo processing that was already lawful. We will explain the effect on the account at the time.

To use a right, write to contact@gengiggz.com. A named grievance officer, and the period for a response prescribed under the Act and the rules, will be published when the operating entity is registered. We will not invent that name or that address on a draft.

Children

Gen GiggZ is not for anyone under 18. We do not knowingly create accounts for children. If you believe a child has an account, write to us and we will close it.

This website

gengiggz.com is a launch site. It does not run advertising or analytics cookies. It does not ask for your location.

The “notify me” form collects your email and whether you want to work, hire, or both. The contact form collects your name, email, a short description of who you are, and your message. Both are delivered through Netlify Forms, because Netlify hosts this site. We use them to send a launch note or to reply. We do not add you to a drip list.

A honeypot field is included so automated spam is easier to drop. Leave it empty.

Changes

When this notice changes, the date at the top will change. If a change is one the DPDP Act requires us to bring to your attention, we will do that in the way the Act requires, not only by editing a page.

Contact

contact@gengiggz.com

There is no registered office to print under that address yet. The about page says the same thing.