Privacy Policy
Last updated: September 2026
This policy explains what information Gigflow collects, why, who we share it with and what rights you have. We have kept it plain. If anything is unclear, email hello@gigflow.co.uk.
On this page
1. Who we are
Gigflow is a trading name of Superlinear Design Limited, a company registered in England and Wales. Company number 14040830. Registered office: Cedar Lodge, York Road, Shiptonthorpe, York, YO43 3PH. We are registered with the Information Commissioner’s Office, registration number ZC097064. When this policy says “we”, “us” or “our”, it means Superlinear Design Limited. For anything to do with your data, email hello@gigflow.co.uk.
2. Your data and your contacts’ data
There are two kinds of personal data in Gigflow, and the law treats them differently.
Your own details, such as your name, email and account information. For these we are the data controller, and this policy explains what we do with them.
Details you enter about other people, such as clients, venue contacts and agency bookers. For these you are the data controller and we are your data processor. We only handle them to run Gigflow for you, as set out in section 8 of our Terms of Service.
3. What we collect
Account details: your name, email address, profile photo and password. Passwords are stored encrypted and we cannot read them.
Your gig records: dates, venues, fees, agencies, commission, gig types and notes.
Money records: payments, expenses, receipt images, and the bank details you add so they can appear on your invoices (account name, sort code and account number).
Your home postcode and venue addresses, used to calculate mileage. We do not track your live location.
Subscription details: your plan and payment status. Card payments are handled by Stripe. We never see or store your full card number.
Messages you send us by email, the contact form or the chat widget on our website.
How you found us, such as a referral link or the page that sent you, so referral rewards go to the right person and we know what is working.
Basic technical and usage information, such as device type, browser and pages visited, to keep Gigflow secure and improve it.
4. Why we use it
To provide Gigflow: tracking gigs, calculating mileage, creating and sending invoices, recording expenses and producing tax reports. Legal basis: our contract with you.
To take subscription payments and manage your plan. Legal basis: our contract with you.
To tell you about changes to the service, your account or these policies. Legal basis: our contract with you.
To answer your questions and support requests. Legal basis: our legitimate interest in helping our users.
To keep Gigflow secure, prevent misuse and understand how it is used so we can improve it. Legal basis: our legitimate interests.
To send you product news and tips, if you have agreed to receive them. Legal basis: your consent. You can unsubscribe at any time.
To use analytics cookies on our website, if you accept them. Legal basis: your consent.
To keep payment and tax records. Legal basis: our legal obligations.
You need to give us an email address and password to have an account. Everything else is up to you, though some features will not work without the relevant information.
We do not sell your data. We do not make automated decisions about you that have legal or similarly significant effects.
5. Who we share it with
We only share data with the companies that help us run Gigflow. Each one only gets what it needs.
Supabase: database, file storage and sign in. Data held in the EU.
Vercel: hosting for the app.
Framer: hosting and visitor analytics for our website.
Stripe: subscription payments.
Resend: sending emails, including the invoices you send to your clients.
Google Maps Platform: address lookup and driving distances. Addresses only, not linked to your identity.
Crisp: the chat widget on our website.
Plausible: privacy friendly website analytics, without cookies.
Google Analytics: website analytics, only if you accept analytics cookies.
Xero: only if you choose to connect your Xero account, and only the records you choose to send.
We may also share data if the law requires it, or if Gigflow is transferred to another company, in which case this policy continues to apply to your data.
6. Data outside the UK
Your Gigflow records are stored in the EU. Some of the providers above are based in the United States or use servers there. Where data leaves the UK, we rely on safeguards recognised under UK law, such as UK adequacy decisions, the UK extension to the EU-US Data Privacy Framework, or the UK’s approved contract clauses.
7. Things you choose to share
Some features exist to share information, and you are in control of them.
Invoices you send go to your client and include your business and bank details.
Calendar feeds and shared calendars can be seen by anyone you give the link to.
Availability posters and public profiles can be seen by anyone you share them with.
You can stop sharing at any time in the app.
8. Cookies and analytics
Essential: the app uses cookies and local storage to keep you signed in and keep your account secure. These are always on because Gigflow cannot work without them.
Analytics without cookies: Plausible and Framer measure visits to our website without cookies and without identifying you.
Analytics with cookies: Google Analytics sets cookies on our website only if you accept them in the cookie banner. You can change your mind at any time using the cookie settings link on the site.
Chat: if you use the chat widget, Crisp sets a cookie so your conversation is remembered between pages.
9. How long we keep it
We keep your data for as long as you have an account. If you ask us to delete your account, we remove your data from our live systems within 30 days, and it drops out of our backups shortly after. We keep records of payments you made to us for six years, because the law requires it. Support emails are kept for up to two years.
10. How we protect it
Data is encrypted in transit and at rest.
Passwords are stored encrypted.
Database rules mean each user can only reach their own records.
Backups are taken automatically.
No online service can promise perfect security. If a breach ever affects your data, we will tell you without undue delay.
11. Your rights
You have the right to:
See a copy of the data we hold about you.
Have inaccurate data corrected.
Have your data deleted.
Receive your data in a portable format. You can also export your records from the app.
Ask us to restrict how we use your data.
Object to uses based on our legitimate interests.
Withdraw consent at any time, where we rely on consent.
Opt out of marketing emails at any time, using the unsubscribe link or by emailing us.
To use any of these rights, email hello@gigflow.co.uk. We will reply within one month. There is no charge.
12. Children
Gigflow is for people aged 18 and over. We do not knowingly collect data from anyone younger.
13. Complaints
If you are unhappy with how we have handled your data, please email hello@gigflow.co.uk first. We will acknowledge your complaint within 30 days and do our best to put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.
14. Changes to this policy
We may update this policy from time to time. If a change is significant we will tell you by email or in the app before it takes effect. The date at the top shows when it was last updated.
15. Contact
Email: hello@gigflow.co.uk
Gigflow is a trading name of Superlinear Design Limited. Company number 14040830. ICO registration ZC097064. Registered office: Cedar Lodge, York Road, Shiptonthorpe, York, YO43 3PH.
