Privacy notice.

Information used for accounts

Registration stores your supplied name, contact email, country, accepted notice versions, your confirmation that you are at least 18 and the version of that statement, and a salted password verifier. The age confirmation is a self-declaration; we do not collect a date of birth or identity document for signup. Account access uses session and browser-security cookies; operation also stores session and security records, and any recovery information you submit. Authorized staff can access information needed for their assigned work.

MicroGig sends a single-use, 24-hour email confirmation link through Resend. Resend receives the recipient address and confirmation message, including the link, to process delivery. We store a protected record of the link and, after confirmation, the time the address was confirmed. The address holder chooses the final account password using the link. The link does not sign anyone in or verify real-world identity. Unconfirmed registrations are eligible for removal after 30 days; a new signup for the same address may replace one after that period. Security audit records without the email address may remain.

Contractor workspace

If you save a contractor profile, we store your general area, time zone, preferred weekly hours, work interests, typical availability windows, and update preferences, along with changes to your display name and country. The workspace records the time of an update and an audit event. These details are editable; they do not verify your identity or make you eligible for paid work. Update preferences are saved, but automated update emails are not being sent in this preview.

Messages and announcements

A public enquiry stores the name, unverified email address, subject, and message you submit, separately from contractor accounts. Authorized staff can review it, update its status, and use their own email app to reply. A contractor support conversation stores its subject, messages, account reference, authors, timestamps, and status so the contractor and authorized staff can continue it. Staff can publish announcements inside contractor workspaces. Contact and support writes create audit records. Do not include passwords, identity documents, payment details, or other sensitive information in messages. Automated message email is not connected in early access.

Campaign links

If you arrive through a tagged link, this site can save its source, medium, campaign, and content labels in a first-party cookie for up to 30 days. Those labels are attached to a contractor account if you register, and the cookie is then cleared. We do not use the campaign cookie to authenticate you. Avoid putting personal information in campaign tags.

Security and recovery

MicroGig does not store your plaintext password. Do not place passwords, identity documents, or other sensitive records in recovery messages; describe how staff can check an established contact channel or account-specific proof instead.

Retention and safeguards

Unconfirmed registrations are eligible for deletion after 30 days. Expired sessions and one-use links stop working and are subject to housekeeping. Resolved ordinary support conversations and public enquiries require staff classification, related-mailbox review, and hold checks before removal. Security, recovery, dispute, request, and audit records may be kept longer for review. Protected local database backups have a rolling retention limit; a backup may retain a record after it leaves the live database. We review access and deletion requests individually and do not promise instant removal from every system.

Questions about your information

You can ask to access, correct, or delete information by emailing [email protected] or using the contact form. If you are signed in as a contractor, you can use workspace support to link the request to your account. A public message or email address alone does not prove account ownership. For a tracked public or mailbox request, staff may send a one-use, 24-hour link through Resend to the contact address recorded from the original request. Resend receives that address and link to process delivery. The app stores a hash of the active link and, if used, the confirmation time and method. Using the link confirms control of that address only; staff must still review authority over the requested records before disclosing or changing them. Staff may also need to verify a request through an established account channel. Please do not send passwords, identity documents, or payment details with a request. There is no instant account deletion or download; staff review each request and explain the outcome.