Privacy Policy

1. About this policy

This privacy policy (“Policy”) explains how Stanverse Technologies Private Limited (“GigsXp”, “we”, “our”, “us”) collects, uses, and discloses your personal information when you use GigsXp’s “Services” (defined in the GigsXp Terms & Conditions, “T&Cs”) or anywhere we display or reference this Policy. It also explains what privacy rights you have and how to exercise them.

This Policy applies to all users of GigsXp’s platforms, including but not limited to the GigsXp app and website (GigsXp.com) and any other sites, software, APIs, data feeds, and services made available by GigsXp, whether now or in the future. You will be a “User” if you download and use the GigsXp mobile app, access the website, or create an account and use the Services offered by GigsXp. This Policy also covers the handling of personal data of non-users whose data features in GigsXp’s Services but who are not subject to GigsXp’s T&Cs. Non-users are also governed by this Policy and have the same rights and enforcement mechanisms.

2. Contact us

To exercise your rights, and for questions or complaints related to this Policy or the processing of your personal data, contact our support team at contact@getstan.app, or write to us at:

Stanverse Technologies Private Limited, 3rd Floor, No. 822/55/11A, Dheeraj Vandana Classic, 24th Main Road, Sector-2, HSR Layout, Bengaluru, Karnataka – 560102, India

3. Personal information we collect about you

What information we collect depends on the services and features you use.

• a. Personal details: When you create your account, we collect your contact information (phone number, email address) and login credentials. We may also collect first name, last name, gender, date of birth, and other identifiers you provide. If you log in through Google or Apple, we may also collect that login information.
• b. Payment details: When you pay on GigsXp (for any premium tools or add-ons), we collect payment details and purchase history, billing address, and any promotional offers redeemed.
• c. Profile & usage information: Profile name, profile icon, followers, ratings, feedback, account/profile settings, and choices made while using GigsXp. Also language preference, geographical location, and browser name.
• d. Device & network information: Features accessed, usage duration, interactions with other users or external services, search activity, diagnostic data (crashes/bugs), device type, network, OS, ISP, performance details, and online identifiers such as IP address.
• e. Other information collected through your use of the GigsXp app:Information shared with customer support; OTP-based verification data; information collected on purchase, newsletter sign-up, survey response, or general browsing; information used to provide and customize service features.
• f. KYC, payout & tax information: When you sign up on GigsXp to take on paid calls, coaching, advisory sessions, or other gig opportunities, we additionally collect the information needed to verify your identity and pay you — this includes government-issued ID details (such as PAN and/or Aadhaar, as permitted under applicable law), bank account or UPI details, and any other information required to process payouts and meet our tax withholding and reporting obligations under the Income Tax Act, 1961 and other applicable law.

4. Our purposes and legal basis for processing of your information

• Create and manage your GigsXp account: phone verification, device setup, saving your consents/privacy settings, deactivation/deletion, re-registration.
  Information collected: User profile, personal details, usage information.
  Legal basis: Necessary for performance of our contract with you.
  Retention period: For as long as you have a GigsXp account, or as long as a legal claim is present.
• Provide our Services: troubleshooting, diagnostics, debugging.
  Information collected: Information in Clause 3.
  Legal basis: Necessary for performance of our contract with you.
  Retention period: For as long as you have a GigsXp account, or as long as a legal claim is present.
• Promote safety, integrity and security: verifying accounts, checking genuine sign-ups, investigating T&C violations, preventing fraud and abuse.
  Information collected: All categories in Clause 3, depending on use.
  Legal basis: Necessary for our contract with you and to comply with legal obligations.
  Retention period: For as long as legally permitted, or as long as a legal claim is present.
• Communicate with you: customer support, resolving queries.
  Information collected: Profile info, verification data, personal details, non-user information.
  Legal basis: Necessary for performance of our services and contract with you.
  Retention period: For as long as you have a GigsXp account, or as long as a legal claim is present.
• Comply with laws and regulations: responding to law enforcement/court requests; implementing security measures required under the DPDPA and other law.
  Information collected: All categories in Clause 3.
  Legal basis: Compliance with legal obligations.
  Retention period: For as long as legally required, or as long as a legal claim is present.
• Enforce policies and protect our rights: defending against or pursuing legal claims.
  Information collected: All categories in Clause 3, plus any other data needed for a dispute.
  Legal basis: Legitimate interest (legal protection).
  Retention period: For as long as legally required, or as long as a legal claim is present.
• Evaluate, update and develop new features.
  Information collected: All categories in Clause 3.
  Legal basis: Legitimate interest (product improvement).
  Retention period: For as long as you have a GigsXp account.
• Business intelligence, analytics, planning, forecasting.
  Information collected: All categories in Clause 3 (typically aggregated).
  Legal basis: Legitimate interest (running the business).
  Retention period: For as long as you have a GigsXp account.
• Personalized offers and experience: tailoring content, sending relevant promotions.
  Information collected: Profile info, usage information.
  Legal basis: Legitimate interest (user experience, marketing efficiency).
  Retention period: Until you withdraw consent, or for as long as you have an account, or as long as a legal claim is present.
• Device-based settings: accessing contacts on-device; accessing camera/photo gallery if you share media on your profile.
  Information collected: All categories in Clause 3.
  Legal basis: Consent.
  Retention period: Until you withdraw consent, or for as long as you have an account, or as long as a legal claim is present.
• Processing User payouts and tax compliance: verifying your KYC before first payout; disbursing wallet earnings to your bank account/UPI; withholding and reporting tax (TDS) as required by the Income Tax Act, 1961; sharing necessary data with our payment aggregator/gateway partner and tax authorities.
  Information collected: Payout, KYC and tax information (Clause 3f), payment details.
  Legal basis: Necessary for performance of our contract with you and to comply with legal (tax) obligations.
  Retention period: For the period mandated under applicable tax and financial record-keeping law, even after account deletion.

5. Sources from which we may collect data about you

• Directly from you: account registration, profile updates, purchases, correspondence, surveys.
• Automatically: account/profile info, purchase info, usage info, advertising info, device/network info, communications.
• Authentication partners: Google/Apple sign-in shares your name, email, and profile picture. We never store third-party passwords.
• Other GigsXp users: other users may provide your name, phone number, or email (e.g., via chat).
• Third-party service providers: IP-to-location mapping, usage analytics, safety/security, customer service support. This includes our payment aggregator/payout partner (for example, Cashfree), which processes your KYC and bank/UPI details on our behalf.
• Other third parties: publicly available information, or information from public registers/telecom operators, used to improve platform safety.

6. Third party services & disclosure

We do not sell, trade, rent, or otherwise transfer your personal information to third parties.

We engage third-party service providers for advertising, infrastructure/IT, payment processing, and payout processing. These trusted third parties are bound by this Policy and may not use or disclose your personal information except to provide their services.

We may share information with affiliates, group companies, and vendors supporting our business (technical infrastructure, bug testing, usage analytics) for the purposes in this Policy, and may transfer information in connection with a merger, acquisition, or asset sale.

We will not otherwise share your personal information without your consent, except where necessary for the purposes in this Policy or required by law (including litigation, security, or law enforcement requests, or T&C enforcement).

Links to third-party websites are not under our control and are not subject to this Policy — check their own privacy policies before use.

7. Retention of personal information

We store personal information only as long as necessary for the purpose it was collected for (see Clause 4). Retention generally lasts (i) until you delete it, (ii) for a specific period, or (iii) until your GigsXp account is deactivated and deleted.

We consider: (i) the storage period needed to fulfil our purposes, (ii) what users reasonably expect, (iii) the time needed to enforce our rules and keep the Service secure, (iv) legal/contractual retention obligations, and (v) accuracy of our records.

After account deletion, your data is deleted from our systems, except data we must retain for a longer period for limited purposes — for example an ongoing legal dispute, a reported crime, or payout/tax records, which are retained for the statutory period noted in Clause 4 regardless of account status. We run regular disposal of data no longer needed.

8. Children's privacy

We do not permit anyone under 18 to hold an account with GigsXp. Minors may access our Services only through an account held by a parent/legal guardian aged 18 or above. We do not knowingly collect or process information from children. Payouts additionally require adult (18+) KYC and a bank account/UPI in your own name — GigsXp cannot process a payout to or on behalf of a minor.

If we learn we've collected data from a child under 18, we will take reasonable steps to delete it. If you believe we may have such data, contact contact@getstan.app.

9. Your rights as a GigsXp user

• Right to be informed: How we process your data — via this Policy, service FAQs, and support. How to enforce: Read this Policy or reach out to us.
• Right to rectification: Correct inaccurate or incomplete data. GigsXp lets you update most data via in-app settings. How to enforce: Write to us; we update within 7 days of receipt.
• Right to erasure/account deletion: Delete your account and associated data. We may be unable to delete data still needed for legal compliance, billing, dispute resolution, or statutory payout/tax record-keeping. How to enforce: Write to contact@getstan.app; we delete within 7 days (subject to the retention exceptions above).
• Right to data portability: Receive the personal data you provided, in machine-readable format. How to enforce: Write to us.
• Right to object/withdraw consent: Withdraw consent for consent-based processing at any time (does not affect processing already done, or processing on other lawful grounds). You may also object to or restrict processing. How to enforce: Write to us.

10. Security measures

GigsXp uses appropriate technical and organizational measures to protect your data against unlawful or accidental disclosure, use, access, destruction, alteration, or harm. Data is stored in a database protected by firewall and access control, accessible only to authorized GigsXp staff and third-party partners who need it to perform specific tasks.

11. Cookies

GigsXp may collect a resettable device identifier via cookies to recognize returning users, operate and improve the Service, monitor performance, send marketing messages, support advertising, prevent fraud, and comply with law. You can manage cookies through your browser settings, though disabling them may limit some features.

12. Advertising

If advertising is enabled, our use of advertising services will comply with applicable policies, including restrictions on sensitive categories, and we will not knowingly allow ads that collect personally identifiable information without consent. Continued use of the platform implies consent to cookies and advertising as described.

13. Changes to this Policy

We may update this Policy as our services evolve (e.g., new data uses). The most recent revision date will appear on this page. Continued use of the Services after a change means you accept the new Policy. If you disagree with a change, please stop using the Services.

14. Grievances

For questions, grievances, or complaints, contact our Grievance Officer:

Name: Stanverse Technologies Private Limited
Email: contact@getstan.app
Address: 3rd Floor, No. 822/55/11A, Dheeraj Vandana Classic, 24th Main Road, Sector-2, HSR Layout, Bengaluru, Karnataka – 560102

We will acknowledge grievances promptly and investigate/resolve within a reasonable timeframe (see Grievance Redressal in the T&Cs for exact SLAs).

15. Governing Law

This Policy is governed by the laws of India. Courts at Bangalore, Karnataka have exclusive jurisdiction over disputes, subject to applicable law.