Data Protection CharterPhilippine Data Privacy Act (RA 10173)

We process all personal data guided by three statutory pillars:

• Transparency: Clearly informing jobseekers and employers about the nature, purpose, and extent of data processing before collecting personal information.
• Legitimate Purpose: Processing personal data strictly for career matching, application forwarding, resume building, and legitimate recruitment functions.
• Proportionality: Collecting only the minimum necessary information required to deliver high-quality job search and hiring services without excessive data collection.

Personal data protected under our security framework includes:

• Candidate identity, email address, contact numbers, and profile photos
• Uploaded resume files, work history, educational background, skills, and portfolio URLs
• Job application tracking notes, interview schedules, and employer messages
• Employer business registration details, authorized recruiter identities, and job postings
• User-configured SMTP credentials (stored with AES-256 encryption for outreach tools)

As a data subject in the Philippines, you are entitled to the following statutory rights under RA 10173:

We maintain physical, technical, and organizational measures including:

• HTTPS / TLS 1.3 encryption across all website and API communications
• AES-256 symmetric encryption for custom SMTP credentials stored in our database
• Role-based access controls ensuring candidate data is visible only to authorized employers when permitted
• Automated vulnerability detection and continuous session monitoring

You can exercise any of your data privacy rights at any time:

• Self-Service: You can view, update, download your resume, or change notification settings directly from your account dashboard.
• Deletion Request: You can delete your account from the Settings page. We apply a 30-day recovery window followed by permanent, irreversible hard deletion.
• Privacy Inquiries: Contact our privacy support team via our Contact Page for formal data subject requests.