Privacy Policy
Last updated: August 13, 2026
1. Who We Are
WinTheGig (“we”, “us”) is operated by Jakub Bosyj. This policy explains what data we collect, how we use it, and the rights you have over it when you use our website, web application, and browser extension (“the Service”).
2. Data We Collect
- Account data — email address and display name, collected when you register or sign in with Google.
- Usage data — credits used, trial status, subscription status, and generation counts, stored to operate the Service and enforce plan limits.
- Content you submit — job descriptions, skills, and other text you enter to generate proposals. This content is sent to our AI providers solely to produce your proposal draft and is not used to advertise to you.
- Local data — your proposal history and preferences are stored in your browser (localStorage) and stay on your device.
3. AI Providers
Proposal generation is performed by third-party AI providers: Google (Gemini API) and Cloudflare (Cloudflare Workers AI, hosting the Gemma 4 26B and Llama 3.2 3B models). Text you submit is transmitted to these providers and processed according to their respective terms and privacy policies. If you connect your own AI provider via “bring your own key” (future feature), your content will be processed by that provider under your own account.
4. Storage and Security
Account and usage data is stored in Google Firebase (Firestore Authentication and Cloud Firestore). We apply access controls so that sensitive fields (credits, subscription state) can only be modified by our servers. No payment card data ever touches our servers — payments are handled entirely by PayPal or Stripe.
5. Cookies and Similar Technologies
We use strictly necessary storage (authentication sessions and preferences) and, where enabled, Firebase Analytics for aggregated, non-identifying usage statistics. You can clear this data at any time through your browser settings.
6. Data Retention and Deletion
We retain account data while your account is active. When you delete your account, your profile data is removed from our systems, subject to legal retention obligations (e.g. payment records).
7. Your Rights (GDPR)
If you are located in the EU/EEA, you have the right to access, rectify, or erase your personal data, restrict or object to processing, and data portability. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with your local supervisory authority.
8. Children
The Service is not directed to persons under 18. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the website. The date at the top of this page always reflects the latest revision.
10. Contact
Privacy questions? Contact us at support@winthegig.com.