GigDesk Privacy Policy

Effective date and last updated: 22/10/2026

This Privacy Policy explains what information the GigDesk app collects, how it is used and stored, who it is shared with, and the choices you have. GigDesk is operated by Beyond Orbit Studio, an individual operator (not a registered company) based in Surat, Gujarat, India ("we", "us"). If you have any question, contact us at hello@gigdesk.in.

1. Summary

• Your business records (clients, invoices, payments, jobs and more) are stored on your phone.
• You need an account to use GigDesk. We keep the details needed for your account: your email, name, User ID and, if you add it, your phone number.
• If cloud sync is turned on, a copy of your records and photos is stored in your private cloud space so you can use it on other phones. Only you can read it.
• We do not show ads, we do not sell your data, and the app has no advertising or tracking tools.
• You can delete your account at any time in the app.

2. Information you give us

• Account: the email address you sign in with (by email code or with Google), your name, an optional business name, your User ID, and an optional phone number.
• Business records you enter: business profile (business name, address, GST number, bank and UPI details, logo, signature), clients and leads (names, phone numbers, email and postal addresses, GST numbers, notes), quotations, invoices, payments, expenses and bills to pay, jobs, tasks, meetings, notes, message templates and receipt photos.
• Contacts you pick: when you choose "Pick from contacts", only the contact you select (name, phone number and, where available, email) is copied into the client or lead you are adding. GigDesk does not read your address book otherwise.
• Photos: receipt photos, your logo and signature, taken with the camera or chosen from your photo library when you add them.

3. Where your information is stored

• On your phone: all your business records are kept in the app's private storage on your device. They stay available offline.
• Account service: sign-in and your account profile are handled by Supabase, our hosting provider. When you sign in with Google, Google confirms your identity and shares your email and name with us.
• Cloud sync (optional): when cloud sync is turned on for your account, a copy of your business records is stored in a database at Supabase, and your photos in a private storage space. Access rules allow only your own account to read or change your data. Data is stored in Mumbai, India (AWS ap-south-1), on Supabase.
• Backups: when you create a backup, GigDesk makes a file on your phone with your records and photos. You decide where to save or share that file. Backup files contain your business data (including bank details you entered) but no passwords or sign-in tokens.

4. Connections, shared invoices and team jobs

• Finding people: other GigDesk users can find you only by typing your exact User ID. They see only your name and User ID, never your email or phone number.
• Connections: a connection exists only after both people agree. You can remove or block a connection at any time.
• Shared invoices: when you send an invoice to a connection, they receive a copy of that invoice (number, dates, items, tax, total, notes and terms) with your name and User ID. They do not see your other clients or records.
• Team jobs: when you add a connection to a job's team, they see only the job title, date and time, place, their role and your note, your name and User ID, and the names of other people on the team. They never see prices, clients, invoices or payments.

5. How we use information

• To create and secure your account and let you sign in.
• To run the app's features: invoices, reminders, reports, backups, cloud sync, connections, shared invoices and team jobs.
• To send you sign-in codes by email.
• To prevent abuse, for example by limiting how often searches, requests and sign-in attempts can be made.

We do not use your data for advertising and we do not sell or rent it to anyone.

6. Reminders and messages

• Reminders for tasks, jobs, meetings and bills are scheduled as notifications on your phone. They work offline and are not sent through our servers.
• When you send a payment reminder by WhatsApp, GigDesk opens WhatsApp with the message ready; you choose whether to send it. GigDesk does not send messages for you.

7. Who we share information with

• Service providers: Supabase (sign-in, database, file storage and server functions) and Google (only if you choose to sign in with Google). They process data on our behalf to run the app.
• People you choose: connections you send invoices to or add to a team, as described in section 4.
• Legal reasons: if the law requires it, for example a valid order from an Indian authority.

8. How long we keep information

• Data on your phone stays until you delete it, erase it when deleting your account, or uninstall the app.
• Account and cloud data are kept while your account exists. When you delete your account, we delete your account, your synced records, your photos in cloud storage and your connections. Your personal data is deleted within 30 days of an account deletion request. Invoices you already shared stay with the other person as a read-only copy marked "Deleted user"; team jobs you created are cancelled for the team.
• Our hosting provider may keep technical logs and backups for a limited period, after which they are removed.

9. Your choices and rights

• See and correct: you can view and edit your account details and records in the app.
• Export: you can create a backup file of your data at any time (Profile, then Backup and restore).
• Delete: you can delete your account in the app (Profile, then Account, then Delete account) or by writing to hello@gigdesk.in. See our account deletion page.
• Turn features off: you can decline cloud upload, remove connections and turn off notifications in your phone's settings.

We handle personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023. To make a request or a complaint, contact our grievance officer: Prince Vaishnav, Beyond Orbit Studio, Surat, Gujarat, India, hello@gigdesk.in.

10. Security

Connections to our servers are encrypted. Cloud data is protected by access rules so that each account can read only its own records. No method of storage or transfer is completely secure, so please keep your phone locked and your email account safe.

11. Children

GigDesk is meant for people running a business. It is not directed at children, and we do not knowingly collect data from children.

12. Changes to this policy

We may update this policy. We will change the date at the top and, for important changes, tell you in the app.

13. Contact

Beyond Orbit Studio (individual operator), Surat, Gujarat, India. Email: hello@gigdesk.in. Website: https://gigdesk.in.

Draft: this document was prepared as a starting point and has not been reviewed by a lawyer. Please have it reviewed by a qualified lawyer before launch.