Privacy Policy
Effective date: 2025-01-01 · Last updated: 2025-07-11
1. Who We Are
GigAnalytics is a lightweight analytics dashboard for freelancers managing 2–5 income streams. We turn raw payments and minimal time inputs into actionable ROI decisions, while handling your financial data with the strictest care.
Contact: hello@hourlyroi.com
2. What Data We Collect
| Data | Why |
|---|---|
| Email address | Account creation and login |
| Payment records (Stripe/PayPal/CSV) | Core analytics — true hourly rates, ROI |
| Time entries | Billable hour tracking |
| Income stream names and platforms | Organizing your dashboard |
| Monthly income target | "What-if" pricing suggestions |
| Subscription billing info | Processed by Stripe; we never store card numbers |
| Anonymous usage events (PostHog) | Product improvement (opt-out in Settings) |
We do not collect Social Security numbers, government IDs, banking credentials, or browser fingerprints.
3. Opt-In Benchmarking & k-Anonymity
The GigAnalytics benchmark layer shows how your hourly rate compares to similar freelancers.Benchmarking is strictly opt-in and disabled by default.
How it works
- Once per month an aggregate function runs across opted-in users.
- It computes anonymized percentile rates (p25/p50/p75/p90) grouped by service category and platform.
- k-Anonymity (k=10): any group with fewer than 10 contributing users is suppressed entirely — no rates are published for that group.
- Only the aggregate percentiles are stored — never your individual rate, name, or user ID.
- The
benchmark_snapshotstable is write-locked at the database level — the only write path is theaggregate_benchmark_snapshots()security-definer function. No application code can insert raw data into that table.
To opt out: Settings → Privacy → Benchmark participation. Your data is excluded from the next monthly aggregation immediately.
4. How We Use Your Data
- Deliver the product: ROI, hourly rates, heatmaps, pricing experiments
- Improve the product: aggregate usage analytics (no PII attached)
- Billing: process subscriptions via Stripe
- Support: diagnose and fix reported issues
We do not sell your data. We do not share your data with third parties for advertising.
5. Security
| Layer | Detail |
|---|---|
| Row Level Security | Every table enforces auth.uid() = user_id — no cross-user data access possible |
| Benchmark writes | Restricted to SECURITY DEFINER function; INSERT/UPDATE/DELETE revoked from authenticated role |
| Anonymous role | Explicitly revoked from all user data tables |
| Service keys | Stored only in Vercel environment variables; never in source code |
| Transport | TLS / HTTPS only |
| Stripe | PCI-compliant; we receive subscription metadata only, never card data |
6. Data Retention
Your data is retained while your account is active. Deleting your account removes all rows owned by your user ID via cascading deletes. Aggregate benchmark data (which does not contain your individual rate) may persist for historical trend analysis.
7. Your Rights
Depending on your jurisdiction (GDPR, CCPA) you may have the right to:
- Access a copy of your data
- Delete your account and all associated data
- Correct inaccurate data
- Opt out of benchmarking at any time (Settings → Privacy)
- Opt out of usage analytics (clear
ph_local storage keys)
To exercise these rights: hello@hourlyroi.com
8a. AI-Powered Features
GigAnalytics uses AI models (including Claude by Anthropic, served via Vercel AI Gateway) to generate personalized income insights, pricing suggestions, and scheduling recommendations.
- AI outputs are generated automatically and may not reflect your full circumstances.
- Recommendations are for informational purposes only and do not constitute financial, tax, investment, or legal advice.
- We do not guarantee the accuracy of AI-generated outputs. You assume all responsibility for decisions made using these insights.
- AI outputs are computed server-side; your raw data is not sent to third-party model providers in identifiable form.
8. Cookies & Analytics
We use PostHog for product analytics. Events capture anonymous actions (e.g., "import completed") without PII. No advertising cookies are set. No third-party ad trackers.
9. Children
GigAnalytics is not directed at children under 13. We do not knowingly collect data from children.
10. Changes
We will notify registered users by email of material changes.
11. Contact
Questions or data requests: hello@hourlyroi.com