Trust and safety
Security at GapCrew
Plain facts about how sign-in, addresses and messages are protected, and how to report a problem.
Signing in
- You sign in with a US mobile phone number. GapCrew texts you a one-time code and you type it in. There is no password to lose or reuse.
- A bot check runs before a code is sent, and there are limits on how often codes can be requested.
- A code works for a short time only. If it runs out, ask for a new one.
Who sees your address
- A job shows an approximate area (city and ZIP code) and a rough distance. The exact job address is shown only to the employer who posted the job and to a worker whose booking is confirmed.
- After a booking is cancelled or finished, the worker no longer sees the exact address.
- Before a booking is confirmed, an employer sees a worker's first name and last initial only. Employers' business names are shown. Your phone number is not shown to the other side of a job.
- A worker gives a ZIP code, not a home address.
Messages
- Messaging opens only for a confirmed booking, between the two people on it. It becomes read-only if the booking is cancelled.
- GapCrew tries to block phone numbers and email addresses typed into messages. The filter is not perfect, so keep contact details out of the chat.
- Anyone in a conversation can report it. An administrator reads a conversation only when it has been reported.
Documents and photos
ID review, license checks and profile photos are not available yet, so GapCrew does not ask you to upload documents or photos.
Staff access
- Administrator tools are for people who have been given an administrator role. Ordinary accounts cannot reach them.
- Administrator actions are written to an audit log that cannot be edited or deleted. This includes looking at sensitive details such as a phone number or an exact job address.
What GapCrew does not do
- GapCrew does not handle worker wages. Employers pay workers directly.
- GapCrew is free at launch and takes no card payments, so it does not collect or store card numbers.
- GapCrew does not sell personal information.
No system is perfectly secure. If you think someone else is using your account, email support@gapcrew.com.
Report a security problem
If you find a weakness in GapCrew, please tell us.
- Email support@gapcrew.com with the subject "Security". Say what you found, where, and the steps to see it. Screenshots help.
- Please do not share the problem publicly until we have fixed it. Do not look at, change or keep other people's data beyond what you need to show the problem.
- If you act in good faith and follow these points, GapCrew will not take legal action against you for your research.
- GapCrew does not offer a bounty.
The same details are in a machine-readable file at /.well-known/security.txt.
See also Job site safety, Community guidelines, Fees and payments, Accessibility, Help, Terms and Privacy.