Privacy Policy

1. What we collect

Information about freelancers

GigScores displays publicly available information about freelancers, including their X (formerly Twitter) handle, display name, and profile photo, sourced via the X public API under X’s developer terms. We do not require freelancers to register or consent before they appear on the Service — the information used is already public on X. A freelancer’s review activity on GigScores is generated by their clients.

Information from reviewers

When you submit a review, we collect:

• Your X handle (required; stored to verify identity and prevent abuse)
• The review text, ratings, and project budget you submit
• Uploaded proof files (payment screenshots, invoices, contracts, etc.)
• Your chosen visibility preference (public handle or anonymous)

Information collected automatically

When you access the Service, our infrastructure provider (Cloudflare) automatically records:

• Your IP address
• Your approximate country (derived from IP via Cloudflare)
• Standard server log data (request path, timestamp, user agent)

We use this information for abuse prevention, fraud detection, and security purposes only.

No tracking

GigScores does not use tracking cookies, behavioral analytics, advertising pixels, or third-party trackers. Cloudflare may set strictly-necessary cookies to operate the Service (for example, security challenges) — these cannot be disabled without breaking the Service.

2. How we use information

We use collected information to:

• Operate the public reputation database (the core Service)
• Verify that reviewers are real and prevent fake reviews
• Send email notifications to GigScores administrators when reviews are submitted
• Investigate and prevent abuse, fraud, and security incidents
• Comply with legal obligations

3. What is public

The following information is publicly displayed on the Service:

• Freelancer X handle, display name, and profile photo
• Approved review content (text, ratings, project budget, proof types)
• Reviewer X handle (only if the reviewer chose “show publicly” at submission)
• Aggregate statistics (ratings, review counts, leaderboard rankings)

The following information is never publicly displayed:

• Reviewer IP addresses
• Reviewer X handles for reviews marked anonymous
• Pending or rejected reviews
• Original uploaded proof files (only the type or category is shown publicly; the file itself is private)
• Abuse reports

4. Third-party services

GigScores uses these services to operate:

• Cloudflare (United States) — hosting, database (D1), file storage (R2), edge functions, security
• X Corp (United States) — public API for fetching freelancer display names and profile photos
• Resend (United States) — email delivery for administrative notifications

Your data may be transferred to and processed in jurisdictions outside your home country, including the United States. We rely on the legal frameworks these providers maintain (including standard contractual clauses where applicable) for such transfers.

5. Data retention

Verified, approved reviews are retained indefinitely as part of the public reputation database. This is a deliberate design choice — GigScores exists to provide a permanent, reliable public record. See our Review Policy and the “Your rights” section below for the narrow circumstances under which content may be removed.

Pending, rejected, and abuse-report records are retained for internal moderation purposes. Reviewer IP addresses are retained for fraud and abuse prevention.

6. Your rights

Access requests

You may request a summary of personal data we hold about you by emailing [email protected].

Deletion requests

Freelancer profile removal

A freelancer cannot remove their profile from GigScores merely on request. As described above, public reviews remain part of the public record. If you believe the reviews against you contain fraudulent proofs, follow the process above.

Other rights (KVKK / GDPR)

If you are resident in Turkey or the European Economic Area, the Turkish Personal Data Protection Law (KVKK) or the EU General Data Protection Regulation (GDPR) may grant you additional rights including access, correction, and certain deletion rights — subject to the legal exceptions for “freedom of expression and information” and “public interest”, both of which GigScores relies upon as a public reputation infrastructure providing consumer protection information. To exercise such rights or raise a complaint, contact [email protected].

7. Security

We use Cloudflare’s infrastructure for storage and transit security. Uploaded proof files are stored in private R2 buckets accessible only via authenticated API routes. We do not, however, guarantee absolute security; you should not upload sensitive information beyond what is genuinely required to support your review.

8. Children

GigScores is intended for users aged 18 and older. We do not knowingly collect information from individuals under 18. If you believe a minor has submitted information to us, contact [email protected] and we will remove it.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected in the “Last updated” date at the top of the page. Continued use of the Service after changes constitutes acceptance of the updated Policy.

10. Contact

For privacy questions or requests, contact: [email protected]