Privacy Policy

We collect information you provide when you create or update an account, publish a profile, add availability, upload a photo or resume, or send a contact request. This may include your name, email address, profile details, rates, locations, dates, skills, biography, photo, resume information, and the contents of messages or requests.

When you sign in through Google, Facebook, Microsoft, or another supported provider, we receive the identity information that provider shares, such as your provider identifier, name, email address, profile photo, and email-verification status. We use it to create or authenticate your VelvetGig account.

We also collect technical information needed to operate the service, such as IP address, browser and device details, request logs, authentication state, approximate diagnostic information, and security or rate-limit events. We use essential browser storage for authentication and service operation. We do not use advertising cookies or sell personal information.

If you choose to sign in with Google, VelvetGig requests only the basic sign-in scopes openid, email, and profile. We do not request access to your Gmail, Google Drive, Calendar, Contacts, or any other Google service, and we cannot read, modify, or delete anything in your Google account.

From those scopes Google gives us your Google account identifier, your email address and whether Google has verified it, your name, and your profile picture URL. We use that information for one purpose: to create your VelvetGig account, to recognise you when you return, and to pre-fill your display name and profile photo so you do not have to enter them again. Your Google account identifier and email address are stored so that a later sign-in is matched to the same account.

We do not sell Google user data. We do not use it for advertising, ad targeting, or audience building, and we do not transfer it to third parties except to the infrastructure providers described below that host the service on our behalf, or where we are legally required to do so. VelvetGig's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect VelvetGig from your Google account at any time from your Google account permissions page. Doing so stops future sign-ins through Google; to remove the data already held by VelvetGig, request deletion of your VelvetGig account as described in the retention section below.

We use information to:

• create accounts, authenticate users, and maintain sessions;
• publish and search profiles and availability at the user's direction;
• forward contact requests and send service or welcome emails;
• provide support, respond to requests, and administer the service;
• prevent fraud, abuse, unauthorized access, and security incidents;
• monitor performance, troubleshoot errors, and improve the product; and
• comply with legal obligations and enforce our terms.

Agent profiles and availability are intended to be public. A public profile may include the agent's display name, photo, professional information, rates, skills, location and dates, biography, and selected resume details. Public pages may be indexed by search engines.

A client's contact request is shared with the selected agent. We do not make a client's request information public by default. We do not sell personal information or share it with third parties for their own direct marketing.

We use infrastructure and service providers to operate VelvetGig. Information may be stored in Microsoft Azure Storage and processed by Azure Functions. Authentication may involve the social provider you choose. Transactional email may be sent through Microsoft Graph and the configured mailbox. These providers process information only as needed to provide their services, subject to their own terms and privacy policies.

Providers may process or store information in countries other than your own. By using VelvetGig, you acknowledge that these transfers may occur, subject to applicable legal safeguards.

We keep account, profile, request, and security information for as long as needed to provide the service, meet legal and accounting obligations, resolve disputes, enforce agreements, and protect the service. Short-lived authentication and handoff records are designed to expire after their stated security window.

You may request correction or deletion of your personal information by contacting VelvetGig through the website. Deleting an account may remove or disable its profile and associated content, but some information may remain in backups, logs, fraud-prevention records, or legal files for a limited period. Public copies or search-engine caches may persist outside our control.

We use reasonable technical and organizational safeguards, including authenticated API access, signed sessions, private file storage, access controls, rate limiting, and transport security. No internet service or storage system is completely secure. Do not submit information that you are not comfortable transmitting or storing online.

Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing of your personal information, and to receive a portable copy. You may also withdraw consent where processing is based on consent. Contact us with a description of your request and the email address associated with your account. We may need to verify your identity before completing it.

You can stop using the service, update profile information, remove optional profile content, or decline to provide optional information. Some information is required to create an account or provide a requested feature.

VelvetGig is not directed to children under 13, or the higher minimum age required in your jurisdiction. We do not knowingly collect personal information from children. If you believe a child has provided information, contact us so we can investigate and remove it where appropriate.

We may update this Privacy Policy when our practices or legal obligations change. The updated version will be posted here with a new "last updated" date. Your continued use of VelvetGig after an update means you acknowledge the revised policy.

Privacy questions and requests should be sent through the contact details provided on the VelvetGig website. Please include enough information for us to identify the relevant account or request without sending unnecessary sensitive information.