Privacy Policy

If you use the Platform as a Worker, we collect:

• Email and/or phone number, and a password (stored as a hash, never in plain text)
• Name and profile photo
• Nationality, current country/region/city, and an optional local area
• Primary language and any additional languages you list, with proficiency level
• Skills, trade categories, years of experience, seniority level, and any certificates you upload
• Availability: engagement type, shift preference, expected wage range, and availability date
• Preferred countries/regions to work in and relocation willingness
• Documents you upload: CV, ID proof, passport, visa, and certificates
• Verification status and history
• Job applications, interview and hire records, and ratings you receive
• Referral relationships (if you refer someone, we record the email address you provide for them)
• Messages you send or receive through the Platform
• In-app, email, and push notification records
• Your browser's push-subscription details, only if you opt in to push notifications

We do not currently collect your date of birth, gender, or a full home address (only city/region-level location).

If you use the Platform as an Employer, we collect:

• Business name, logo, registration country, and industry
• Individual staff details: email, phone, password (hashed), name, and role
• Sites/locations you add
• Job postings, hiring campaigns, and candidate unlock records
• Applications received, interview and hire records, and ratings you give
• Messages exchanged with Workers
• Team member list and a log of team-affecting actions (invites, role changes, removals)

If you use the Platform as a Training Institute, we collect:

• Institute name, logo, country, and accreditation details you provide
• Staff details: email, phone, password (hashed), name, and role
• Endorsement records you create for Workers (course name, trade category, completion date)

When you use the Platform, we may process your IP address for the limited purpose of rate-limiting — preventing abuse of login and signup forms. This is used transiently and is not persisted in our database beyond the short window needed for that check.

If you enable browser push notifications, we store your browser's push-subscription details (a unique endpoint and encryption keys assigned by your browser) and, optionally, your browser's user-agent string.

The Platform uses one functional cookie, set only if you choose to sign in with Google: it temporarily (for five minutes) records which type of account you are signing in as, so we can route you correctly after Google's authentication step, and is then discarded. We do not use analytics, advertising, or tracking cookies, and no such tools are integrated into the Platform at this time.

We use the information described above to:

• operate and maintain your account;
• enable job search, candidate matching, and applications;
• enable communication between Workers and Employers regarding recruitment;
• conduct manual verification review;
• generate reporting and analytics visible only to the Employer about their own hiring activity;
• enforce our Terms of Service and help prevent fraud or abuse;
• comply with applicable legal obligations.

We do not use your information for advertising, and we do not sell your information to third parties.

• Visible to any registered Employer browsing candidates: your name, profile photo, nationality, current country/city, verification level, skills, and experience.
• Never shown in candidate search results, at any stage: your email address and phone number.
• Messages are visible only to you and the other participant in that conversation.
• ID, passport, visa, and certificate documents are accessible only to you and, where applicable, our internal verification reviewers, through time-limited access links — never a permanent public link.
• Third-party service providers (listed in §6) process data solely to provide their respective service to us, under their own terms.

We do not share your information with third parties for their own marketing purposes.

• Cloudinary — file storage for photos, documents, and logos.
• Adobe PDF Services — processes uploaded CV files (PDF only) to compress them to meet our file-size requirement; your CV content is transmitted to Adobe for this processing.
• Neon — hosts our database; all Platform data is stored on Neon's infrastructure.
• Vercel — hosts the Platform's application and serves your requests.
• Google (optional) — if "Sign in with Google" is available and you choose to use it, Google provides us your email address and name to create or sign in to your account. We have not independently verified whether Google Sign-In is enabled in our live production environment as of this policy.

We do not currently use a third-party provider to send email, SMS, or OTP messages — see §9 below.

Our database infrastructure is currently hosted in the Asia-Pacific (Singapore) region. Depending on where you access the Platform from, and where an Employer or Worker you interact with is located, your information may be processed or stored outside your own country. Where you upload a CV, that file is additionally transmitted to Adobe's PDF-processing infrastructure for compression, which may involve a transfer outside your country.

We do not currently operate an automated data-retention or deletion schedule. Information you provide is retained for as long as your account exists, unless you request deletion as described in §11. We are reviewing appropriate retention periods as part of ongoing platform development.

In the interest of transparency about the current state of the Platform:

• We do not currently verify your email address or phone number through a confirmation link or code.
• Password-reset emails are not currently being delivered. If you forget your password, contact us directly at [SUPPORT EMAIL – TO BE CONFIRMED].
• We do not currently offer a self-service way to export a copy of your data.
• We do not currently offer a self-service way to delete your account or data — see §11 for how to request this manually.
• We do not currently collect marketing communication preferences, because we do not send marketing communications.
• We do not currently apply field-level encryption to any specific category of data beyond what our infrastructure providers apply by default.
• We are not currently processing payments of any kind.
• We do not currently use an AI provider or an SMS/OTP provider anywhere on the Platform.

We take reasonable measures to protect your information, including:

• passwords are hashed — never stored in plain text — before being saved;
• identification, passport, visa, and certificate documents are stored with restricted access and are only ever made available through short-lived, time-limited links generated at the moment they are needed, rather than permanent public links;
• the Platform is served over HTTPS.

No method of storage or transmission is completely secure, and we cannot guarantee absolute security.

Depending on your location, you may have rights under applicable data protection law, such as the right to access, correct, or request deletion of your personal information. Profile information can be corrected directly within your account at any time. For any other request — including a request to access a copy of your data or to delete your account — contact us at [PRIVACY EMAIL – TO BE CONFIRMED]. These requests are currently handled manually, as the Platform does not yet offer a self-service tool for them. We will respond within a reasonable time.

The Platform is not directed at children. Use of the Platform is restricted to individuals who meet the minimum working age applicable to them under the labour and employment laws of their country or region, as described in our Terms of Service.

We do not currently send marketing or promotional communications. If this changes in the future, we will provide a way to opt out.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last Updated" date above.

Questions about this Privacy Policy, or requests regarding your information, can be directed to [PRIVACY EMAIL – TO BE CONFIRMED]. General support inquiries can be directed to [SUPPORT EMAIL – TO BE CONFIRMED].