Your data stays yours.

You do. Your account, profile, bookings, contracts, messages and payment records belong to you — the talent, client or organisation that created them.

GigBridge KE is the data controller. We decide how the platform collects and processes data, and we are responsible for keeping it safe. The companies that host and process data for us (our hosting, email and payment partners) act only as processors, under our instructions. They never take ownership of your data.

Public talent profiles are shown by choice: a talent member controls what appears on their public page (bio, social links, press kit, rider). Private details like phone numbers, rates and bank information are never shown publicly.

Account: your name, email address, and a password stored only as a one-way hash. Sign-in is required to reach any protected part of the platform; there are no anonymous sign-ups.

Talent profiles: display name, talent type, instrument, genres, location, bio, photo/avatar, social and streaming links, press kit and technical rider files, phone number, and a rate per gig (private to you and GigBridge admin).

Client profiles: organisation name, category, contact name, contact email, phone, location, website and logo.

Bookings & contracts: the requester's name, email, phone, organisation, gig type, event date, venue, location, budget, message, and any attached documents; generated gig agreements and their fee, deposit and split terms.

Messages: the text of messages sent between a client and talent within a booking's chat, plus who sent them and when.

Payments & tax: references, amounts, phone numbers, and status returned by M-Pesa, PesaPal and the KRA eTIMS invoicing service, together with confirmation codes and receipts.

Admin activity: a secure log of actions taken by GigBridge admin and support staff (profile edits, booking changes, role grants) for accountability.

To create and manage your account, and to show public talent profiles to people browsing the directory.

To connect clients with talent: receiving booking requests, generating contracts, sharing documents, and powering the booking chat.

To process payments and refunds through the GBK Guarantee, and to issue compliant tax invoices where required.

To send you essential notifications — booking alerts, agreement links, payment receipts and account-security emails.

To provide customer support, prevent fraud and abuse, and meet our legal obligations. We do not sell your data, and we do not use it to train advertising models.

Other users, only as needed: a client sees the talent profile they booked; talent sees the requester's brief and contact details once a request is accepted; both parties see the messages they sent each other.

Payment partners — PesaPal and Safaricom M-Pesa (Daraja) — receive the details required to authorise and confirm a payment (amount, phone number, reference). PesaPal also processes card and bank-transfer payments.

Tax authority — the Kenya Revenue Authority via the eTIMS/DigiTax service — receives the invoice data legally required to issue a compliant tax invoice.

Email delivery partner — used to send booking alerts, agreements, receipts and account emails. Email content is limited to what that message needs.

Hosting partners — your data is stored in a managed database and served from a global edge network. These providers process data on our behalf and under contract, and do not access it for their own purposes.

We never sell your personal data, and we only share it with law enforcement where we are legally required to do so.

Access control: protected data is only reachable by signed-in users. Anonymous sign-ups are disabled.

Row-Level Security: every table enforces policies so that a user can only read or change their own records. Client bookings, talent profiles, contracts, messages and wallets are isolated per user.

Role separation: admin and support powers are stored in a separate, tightly controlled roles table — never in the browser or trusted from the client — so privileges cannot be faked or escalated.

Encryption: data is encrypted in transit (HTTPS/TLS) across the platform and our partner connections.

Least privilege: public pages show only safe profile fields. Phones, rates and bank details are never exposed publicly.

We keep your data for as long as your account is active, and for as long afterwards as needed to complete bookings, settle payments, issue tax invoices, and meet legal record-keeping requirements.

Booking, contract and payment records are typically retained to support accounting, tax and dispute resolution. You can ask us to delete your account and personal data at any time — see Your rights below.

When data is deleted, it is removed from active systems; standard backups may retain a copy for a limited period before they are also overwritten.

Access — you can ask what data we hold about you.

Correction — you can fix inaccurate or out-of-date details, directly from your profile or by contacting us.

Export — you can request a copy of your data in a portable format.

Erasure — you can request that your account and personal data be deleted, subject to legal record-keeping for payments and tax.

Withdrawal — you can stop marketing or non-essential notifications; essential account and booking messages still apply.

To exercise any of these rights, email bookings@gigbridge.co.ke and tell us what you need. We respond within a reasonable time and verify your identity first.

Under the GBK Guarantee, GigBridge KE coordinates payment processing through approved payment partners. GigBridge KE does not operate a traditional escrow account or earn interest on booking funds.

Payment card numbers and bank account credentials are handled entirely by our payment partners. GigBridge never stores full card numbers or your banking passwords — only the references, amounts and confirmation results that partners return to us.

Talent payouts and client refunds follow the terms agreed in your booking contract and the policies of the payment provider used.

GigBridge KE is intended for the creative professionals and organisations who book and perform live work. The platform is not directed at children under 16, and we do not knowingly collect their data.

If you believe a minor has registered, contact us and we will review and remove the account.

We may update this statement as the platform grows or as laws change. Material changes will be reflected in the effective date at the top of this page, and we will notify active users where appropriate.

Questions about your data, this statement, or a request to access, correct, export or delete your data:

Email: bookings@gigbridge.co.ke

Website: www.gigbridge.co.ke