Privacy policy
Last updated 8 August 2026 · Tailjay Pte. Ltd.
This policy explains what personal information DeeLab Gigs collects, why we collect it, how we use it, and what rights you have over it. We have written it in plain language on purpose — if anything is unclear, please ask us.
DeeLab Gigs is operated by Tailjay Pte. Ltd. (UEN 202307708D), a company registered in Singapore. When this policy says "we", "us" or "our", it means Tailjay Pte. Ltd. — the same company that operates DeeLab and DeeLab Academy.
It applies to everyone who visits deelabgigs.com, submits a hiring enquiry, joins the talent waiting list, or is engaged by us for paid work.
1. What we collect
When you submit a hiring enquiry
The "Hire our data team" form asks for your company name, your work email address, and optionally your name. It also collects what you tell us about the work: the kind of work, volume, timeline, region and languages, whether you want individuals or a managed team, your quality bar and any note about budget. No account is required and we do not create one for you.
When you join the talent waiting list
We collect your name, email address, the region you are based in, your main skill, whether you would like your DeeLab Academy credentials shared with DeeLab Gigs, and your agreement to this policy. Joining the waiting list does not create an account and does not give you access to the platform.
When you visit the site
- Pages visited, time on page, traffic source, browser and device type, and approximate location at country or city level — via Google Analytics 4, loaded through Google Tag Manager, subject to your cookie choices, described below.
- Basic performance and security information handled by Cloudflare, which serves this site. This includes your IP address, which Cloudflare processes to route and protect the request.
How we ask depends on where you are. Where local law requires your prior consent — for example in the EEA, the UK and Switzerland — analytics run only if you accept them. Elsewhere, analytics run with this notice, as local law permits, and you can switch them off at any time in Cookie settings. Either way we use Google Tag Manager with Consent Mode v2. If analytics consent is not given, Google Analytics runs in a restricted, cookieless mode and we receive only aggregate, modelled data — no personal tracking, no analytics cookie.
When you sign in
Signing in is handled by Keycloak at id.deelab.ai, the DeeLab family's own identity service — one account works here and at DeeLab Academy. We never see or store your password. We store the identifier Keycloak gives us, your email address, your display name, and the groups Keycloak says you belong to. The platform is not open for general sign-in at the time of writing.
Your DeeLab Academy credentials
If you have consented at DeeLab Academy to share your credentials with DeeLab Gigs, we read a summary of them — which certificates you hold, which courses you passed, and a link to your portfolio. This flows one way only: we read from the Academy and can never write to it. Withdraw that consent at the Academy and the credentials stop reaching us, and any copy we hold is dropped.
If we engage you for paid work
People who are put on a client crew have more processed than visitors do, and we describe it here even though sign-up is not yet open to the general public — so that nobody can be engaged ahead of a policy that covers them:
- Payment details — the account holder name and the payment account details (a bank account, or an account with a payment service such as Wise) required for your country, so we can pay you. These are encrypted in our database. Our staff can see them in full, because the person making the payment needs them; every such access is recorded with who looked and when.
- Work contract — the status of your contract with Tailjay Pte. Ltd. and a link to the signed document, which is stored on our private Google Drive.
- Timesheets and deliverables — the periods you claim, the quantity, the agreed rate, and who approved it.
- Invoices and payments — what was owed, what was paid, and the payment reference. Worker payments are made by bank transfer via Wise.
- Ratings — how an engagement went, recorded by our staff. Ratings stay in DeeLab Gigs. They are never sent to DeeLab Academy: a credential says what you were taught, a rating says how a job went, and the two must not be confused.
2. Why we collect it, and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to your hiring enquiry and scoping the work | Legitimate interest — you asked us to |
| Holding your place on the talent waiting list and telling you when the pool opens | Consent — you can withdraw it at any time |
| Understanding how the site is used so we can improve it | Consent — analytics cookies only run if you accept them |
| Keeping the site available and secure | Legitimate interest |
| Showing a "Certified by DeeLab Academy" badge on a profile | Consent — given at the Academy, withdrawable there |
| Placing you on a crew, agreeing your rate and paying you | Contract |
| Recording who viewed payment details | Legitimate interest — protecting the person whose details they are |
| Keeping financial and compliance records | Legal obligation |
3. Who processes it
We do not sell your personal data. We share it only with the providers below.
Cloudflare — content delivery, security and performance
Cloudflare serves this website. Every request passes through it, so it processes your IP address and request metadata to deliver and protect the site. Cloudflare also runs a cookieless Web Analytics beacon on this site: it measures page performance and aggregate traffic without setting any cookie and without an identifier that follows you between visits. Because it stores nothing on your device and does not track individuals, it is not part of the cookie choice below and runs on every visit.
Google — analytics
Google Tag Manager loads Google Analytics 4, which we use to understand how the site is used. Active subject to your cookie choices; where consent is not given it runs in Consent Mode's restricted, cookieless mode.
Google — document storage
Signed work contracts are stored in a private, access-controlled Google Drive folder. They are not publicly accessible.
Keycloak — sign-in
Our own identity service at id.deelab.ai, shared with DeeLab Academy, operated by us.
Wise — worker payments
Payments to people we engage are made by bank transfer via Wise. Your payment details are shared with Wise only to make a payment you are owed.
4. Cookies
When you first visit, a banner asks for your choice. There are two categories:
| Category | What it does | Can you switch it off? |
|---|---|---|
| Strictly necessary | Your session while signed in, security, and remembering your cookie choice. | No — the site cannot work without them. |
| Analytics | Google Analytics 4, to understand how the site is used. | Yes. Declined by default in countries that require prior consent. |
We do not run advertising or marketing cookies on DeeLab Gigs, and there is no advertising category to choose. If that ever changes, this policy changes first.
Your choice depends on where you are. In countries that require prior consent — the EEA, the United Kingdom, Switzerland, Brazil and Canada — analytics is denied until you accept. Elsewhere it is on by default and you can turn it off. We honour Global Privacy Control: if your browser sends that signal and you have not made an explicit choice, we treat it as a refusal. An explicit choice always wins.
Your choice is stored in your browser and you can change it at any time from the cookie settings link in the footer.
5. How long we keep it
| Data | How long |
|---|---|
| Hiring enquiries | Retained while we are in contact and for up to 24 months afterwards, so we can pick up a conversation you restart. Deleted sooner on request. |
| Talent waiting list | Until you ask to come off it, or until the pool opens and you either join or decline. |
| Analytics | 14 months (Google Analytics default). Aggregate only if you declined. |
| Work contracts, timesheets and invoices | 7 years, as required by Singapore accounting and tax law. |
| Payment details | While you are engaged, and for as long as the related payment records must be kept. Deleted or anonymised on request once no longer needed. |
| Ratings | Kept for as long as your profile is active. Anonymised if you leave. |
| Records of who viewed payment details | Kept as a durable audit record — the point of recording access is lost if the record can be pruned. |
6. Your rights
Depending on where you are based, you have some or all of the following rights:
- Access — ask what we hold about you and receive a copy.
- Correction — ask us to correct anything inaccurate or incomplete.
- Deletion — ask us to delete your data, subject to the retention obligations above.
- Portability — ask for your data in a machine-readable format (under GDPR).
- Object — ask us to stop processing based on legitimate interest.
- Withdraw consent — where we rely on consent, you can withdraw it at any time.
To exercise any of these, contact us using the details in section 10. We will respond within 30 days.
Singapore (PDPA)
Your rights are governed by the Personal Data Protection Act 2012. If you are not satisfied with our response you can contact the Personal Data Protection Commission at pdpc.gov.sg.
EU / EEA and the United Kingdom (GDPR)
If the GDPR or UK GDPR applies to you and you are not satisfied with our response, you have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office.
7. How we protect your data
- Everything is transmitted over encrypted HTTPS.
- Payment details are encrypted in our database, not merely access-controlled.
- Every staff view of someone's payment details is recorded with who looked and when.
- The Gigs application never sees or stores your password. Sign-in is handled by our own identity service (Keycloak), which stores passwords only as salted one-way hashes — never in readable form, and never accessible to DeeLab staff.
- Signed contracts are held in a private, access-controlled Drive folder.
- Integration credentials are stored encrypted.
If a data breach affects your personal data we will notify the relevant authorities within the timeframes the law requires — within 3 calendar days under the Singapore PDPA, and within 72 hours under the GDPR — and affected people without undue delay.
8. International transfers
Tailjay Pte. Ltd. is based in Singapore. Our providers may process data in other countries, including the United States. Each operates under recognised data protection frameworks and is bound by a data processing agreement.
- Cloudflare — globally distributed, by design
- Google — United States and globally
- Wise — worldwide depending on the payment corridor, including the United Kingdom, the European Union, and Singapore / Asia-Pacific.
9. Changes to this policy
We may update this policy. The date at the top changes when we do, and for significant changes we will say so on the site. In particular, this policy will be extended when sign-up opens to the general public.
10. Contact us
Questions about this policy, or want to exercise your rights?
Tailjay Pte. Ltd. (UEN 202307708D) — DeeLab Gigs
Website: deelabgigs.com
Email: [email protected]
— this inbox is read by our Data Protection Officer.