Privacy Policy
Last updated: September 10, 2026
1. Who We Are
WinTheGig (“we”, “us”) is operated by Jakub Bosyj. This policy explains what data we collect, how we use it, and the rights you have over it when you use our website, web application, and browser extension (“the Service”).
2. Data We Collect
- Account data — email address and display name, collected when you register or sign in with Google.
- Usage data — credits used, trial status, subscription status, and generation counts, stored to operate the Service and enforce plan limits.
- Content you submit — job descriptions, skills, and other text you enter to generate proposals. This content is sent to our AI providers solely to produce your proposal draft and is not used to advertise to you.
- Local data — your proposal history and preferences are stored in your browser (localStorage) and stay on your device.
3. AI Providers
Proposal generation is performed by third-party AI providers. By default, the text you submit is processed through Google (Gemini API) solely to produce your draft, under Google's terms and privacy policy. If you connect your own AI provider through “bring your own key” (BYOK), your content is processed by that provider under your own account and its terms.
4. Storage and Security
Account and usage data is stored in Google Firebase (Firestore Authentication and Cloud Firestore). We apply access controls so that sensitive fields (credits, access period) can only be modified by our servers. No payment card data ever touches our servers — payments are handled entirely by PayPal. When you buy a plan, we also record the fact and time you accepted the Terms and the no-refund policy, as required for digital-content sales.
5. Cookies and Similar Technologies
We use strictly necessary storage (authentication sessions and preferences) and, where enabled, Firebase Analytics for aggregated, non-identifying usage statistics. You can clear this data at any time through your browser settings.
6. Data Retention and Deletion
We retain account data while your account is active. When you delete your account, your profile data is removed from our systems, subject to legal retention obligations (e.g. payment records).
7. Your Rights (GDPR)
If you are located in the EU/EEA, you have the right to access, rectify, or erase your personal data, restrict or object to processing, and data portability. To exercise these rights, contact us at the address below. You also have the right to lodge a complaint with your local supervisory authority.
8. Children
The Service is not directed to persons under 18. We do not knowingly collect personal data from children.
9. Changes to This Policy
We may update this policy from time to time. Material changes will be announced on the website. The date at the top of this page always reflects the latest revision.
10. Contact
Privacy questions? Contact us at support@winthegig.com.