Privacy Policy

1. Information You Provide

When you use the AI Hiring Assistant or the AI Profile Assistant, you may type in a description of the role you're hiring for or the work you do, answer follow-up questions, or enter a search query. This content is sent to our servers to generate a response and, where AI features are involved, is sent to our AI provider as described in Section 3 below.

If you choose to post a job, we store your company name, contact email or phone number, and the full job brief (title, responsibilities, skills, salary range, interview questions) in our database. If you choose to publish a candidate profile, we store your name, contact email or phone number, and the details you shared about your work in our database. Neither action is required just to use the AI Hiring Assistant or browse — only if you explicitly click “Post job” or “Publish my profile,” at which point you'll also be asked to sign in as described in Section 2.

2. Account Sign-In (Google or Facebook)

Posting a job or publishing a candidate profile requires signing in with a Google or Facebook account, handled through our authentication provider (Supabase Auth). Browsing the Service, chatting with the AI Hiring Assistant or AI Profile Assistant, and viewing posted jobs or published profiles do not require signing in.

When you sign in, Google or Facebook shares your email address, display name, and profile picture URL with us; we store these to identify your account and associate it with any job or profile you post. We never see or receive your Google or Facebook password. A session cookie is set in your browser to keep you signed in, as described in Section 8.

3. Public Visibility — No Privacy Controls Yet

Signing in identifies who posted a job or published a profile, but it does not restrict who can see it. A posted job (including the employer's company name and contact details) is visible to anyone who visits the “Find Work” page, and a published candidate profile (including the person's name and contact details) is visible to anyone who visits the “Find Talent” page or that profile's page directly. There is currently no way to restrict who can view this information, or a self-service way to take it down, once it's posted or published. Do not include information you're not comfortable making public.

4. Information Stored on Your Device

Separately from the database storage above:

• Your theme preference (light or dark) is saved in your browser's local storage so it persists between visits.
• While you're mid-conversation with the AI Hiring Assistant, the resulting job brief is temporarily saved in your browser's session storage so the candidate matching page can use it — this copy stays on your device and is cleared when you close the tab. It is separate from, and unrelated to, the permanent copy saved to our database if you click “Post job.”

5. AI Processing by Third-Party Providers

The AI Hiring Assistant, AI Profile Assistant, candidate/job matching, and AI fit summaries are powered by Anthropic (Claude models). Text you submit through these features — including your conversation, job brief, profile details, or search query — is sent to Anthropic's API to generate a response. We do not control how long Anthropic retains this data independent of our API configuration; you can review Anthropic's Privacy Policy for details. Anthropic may process data on servers located outside the Philippines.

6. Where Data Is Stored

Posted jobs, published candidate profiles, and account information from Google/Facebook sign-in (email, display name, profile picture URL) are stored in a managed Postgres database (Supabase), hosted outside the Philippines. Only our own servers can write to or read this database directly — it is not exposed to the browser. Our servers also briefly use your IP address to enforce request-rate limits on AI features; this is held in server memory only, never written to the database, and discarded automatically (and reset entirely whenever the server restarts).

7. What We Do Not Currently Collect

As of the effective date above, the Service does not collect or store passwords (sign-in is handled entirely by Google or Facebook), does not collect payment information, and does not yet track which candidates applied to which job (there is no application/interview pipeline built yet). If this changes as new features launch, we will update this Policy before those features go live.

8. Cookies

Signing in sets a session cookie so the Service can recognize you're signed in on future requests; it is not used for advertising or cross-site tracking. The only other client-side storage used is the local/session storage described in Section 4.

9. How We Use Information

We use the information described above only to:

• Operate and respond to requests made through the AI Hiring Assistant, AI Profile Assistant, and search/matching features;
• Recognize you when you sign in and associate posted jobs or published profiles with your account;
• Display posted jobs and published profiles to other visitors, as described in Section 3;
• Maintain the security and reliability of the Service; and
• Improve the Service's features and prompts over time.

We do not sell your information.

10. Your Rights Under the Data Privacy Act

If you are in the Philippines, you have rights under the Data Privacy Act of 2012 (Republic Act No. 10173), including the right to be informed, to access, to object, to correct, and to erasure or blocking of your personal data, where applicable. There is no self-service way to edit or delete a posted job or published profile yet — to request removal or correction of a job post or candidate profile, or to have your account's sign-in data deleted, contact us using the details in Section 14, or file a complaint with the National Privacy Commission.

11. Children's Privacy

The Service is intended for use by individuals 18 years of age or older. We do not knowingly collect information from children.

12. Data Security

We take reasonable measures to protect information transmitted to and stored by our servers, including transmitting data over encrypted connections and restricting database write access to our own backend. Sign-in is handled by Google or Facebook — we never receive or store your password on either platform. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy as the Service evolves, particularly as we introduce an application/interview pipeline. Material changes will be reflected by updating the effective date above.

14. Contact Us

Questions about this Policy, or requests to remove or correct a posted job or candidate profile, can be sent to privacy@hireworkers.work.

PayJobs.work Manpower Services — [Insert registered business address]