Loading page
Legal
Last updated 20 July 2026.
We collect what we need to pay you, to keep duplicate and fraudulent accounts off the platform, and to show clients that the work they are buying was done by a real person. We do not sell your data and we do not run advertising on it. Clients see your work and a limited public profile, never your email, phone number, payout number or earnings.
You give us: your name, email address, phone number, county, languages, skills, an optional bio and avatar, and (at Tier 1) a government identity document and a selfie. If you withdraw, your M-Pesa number.
You generate by using the platform: the tasks you claim, the work you submit including any files you upload, reviewer decisions and comments on that work, your quality score, XP, level and streak, your wallet balance and every ledger entry behind it, withdrawals, referrals, support tickets and appeals.
We collect automatically: a device fingerprint, the IP address you signed up from and sign in from, and timestamps of activity. These exist for fraud detection and for nothing else.
We do not rely on consent for any of the above, so withdrawing consent is not the mechanism for stopping it. Closing your account is. Where we send optional marketing email, that is consent-based and you can withdraw it without affecting your account.
Tier 1 verification requires a government identity document and a liveness check, and costs $1.50. Documents are uploaded directly to encrypted storage over a short-lived signed URL. They do not pass through our application servers and are not written to application logs.
Only the outcome of a verification (approved, pending or rejected, with a reason) is visible in the product. Clients never see your document, your date of birth or your document number. Access to the underlying files is restricted to the staff handling verification and is logged.
We generate a fraud score from signals including duplicate device fingerprints, repeated payout numbers, VPN use, unusual submission velocity, similarity between submissions and improbable location changes. A high score flags an account for review.
A score alone does not close an account or forfeit a balance. Those decisions are taken by a person, are recorded in our audit log with the reason, and can be appealed. You may ask us what triggered a flag on your account, and we will tell you in enough detail to respond to it without explaining the detection thresholds themselves.
Clients see the work you submit, and a public profile consisting of your name, avatar, county, languages, skills, level, XP, streak, quality score and number of approved submissions. They do not see your email address, phone number, M-Pesa number, earnings, wallet balance, fraud score or identity documents.
Other workers see the same public profile on leaderboards, and nothing more.
Service providers process data on our instructions and only as needed: our hosting and database provider, our identity verification provider, our payment provider for M-Pesa settlement and our email provider. We do not sell personal data to anyone, and we do not share it for advertising.
We disclose data to law enforcement or a regulator only where we are legally required to, and we will tell you unless we are prohibited from doing so.
Under the Kenyan Data Protection Act you can ask us to give you a copy of your data, correct it if it is wrong, delete it, restrict how we use it, or object to processing we do on the basis of legitimate interest. You can also ask for your data in a portable form.
Some of these have limits. We cannot delete financial records we are required to keep, and we cannot delete fraud signals while an investigation is open. Where we refuse a request we will tell you why.
Most of this is self-service: your profile page lets you correct your details, download your transaction history and see your activity log. For anything else, email support@claimgigs.com and we will respond within 30 days. If you are unhappy with our answer you can complain to the Office of the Data Protection Commissioner.
Data is encrypted in transit and at rest. Access to your rows is enforced at the database itself through row-level security rather than only in application code, so a bug in a screen cannot expose another person's data. Uploads go directly to storage over signed URLs. Administrative actions are recorded in an append-only audit log with the actor, the target and the before and after state.
No system is perfectly secure. If we suffer a breach affecting your data we will notify you and the Data Protection Commissioner as required.
ClaimGigs, Kenya. Email support@claimgigs.com or message +254781609905 on WhatsApp. We will publish a postal address and a named data protection contact when the company's registration completes.