Privacy

What GigScout knows, and what it doesn't.

Last updated: August 2026. This page is written for humans, not lawyers — the short version is that we keep the minimum to run the service and store nothing you don't ask us to.

What we collect

Your Google profile (name, email, avatar) so you can sign in and so we can label your profile and usage.

What you choose to save: your profile (skills, links, level, location), saved jobs, Telegram chat id, and which alert types you enable.

Usage events (matches created, resume rebuilds, feature clicks) so the metrics dashboard can show you what is happening.

Your AI key

AI features run on a key you provide. We store it encrypted with AES-256-GCM and decrypt it only in memory for requests you trigger — scoring, kits, or a resume rebuild. We never log the full key, never return it to the client (only the last 4 characters are shown), and staff cannot read it. Usage is billed directly to your provider, never to GigScout. Removing a key in Settings deletes it immediately and it is not recoverable.

What we never do

We do not sell, rent, or trade your data to anyone. No ad trackers on the site.

We never store your uploaded CV files. Resume PDFs are parsed in memory for the rebuild or profile import and then discarded — only the rebuilt text you choose to keep (in your own browser for 7 days) remains.

Resume Studio

Uploaded or pasted CVs are sent to the AI provider you configured, on your key, and are not stored by GigScout. The rebuilt CV is yours to download — a copy is kept in your own browser for 7 days so a refresh doesn't lose it, never on our servers.

Who we share with

Only the providers required to run the service: Supabase (Postgres database), Google (sign-in identity only), Telegram (alerts you enable — chat id + match text), your chosen AI provider — OpenAI, Anthropic, Gemini, Grok or Groq — (job text + profile skills for scoring, CV text for rebuilds, sent on your key), and the payment processor (Pro checkout only). Nothing else.

Deletion

Email us from the address on your account and we will delete your profile, encrypted keys, matches, and events within 30 days. Removing an AI key in Settings deletes that key immediately without waiting. Churn deletes the same way — cancelling Pro does not keep your keys or CV data around.

Questions or a deletion request? Email privacy@gigscout.app.