GigLift LLC ("GigLift", "we", "us", or "our") operates the GigLift platform at giglift.com ("the Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service.
GigLift LLC is the data controller for personal information collected through the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.
Questions? Contact us at privacy@giglift.com.
We do not use your data to serve third-party advertising. We do not sell or rent your personal information to marketing companies.
To provide AI-powered features, your data — including content you enter and your artist/venue context — is sent to third-party AI providers:
When you send outreach emails through GigLift via Resend, we may track delivery status, open events, click events, and bounce/complaint events. This tracking data is used solely to show you engagement analytics on your own outreach campaigns within your GigLift dashboard.
Recipients of outreach emails receive a one-click unsubscribe link in compliance with RFC 8058.
SMS messages are sent via Twilio exclusively to Pro plan subscribers who have explicitly opted in. The opt-in process requires: (1) entering your US phone number at Account → Notifications, (2) viewing the full TCPA consent disclosure, (3) clicking "Send Code", (4) receiving a 6-digit OTP via SMS, and (5) entering the OTP to complete verification. SMS is only enabled after successful verification.
SMS messages are transactional only — gig confirmations, cancellations, band availability requests, booking reminders, and account alerts. We do not send marketing or promotional SMS.
If you opt into SMS, Twilio processes your phone number and message content subject to Twilio's Privacy Policy. Message delivery status is returned to us for display in your dashboard.
To opt out: Text STOP to any SMS message from GigLift, or remove your phone number in Account Settings → Notifications. Text HELP for help. Message and data rates may apply. Message frequency varies based on your activity.
A full description of our SMS opt-in process is available at giglift.com/sms-opt-in.
We send transactional emails to you (billing confirmations, band invites, booking alerts) via Resend. We do not use pixel tracking in transactional emails sent to you.
We do not sell your personal information. We share data only in the following limited circumstances:
We may disclose your information if required by law, court order, or to protect the rights and safety of GigLift, our users, or the public.
If GigLift is involved in a merger, acquisition, or asset sale, your personal information may be transferred with prior notice.
Your data is stored in Turso (LibSQL) databases and Vercel Blob storage. All data is encrypted in transit using HTTPS/TLS and encrypted at rest. We implement authentication via Clerk, row-level data isolation, PCI-compliant payment handling, and webhook signature verification.
We use essential cookies for authentication via Clerk. We use Vercel Analytics and Vercel Speed Insights for privacy-friendly aggregate analytics (no cross-site tracking, no PII collected). We may use Facebook Pixel on marketing pages only (not within the authenticated app).
Contact us at privacy@giglift.com. We respond within 30 days.
If you are a California resident, the CCPA/CPRA provides you with rights to: Know what personal information we've collected (categories, sources, purposes, third parties); Delete your personal information; Correct inaccurate information; Opt-out of sale or sharing (we do not sell your data); Limit use of sensitive personal information (such as your phone number).
To submit a CCPA request, contact privacy@giglift.com.
Categories of personal information collected in the past 12 months: Identifiers (name, email, IP); commercial information (billing, subscription); internet activity (usage, pages visited); professional information (performance history, band membership); inferences (lead scores, recommendations).
Legal bases for processing: Contract performance (account management, billing, features); Legitimate interests (service improvement, security); Consent (SMS notifications, marketing); Legal obligation (tax, accounting).
GigLift is based in the United States. International data transfers rely on Standard Contractual Clauses where required. You have the right to lodge a complaint with your local supervisory authority.
Contact: privacy@giglift.com
The Service is not intended for individuals under 18. We do not knowingly collect personal information from children. Contact privacy@giglift.com if you believe a child has provided us with personal information.
The Service may contain links to third-party websites not operated by us. We have no control over and assume no responsibility for their content or privacy policies.
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date, send an email notification, and display an in-app notification. Your continued use after changes constitutes acceptance.