Gig Catalyst Privacy Policy

1. Introduction & Scope

Gig Catalyst LLC, a Black- and LGBTQIA+-owned company headquartered and operating in Las Vegas, Nevada, operates a premium service marketplace connecting everyday customers with a curated network of vetted independent contractors (“Catalysts”) for services including tutoring, line standing, concierge logistics, canine cleanup, and home perfection services.

This Policy applies to all visitors, registered customers, Catalysts, and prospective users of the Service. It governs the collection and processing of personal information across our website (gigcatalyst.com), our mobile applications, SMS/text messaging channels, and any affiliated digital properties. By accessing or using the Service, you acknowledge that you have read, understood, and consent to the practices described herein.

This Policy is designed to comply with the California Consumer Privacy Act (“CCPA”) as amended by the CPRA, the Nevada Revised Statutes Chapter 603A (“Nevada Privacy Law”), and, where applicable, the General Data Protection Regulation (“GDPR”) of the European Union.

2. Information We Collect

2.1 Information You Provide

• Account information: full name, email address, mobile telephone number, password, and profile details provided at registration.
• Identity verification: government-issued identification and related data collected to verify identity, eligibility, and (for Catalysts) to complete background screening.
• Booking information: service descriptions, budgets, timelines, scheduling preferences, delivery addresses, and special instructions you submit when posting or accepting a Gig.
• Payment information: payment method data processed through our payment processor, Stripe. Gig Catalyst does not store full card numbers on its own systems.
• Communications: the content of messages, support tickets, and correspondence you send to us or through the platform, including through the customer portal Support module.

2.2 Information Collected Automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, referring URLs, pages viewed, and interaction logs collected via cookies and analytics.
• Location data: approximate location derived from IP address or, where you grant permission, precise device location used to match you with nearby Catalysts and to administer Priority Blast replacement matching as described in Section 3.1.

2.3 Information From Third Parties

• Background-check data: results returned by Checkr and equivalent screening providers used to vet Catalysts.
• Verification & fraud signals: data from Stripe and identity-verification partners used to confirm authenticity and prevent fraud.

2.4 Membership and Billing Information

Gig Catalyst may collect and process membership and billing information necessary to administer customer accounts and the marketplace, including:

• Customer membership level: Guest, Service Subscriber, or Premier
• Membership enrollment, status, renewal, upgrade, downgrade, and cancellation activity
• Monthly membership billing information and transaction history
• Service pricing, discounts, expedited-service pricing, and applicable account benefits
• Booking cancellation, refund, Mobilization Fee, and compensation records

Current membership prices are: Guest — $0 per month; Service Subscriber — $10 per month, billed monthly; and Premier — $20 per month, billed monthly.

Cancellation of a monthly membership is a separate process from cancellation of an individual service booking. Membership cancellation ends or changes the recurring membership relationship and related benefits; booking cancellation concerns a specific scheduled Gig and is governed by the Terms of Service Cancellation, Refunds & No-Show Policy (and related cancellation and refund rules). Completing one process does not automatically complete the other.

2.5 Service Booking and Cancellation Data

Gig Catalyst may process booking-related data necessary to administer service bookings as operational processing, including:

• Booking details and service location
• Scheduled service time
• Customer membership level
• Catalyst assignment and acceptance information
• Cancellation reason and timing
• Refund and Mobilization Fee records
• Customer no-show records
• Priority Blast activity

The contractual rules governing cancellations, refunds, Mobilization Fees, no-shows, and Priority Blast are set out in the Terms of Service and the Cancellation & Refund Policy provisions incorporated therein (including Terms Section 10 — Cancellation, Refunds & No-Show Policy). This Privacy Policy describes the related operational data processing and does not reproduce those contractual rules in full.

2.6 Customer Support Communications

Gig Catalyst may process support requests submitted through the customer portal's Support module. Support-related information may include:

• Request details
• Communications and attachments
• Account and booking references
• Support status and resolution history
• Urgency or exigency indicators

Regular support hours are Monday–Friday, 8:00 AM–6:00 PM PST.

2.7 Reliability and Account-Integrity Information

Gig Catalyst may create and use operational records concerning:

• Catalyst cancellations
• Reliability scores or penalties
• Service acceptance and response behavior
• No-shows
• Account eligibility
• Booking completion and service quality

A Catalyst cancellation may result in a reliability-score adjustment and may affect future eligibility, assignment opportunities, or account review, subject to the Terms of Service and applicable policies. This Policy does not disclose internal fraud-detection rules, undisclosed ranking logic, or confidential security measures.

2.8 Concierge Protection Shield Claims and Adjudication

When a customer or Catalyst submits or participates in a Concierge Protection Shield claim, Gig Catalyst may collect, use, retain, and disclose information reasonably necessary to receive, investigate, adjudicate, communicate, and administer the claim. This section describes data processing only.

This may include:

• Claim submissions, account and booking details, service date and location, membership tier, and service scope
• Before-and-after photographs, statements, messages, support communications, and other evidence
• Insurance information, coverage determinations, denial letters, declarations pages, signed declarations, and related documentation submitted to establish primary-coverage status where required
• Investigation requests, evidence-submission activity, adjudication decisions, payment records, and claim-status communications
• Catalyst responsibility determinations, holdback notices, contestation records, segregated amounts, adjustments, credits, and returns related to an adjudicated Shield claim

Gig Catalyst uses this information to administer the Claims & Adjudication Policy, verify eligibility, investigate alleged service-related property damage, prevent fraud and material misrepresentation, issue or deny Shield payments, administer applicable Catalyst holdback procedures, respond to disputes, and comply with legal, insurance, tax, and regulatory obligations.

Information may be shared only as reasonably necessary for these purposes with the customer or Catalyst involved in the claim, authorized Gig Catalyst personnel, payment and accounting service providers, insurance or claims-support providers, legal or compliance advisers, and governmental or regulatory authorities when legally required. No vendor names are added by this Shield disclosure beyond the providers already identified elsewhere in this Privacy Policy or approved records.

Gig Catalyst may use booking records, service details, statements, photographs, communications, repair estimates, invoices, insurance information, and other evidence to confirm eligibility, assess connection to an eligible service, identify coverage classification, investigate responsibility, prevent fraud or material misrepresentation, communicate decisions, and process approved payments, credits, returns, or accounting records. Submission of information does not promise coverage, payment, approval, or any other particular outcome.

For Guest claims or other cases in which primary-coverage status is relevant, Gig Catalyst may process carrier denials or coverage determinations, written confirmation that no applicable policy covers the loss, signed declarations, and reasonably available supporting documentation. A lack of insurance alone does not automatically approve a claim.

Gig Catalyst may process responsibility determinations, written holdback notices, the stated basis and amount, contestations, a pause on deductions, amounts held pending review, adjustments, credits, returns, and final resolution related to an adjudicated Shield claim. This Privacy Policy does not create or authorize a holdback. The applicable Terms, Claims & Adjudication Policy, and Independent Contractor Agreement govern the procedure; the Privacy Policy describes data processing only.

Shield-related records may be retained under the Privacy Policy's general retention rules and for as long as reasonably necessary to investigate claims, resolve disputes, enforce agreements, satisfy legal or regulatory obligations, and protect Gig Catalyst's rights. Sensitive claim and insurance information must be restricted to authorized personnel and service providers with a legitimate need to process it.

The Claims & Adjudication Policy is available at gigcatalyst.com/shield-policy. The link is provided for reference and does not incorporate that policy into this Privacy Policy or make it part of this Privacy Policy's contractual terms. This Shield data-processing section does not create coverage, alter contractual obligations, or replace the Terms of Service, Claims & Adjudication Policy, Cancellation & Refund Policy, applicable insurance terms, or governing law.

2.9 Zoho Voice Calls and Call Recording

Calls made to or received through Gig Catalyst are recorded by default after the applicable notice is provided. The approved notice is:

• English: “This call is being recorded for quality, training, safety, and security purposes.”
• Spanish: “Esta llamada se está grabando con fines de calidad, capacitación, seguridad y protección.”

Recordings and related call information may be used for: providing and improving concierge services; quality and service review; Concierge Team training; safety and security; managing bookings, assignments, and Support cases; investigating and resolving disputes; responding to legal requests; and meeting legal and regulatory obligations.

Information collected may include: call recordings; phone number and caller identity; date and time; language selection; call purpose and routing outcome; account role and membership tier; booking, assignment, or Support-case references; callback-request information; and staff follow-up information.

Please note: PINs must not appear in recordings, notes, screen pops, or notifications. Authorized verbal PIN verification may occur, but such PINs must be masked, paused, redacted, or otherwise excluded from retained records through the approved technical process.

Call recordings and related records are retained indefinitely, subject to applicable law, privacy requests, legal restrictions, and authorized legal holds. Access is restricted to authorized personnel and service providers with a necessary business or legal purpose.

Callers may request a recording by contacting compliance@gigcatalyst.com or through our verified portal. Release is not automatic; the process includes written request intake, identity verification, verification of requester participation, third-party privacy review (for privileged, investigative, legal, claim, insurance, payment, and safety-sensitive content), redaction where technically feasible, and a formal written decision regarding release.

This disclosure aligns with the Concierge Protection Shield data-processing disclosure available at gigcatalyst.com/shield-policy. This does not replace or alter the Terms of Service, Claims & Adjudication Policy, Cancellation & Refund Policy, applicable insurance terms, or governing law.

3. How We Use Your Information

We use the information we collect for the following legitimate business purposes:

• Providing, operating, and maintaining the Service, including matching customers with qualified Catalysts and administering memberships, bookings, and Priority Blast replacement searches;
• Processing bookings, payments, membership billing, escrow holding, refunds, Mobilization Fees, and Catalyst payouts under our vaulted-commitment model;
• Sending transactional and service-related SMS/text messages regarding bookings, status updates, and account activity (see Section 4);
• Verifying identity, conducting background checks, and enforcing eligibility and safety requirements;
• Providing customer support and responding to inquiries and Data Subject Access Requests (see Section 2.6);
• Creating and using reliability and account-integrity records as described in Section 2.7;
• Detecting, preventing, and addressing fraud, abuse, security incidents, and violations of our Terms of Service;
• Analyzing platform usage through analytics tools to improve Service quality and safety;
• Assisting with contractor vetting, assignment matching, support routing, service-quality monitoring, and reliability or eligibility administration through automated tools as described in Section 3.2;
• Complying with legal, regulatory, tax, and carrier-compliance obligations, including 10DLC A2P messaging requirements.

3.1 Priority Blast and Replacement Matching

When a Catalyst cancels a confirmed booking, Gig Catalyst may process and share the minimum necessary booking information with qualified nearby Catalysts to seek a replacement. Priority Blast is triggered by a Catalyst cancellation, not a customer cancellation.

A replacement search may remain active for up to 30 minutes. During that period, the booking may be presented to qualified nearby Catalysts at the same price. The customer is not charged an additional fee for the replacement search. If a replacement is found, the booking may be reassigned and confirmed. If no replacement is found, or the customer exits the search, the booking may be refunded, subject to the Terms of Service and Cancellation & Refund Policy.

Gig Catalyst may use service category, required skills, availability, approximate location or proximity, reliability information, response history, and customer ratings to identify qualified Catalysts and administer matching. Gig Catalyst does not disclose private customer information beyond what is reasonably necessary to facilitate the booking, and does not share customer contact information for off-platform communication.

3.2 Automated Tools and Artificial Intelligence

Consistent with the Automated Systems & AI Disclosure in the Terms of Service, Gig Catalyst may use automated tools to assist with:

• Contractor vetting and account review
• Assignment matching
• Customer support routing
• Service quality monitoring
• Reliability and eligibility administration

Automated tools may assist with decisions or recommendations but do not replace applicable human review where required by Gig Catalyst policy or law. This Privacy Policy does not claim that Gig Catalyst uses customer data to train artificial-intelligence models.

4. 10DLC A2P SMS & Mobile Information Privacy

Carrier-compliance clause — CTIA / 10DLC A2P

This section is provided in accordance with the Cellular Telecommunications and Internet Association (“CTIA”) Messaging Principles and Practices and the Application-to-Person (“A2P”) 10-Digit Long Code (“10DLC”) registration and vetting requirements of United States wireless carriers.

We will not share your opt-in to an SMS campaign with any third party for purposes unrelated to providing you with the services of that campaign. We may share your Personal Data, including your SMS opt-in or consent status, with third parties that help us provide our messaging services, including but not limited to platform providers, phone companies, and any other vendors who assist us in the delivery of text messages.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Gig Catalyst does not share, sell, trade, or transfer mobile information or SMS opt-in consent data to third parties or affiliates for marketing or promotional purposes. Mobile information and SMS opt-in consent data are collected and processed solely for the delivery of transactional, account-related, and operational text messages that you have expressly requested or authorized. Without limiting the foregoing marketing restriction, Gig Catalyst will never share, trade, rent, lease, license, or sell your mobile phone number or SMS opt-in consent data to any third party or affiliate for marketing or promotional purposes. Mobile telephone numbers and associated consent records are treated as sensitive platform data, are stored separately from general marketing datasets, and are excluded from any data-sharing, data-monetization, data-brokerage, or audience-resale arrangement of any kind for marketing or promotional purposes, whether with third parties or affiliated entities.

4.1 Scope of SMS Messaging

Gig Catalyst may use a customer's mobile number to send transactional messages concerning:

• Account creation and account activity
• Booking confirmations and updates
• Catalyst assignment or replacement updates
• Support requests
• Service reminders and status notifications
• Security or verification events

Message frequency varies. Message and data rates may apply. We do not send promotional or marketing SMS messages without your separate, prior, express written opt-in consent, which you may withdraw at any time.

4.2 Consent & Opt-In

You opt in to receive operational SMS messages from Gig Catalyst only by affirmatively checking the SMS opt-in control when you provide a mobile telephone number (for example at registration or in your account Profile). Providing a phone number alone is not consent. SMS consent is not a condition of purchasing services or maintaining an account, and you may decline or revoke consent at any time without affecting your ability to use the core Service. Customers may manage available communication preferences through the platform or by contacting Gig Catalyst.

4.3 Opt-Out & Help

Customers may reply STOP to opt out of SMS communications at any time. Upon opt-out, you will receive a single confirmation message and no further SMS messages will be sent, except where a message is necessary for the completion of an in-progress booking or for legal compliance. Customers may reply HELP for assistance, contact Gig Catalyst through the platform, or call (916) 571-6564. Message and data rates may apply.

4.4 Data Minimization & Retention

Mobile telephone numbers and SMS consent logs are retained only for as long as necessary to provide the Service, honor opt-out preferences, and satisfy legal and carrier recordkeeping requirements. Consent records are not aggregated, profiled, or appended to marketing audience lists under any circumstance.

5. How We Share & Disclose Information

Gig Catalyst shares personal information only as described in this Policy and as permitted by law. We do not sell your personal information. Specifically, we may disclose information:

• To service providers: trusted vendors that process data on our behalf under written contract, including Stripe (payments), Zoho (CRM, billing, and workdrive), Supabase (database infrastructure), Checkr (background screening), and our SMS messaging provider (solely for the transmission of operational messages described in Section 4). Information may be shared with service providers only as reasonably necessary to process payments and memberships; operate the marketplace; deliver customer support; administer bookings and Priority Blast; maintain security and prevent abuse; and meet legal, regulatory, or insurance obligations.
• To your Catalyst or Customer: limited contact and booking information necessary to perform and complete a specific Gig.
• For Priority Blast replacement matching: the minimum necessary booking information with qualified nearby Catalysts, as described in Section 3.1.
• For legal compliance: to respond to lawful requests from public authorities, to protect rights and safety, and to enforce our Terms of Service.
• In connection with a business transfer: in the event of a merger, acquisition, or asset sale, information may be transferred subject to the protections of this Policy.

Our SMS messaging provider is contractually prohibited from using your mobile number or consent data for any purpose other than transmitting messages on behalf of Gig Catalyst, and is prohibited from reselling or repurposing such data. The SMS marketing restriction in Section 4 controls over any broader data-sharing description in this Policy to the extent of a conflict regarding mobile information or SMS opt-in consent data.

6. Data Retention

We retain personal information only as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Transaction & tax records: 7 years, consistent with tax-compliance requirements.
• Identity verification data: retained for the applicable regulatory retention period following verification.
• DSAR correspondence & records: 3 years from the date of closure, for audit and compliance purposes.
• Account data: retained for the life of the account, then anonymized or securely deleted upon request or termination.
• SMS consent logs: retained for the life of the opt-in plus the carrier recordkeeping period, then purged.

7. Data Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information, including encryption in transit and at rest, access controls limited to authorized personnel, and regular security reviews. Payment data is handled exclusively by Stripe, a PCI-DSS-compliant processor. Despite these measures, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

8. Your Privacy Rights

Subject to applicable law, you may have the following rights regarding your personal information:

• Right to know / access: request a copy of the personal information we hold about you;
• Right to delete: request deletion of your personal information, subject to legal retention obligations;
• Right to correct: request correction of inaccurate or incomplete information;
• Right to data portability: receive your information in a structured, commonly used format;
• Right to opt out of sale or sharing: Gig Catalyst does not sell personal information, and you may opt out of any “sharing” for cross-context behavioral advertising;
• Right to limit use of sensitive personal information: as provided under the CCPA/CPRA;
• Right to withdraw SMS consent: at any time by replying STOP (see Section 4.3).

Residents of Nevada may also exercise rights under Nevada Privacy Law, including the right to opt out of the sale of certain personal information. To submit a privacy request, email compliance@gigcatalyst.com or use the Data Subject Access Request channels in Section 9.

9. Data Subject Access Requests (DSAR)

We process Data Subject Access Requests in accordance with the Gig Catalyst DSAR Procedure. Requests may be submitted through any of the following intake channels: email to compliance@gigcatalyst.com; support tickets; or physical mail. Upon receipt, we log each request, assign a unique DSAR Reference ID, and respond within 30 calendar days of receipt (the response clock pauses until identity is satisfactorily verified). Identity verification is required before processing. Where deletion cannot be fulfilled due to legal retention obligations, we will notify you in writing with the specific legal basis.

10. Children's Privacy

The Service is not directed to, and is not intended for use by, anyone under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a minor, please contact us and we will promptly delete it.

11. Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Service, remember preferences, understand usage through analytics, and support security. You may control cookies through your browser settings; however, disabling cookies may limit functionality of certain features.

12. Third-Party Links & Services

The Service may contain links to third-party websites or integrate third-party services that we do not control. This Policy does not apply to such third parties; we encourage you to review their privacy policies. Our liability for third-party data handling is limited to the terms set in our vendor contracts.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective Date” or revision note at the top and, for material changes, provide notice through the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the revised Policy.

14. Contact