Privacy Policy

Effective September 23, 2026. Last revised September 23, 2026.

This Policy describes how Workman Magic, LLC (“GigWand,” “we,” “us”) collects, uses, discloses and retains personal information in connection with the GigWand service at gigwand.app (the “Service”). It forms part of, and is incorporated into, our Terms of Service.

1. Two roles, and why the distinction matters

We process personal information in two capacities, and your rights differ depending on which applies.

As a controller. In respect of the information of Subscribers (the performers and businesses who hold accounts with us), we determine the purposes and means of processing and act as a controller. Sections 2 through 9 apply.

As a processor. In respect of Client Data (the information about their own clients and prospective clients that a Subscriber submits to the Service), the Subscriber is the controller and we act solely as a processor on that Subscriber’s documented instructions. We do not sell that data, do not use it to market to the individuals it concerns, and do not use it for our own purposes. Section 10 applies. If you are a client of a performer who uses GigWand and wish to exercise rights over your information, your request should be directed to that performer, and we will assist them in responding.

2. Information we collect from Subscribers

2.1 Information you provide.

  • Account information. Name, business or performing name, electronic mail address, and a hashed password. We do not store passwords in a recoverable form.
  • Business profile. Postal address, telephone number, website, logo, brand color and the details you elect to display on your booking form, agreements and invoices.
  • Billing information. The subscription plan and billing period you select, and the billing records returned to us by our payment processor. Payment card numbers are submitted directly to Stripe and are never received, processed or stored by us.
  • Content you create. Templates, automations, performances, documents and correspondence.
  • Support communications. Messages you send us through the in-application support facility.

2.2 Information collected automatically.

  • Authentication. A strictly necessary session cookie. It carries no advertising or profiling function and cannot be disabled while remaining signed in.
  • Operational logs. Internet protocol address, user agent, the time of a request and the page requested, retained for security, abuse prevention and diagnosis.
  • Audit records. A record within your own account of significant actions taken in it, which exists for your benefit and for dispute resolution.
  • Electronic mail delivery events. Whether a message we sent on your behalf was accepted, bounced or failed.

We do not use advertising cookies, third-party analytics tags, tracking pixels, or cross-site trackers, and we do not participate in any advertising network.

3. How we use information

We use Subscriber information to:

  • provide, operate, secure and support the Service;
  • authenticate you and protect accounts against unauthorized access;
  • process subscription payments and maintain billing records;
  • send service communications, including electronic mail verification, notifications of activity on your account, billing notices and material changes to these documents;
  • provide AI-assisted drafting of personalized quote messages when you choose to use that feature;
  • diagnose faults, prevent abuse and enforce our Terms of Service; and
  • comply with legal obligations and establish, exercise or defend legal claims.

We do not sell personal information, and we do not share it for cross-context behavioral advertising, as those terms are defined under applicable law. We have not done so in the preceding twelve months.

4. Legal bases

Where the General Data Protection Regulation applies, we rely on the performance of a contract with you for the provision of the Service and the processing of payment; on our legitimate interests in securing the Service, preventing abuse and improving reliability; and on compliance with legal obligations for records we are required to retain.

5. Disclosure and sub-processors

We disclose personal information to the service providers listed below, each engaged to perform a defined function on our behalf and bound by contract to process it only as instructed. We do not disclose it to any other third party except as set out in Section 6.

ProviderFunctionLocation
Stripe, Inc. Payment processing and subscription billing United States
Resend, Inc. Transactional and outbound email delivery United States
Anthropic, PBC AI-assisted quote message drafting, when the Subscriber chooses to use it United States
Cloudflare, Inc. Content delivery, DNS and network security United States
Amazon Web Services, Inc. Application and database hosting United States

Note on AI-assisted quote drafting. When you choose to generate a personalized message while preparing a quote, GigWand sends the lead details and quote information needed to draft that message to Anthropic. Anthropic returns the suggested text to GigWand for you to review, edit and send. This occurs only when you choose to use the AI drafting feature. GigWand does not use Anthropic to automatically send messages, make booking decisions, or determine availability. Anthropic does not use this content to train its models.

6. Other disclosures

We may disclose personal information where we believe in good faith that it is necessary to:

  • comply with law, legal process, or an enforceable governmental request;
  • enforce our Terms of Service, including investigation of a potential breach;
  • detect, prevent or address fraud, security or technical issues; or
  • protect against harm to the rights, property or safety of Workman Magic, LLC, our subscribers, or the public.

In the event of a merger, acquisition, financing or sale of assets, personal information may be transferred as a business asset, subject to the acquirer honoring this Policy or giving notice of any material change.

7. Retention

We retain Subscriber information for as long as the account is open. You may export your information at any time while it is open, from within the Service.

Closing an account deletes it immediately. The Subscriber’s information, the database holding it, the user records and the stored credentials are destroyed at the point of closure. There is no recovery period and no archived copy retained for the account holder’s benefit; we cannot restore a closed account or its contents. Anything you wish to keep must be exported first.

One limited closure record is retained for our own business records and statistics: the business or performing name, the craft, the plan held, the date of signup and the date of closure. It does not include the electronic mail address, so no message can be sent to a closed account, and it is not used for marketing. Our lawful basis is our legitimate interest in keeping accurate records of our own business.

Billing and tax records held by us and by our payment processor are retained for the period required by law. Backups taken before closure expire on their ordinary cycle and are not restored to reinstate a closed account.

8. Security

We maintain administrative, technical and physical safeguards appropriate to the nature of the information, including encryption in transit, hashed credentials, access controls, logical separation of each subscriber’s records into a distinct database, and restricted administrative access. No system is wholly secure, and we do not warrant that the Service cannot be compromised. You are responsible for maintaining the confidentiality of your credentials and for the actions of your Users.

9. Your rights

Subject to applicable law and to verification of your identity, you may request access to, correction of, a portable copy of, or deletion of, personal information we hold about you as a controller; and you may object to or request restriction of certain processing. Much of this is available directly within the Service, through your account settings and export facilities.

Residents of Nevada. Chapter 603A of the Nevada Revised Statutes gives residents of this State the right to direct an operator of an internet website not to make any sale of their covered information. We do not sell covered information, and have not done so. You may nonetheless submit such a request to the address in Section 12, and we will respond within sixty (60) days.

Residents of California. You have the right to know what personal information is collected, used and disclosed; to request deletion and correction; to opt out of sale or sharing, which we do not engage in; and not to be discriminated against for exercising these rights.

European Economic Area and United Kingdom. You additionally have the right to lodge a complaint with your supervisory authority. Information is processed in the United States; where a transfer mechanism is required, we rely on Standard Contractual Clauses concluded with the providers named in Section 5.

To exercise a right, write to [email protected]. We will respond within the period required by applicable law.

10. Client Data, where we act as processor

Client Data is processed solely to provide the Service to the Subscriber who submitted it. We do not sell it, do not use it to market to the individuals concerned, do not use it to build or improve products beyond providing the Service, and do not disclose it except to the sub-processors named in Section 5 or as required under Section 6.

We delete or return Client Data on termination of the Subscriber’s account in accordance with Section 7, and we assist the Subscriber, so far as reasonably practicable, in responding to requests from the individuals it concerns. Each Subscriber is responsible for having a lawful basis for the Client Data it submits, for providing any notice required to the individuals it concerns, and for the content of communications it sends through the Service.

11. Children

The Service is a business tool and is not directed to children. We do not knowingly collect personal information from any person under the age of sixteen. If we learn that we have, we will delete it.

12. Changes and contact

We may revise this Policy. Where a revision materially affects how we handle personal information, we will give notice by electronic mail to the address on your account not less than thirty (30) days before it takes effect. The current version is always published at this address, and the effective date appears at its head.

Workman Magic, LLC is a Nevada limited liability company based in Las Vegas, Nevada, United States. Questions, requests and complaints may be sent by electronic mail to [email protected], which is the designated request address for the purposes of Chapter 603A of the Nevada Revised Statutes.

See also our Terms of Service, including the no-refund provision at Section 6.