Understand how information would be used.
GetOutsourced Digital Services uses support@getoutsourced.ph as the confirmed public privacy inbox. This notice remains under review; the effective date and named privacy owner are pending.
Scope and current availability
This notice covers the public site and proposed worker, employer and administrator applications. Public policy browsing requires no account. A homepage introduction does not activate private hiring or payment processing. Development records should be fictional. A privacy notice informs people; it is not blanket consent or proof of compliance.
Information and purposes
Account identity, email, timezone and security records support access and recovery. Profiles, skills, availability, rates and portfolio context support hiring. Organization membership controls team access. Applications preserve submitted profile snapshots; interviews and messages support selection. Agreements, submissions, changes and cases document relevant work. Support, audit, technical request and diagnostic records support requests, safety and fault investigation. Collect only information needed for a specified purpose.
Who can see it
Publication and visibility choices control eligible public profiles; only approved company fields appear publicly. Candidates and relevant authorized hiring teams see their application records. Private messages, work and cases have scoped participants and reviewers. Internal employer notes are excluded from ordinary worker/public output, but appropriate access requests still require individualized review. Employers must not sell applicant data or reuse it for unrelated marketing.
Legal basis and choices
The operator must approve a basis for each purpose, including requested account/hiring functions, optional publication, security, cases and communications. Sensitive-data handling needs its own permitted condition and safeguards. Marketing and optional publication choices must be understandable and separate. Do not submit unnecessary government IDs, health/bank details, passwords or unrelated private information; production identity uploads and live financial onboarding remain disabled.
Selected services and locations
The owner selected Hostinger VPS for hosting, Amazon SES for email, Cloudflare R2 for backups and Sentry for errors. Selection does not verify active accounts, delivery, regions, contracts, redaction or backup restoration. Necessary email may include a recipient and relevant content; backups may contain database/files; reviewed diagnostics should contain limited technical context. Network services may receive connection metadata. Lemon Squeezy is proposed only for employer subscriptions; checkout is disabled. No Philippines-only storage claim is made; actual vendor locations and transfer arrangements require review.
Security, diagnostics and disclosure
The local application uses password hashes, scoped access and private sessions, but production controls still need verification. No system is perfectly secure. Vendor selection does not authorize replay, advertising profiles, private-message capture or full form contents in errors. Necessary lawful disclosures and safety/legal requests need a proportionate scope; a third-party request alone does not establish access.
Retention, visibility and deletion
No universal retention duration is promised. Approve purpose-specific periods or review conditions, secure disposal and narrowly documented legal/case holds before live collection. Backup expiry and reapplying eligible deletions after restoration need a tested procedure. Public visibility changes affect future responses and cannot automatically recall screenshots, downloads or search copies. A deletion request currently records a review request; it does not instantly erase the account or all evidence.
Your requests and complaints
Subject to applicable conditions, rights include information, access, correction, objection, erasure/blocking, portability and available redress, including a complaint to the National Privacy Commission. Where accounts become available, Account settings provides a limited export and deletion-review intake. Routine exports exclude credentials and other people’s private information; an owner’s organization export is scoped to that workspace. These tools do not replace an individualized rights request.
Contact and updates
Email support@getoutsourced.ph with your request type and enough context to locate the relevant record, including when you cannot sign in. Identity checks should be proportionate; never send a password or unnecessary ID by ordinary email. A named privacy owner, actual retention/transfer arrangements and a staffed procedure remain to be approved. No response deadline is invented. Material changes need a new notice and any required fresh choice; publication does not expand earlier permission.