Last updated: October 19, 2026
The Gigawork platform, a work automation service delivered through messaging channels, is operated by Moonlet Technologies ("Gigawork," "we," "our," or "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
We collect information in the following categories.
Account Information. When you register for Gigawork, we collect your business name, contact name, email address, phone number, and business details necessary to set up your account and configure your messaging channel connections, and any documents you upload with your application. Our staff may review your application, its documents and your connections before your account is approved.
Sign-in Information. If you sign in with another account provider, we receive your name, email address, and profile photo from that provider, and keep a copy of the photo with your account.
Sign-in Codes. If you sign in or confirm a phone number with a one-time code, we send the code to that number by WhatsApp or SMS. The number is shared with Meta or the SMS provider only to deliver the code.
Team Invitations. When you invite someone to your team, we collect the name and the email address or phone number you enter, and send the invitation there.
Payment Information. When you pay an invoice, we collect the payment method you choose, the reference you enter and any proof of payment you upload. Our staff use them to confirm the payment. We do not receive or store card numbers.
Message Data. When contacts send messages to your business through any connected messaging channel, we process and store message content, sender identifiers (phone numbers, email addresses, or platform-specific IDs), timestamps, and message metadata as necessary to provide our work automation service. This includes both inbound messages from your contacts and outbound responses generated through the platform.
Business Resources. When you upload documents, files, or other materials to the platform, we process and store those files along with derived data including extracted text, document metadata, content classifications, entity information, summaries, and vector embeddings used for information retrieval.
Agent Configuration. We store the goals, tasks, criteria, guardrails, and behavioral settings you configure for each agent. This includes activity selections, use case descriptions, and setup parameters.
Usage Data. We collect information about how you interact with our platform, including login activity, feature usage, and operational metrics.
Technical Data. We automatically collect certain technical information including IP addresses, browser type, device identifiers, and access logs when you use our services. Your IP address may be sent to a third-party geolocation service to determine your country for language and form defaults and for how we ask about cookies. Only your country code is stored.
Verification Signals. On the phone verification screen only, we collect device characteristics including screen geometry, browser fingerprint components (canvas, audio, WebGL, and font hashes computed locally in your browser), browser and network metadata, and interaction patterns (timing and pointer movement counts). A device identifier is computed server-side from these components. Verification signals are recorded for abuse analysis and are never used as automated decision gates, for advertising, or for cross-session tracking.
Local Storage. We store your language preference and detected country code in your browser's local storage for interface defaults. The country record expires after 90 days. These values are not transmitted to third parties. We also store your cookie choice for 12 months. If you are signed in, it is saved with your account.
We use the information we collect to:
We do not sell your personal information or your contacts' personal information to third parties.
We may share information in the following limited circumstances:
Messages sent and received through our platform pass through the messaging channel you connect. Each provider processes that traffic under its own privacy policy and terms, which apply in addition to this policy.
We receive only the data needed to operate the channel: message content, sender identifiers, the sender's name where the channel provides it or lets us look it up, and delivery status. We do not request contact lists or advertising identifiers.
When you connect a messaging account, such as a business phone number or page, we store its identifiers and the access token the channel provider issues for it, and use them only to send and receive messages for that account. Data we receive from channel providers is not sold and is not used for advertising.
Our platform uses artificial intelligence to process messages and automate work on your behalf. This includes:
AI processing occurs on our infrastructure using third-party AI models. Your data is not used to train third-party AI models.
We retain message data and account information for as long as your account is active or as needed to provide our services. Conversation data is retained in accordance with the retention settings configured for your account. You may request deletion of your data at any time by contacting us or using our data deletion request process.
When you delete your account, we will delete or anonymize your data within 30 days, except where retention is required by law.
We do not use advertising cookies. We use necessary cookies, and analytics cookies only if you accept them.
Necessary cookies and local storage keep you signed in, remember your language and your cookie choice, and protect our services from abuse. They are always on. During phone verification, our bot detection services may set their own cookies.
If you accept analytics cookies, our analytics service records which pages you visit and how you arrived. It does not record your messages or your business details.
We ask for your choice on your first visit. You can change it at any time in Cookie settings, on our website and in your profile. In some countries closing the notice counts as accepting. We treat a Global Privacy Control signal from your browser as declining analytics.
We implement appropriate technical and organizational security measures to protect your information, including encryption in transit and at rest, access controls, data isolation between businesses and conversations, and regular security assessments. Our infrastructure is hosted on Google Cloud Platform, which maintains industry-standard security certifications.
To report a security vulnerability in Gigawork, email security@gigawork.app.
While we strive to protect your information, no method of electronic storage or transmission is completely secure. We cannot guarantee absolute security of your data.
Depending on your jurisdiction, you may have the following rights regarding your personal information:
To exercise any of these rights, please contact us at privacy@gigawork.app.
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete that information promptly.
Our services are operated from the United States. If you are accessing our services from outside the United States, your information may be transferred to, stored, and processed in the United States or other jurisdictions where our service providers operate. By using our services, you consent to such transfers.
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page and updating the "Last updated" date. Your continued use of our services after changes are posted constitutes your acceptance of the revised policy.
If you have questions about this Privacy Policy or our data practices, please contact us:
Moonlet Technologies (Gigawork)
Email: privacy@gigawork.app
Website: gigawork.ai