PH Online Jobs ("we", "us") runs phonlinejobs.com, a job board where employers hire Filipino professionals. This policy explains what personal data we collect, why, and what you can do about it. We do not sell or rent your personal data.
We are based in Detroit, Michigan, USA, with a small team. Your data may be stored and processed in the United States and the Philippines.
What we collect
Account
Name, email address, password (stored hashed), account role (jobseeker or employer) and your settings.
Profile (jobseekers)
What you choose to add: photo, skills, experience, hourly or monthly rate, availability, pay links (Wise, Payoneer, PayPal or similar), optional test results (IQ, English, DISC), the AI-powered badge you self-declare, and your CV, which we keep as text (we don't store the file).
Verification (jobseekers, optional)
If you apply for the Verified Filipino badge you upload your PhilID or ePhilID and a selfie holding it, and our team checks them by hand against your profile name. You can also scan a supported National ID QR code. When online QR verification is enabled, we send its text, which can include your name, birth date, card number, portrait and other encoded ID details, to PSA/DICT's National ID Check to verify the signed ID data. Your QR photo stays on your device. We compare the returned name and birth year with your profile and keep only the check result and a keyed card-number fingerprint. Unsupported QR formats and unavailable checks can be submitted for staff review. QR verification does not replace the separate selfie check. If you add an NBI or police clearance badge, our team reviews the clearance by hand; for an NBI clearance you also give us its NBI ID number, which our team looks up on the official NBI site. We keep the result of the check, the date the clearance is valid until, and the badge. We delete the document, the selfie and the typed clearance number as soon as our team decides. We keep a keyed fingerprint of the ID or clearance number (it can't be turned back into the number) so the same document can't verify two accounts, and to recognise a deleted or banned account that comes back (see "What we keep after you delete your account").
Verification certificate (jobseekers, optional)
After you are hired, you can choose to share a verification certificate with that one employer, and only if they are on a Pro or Premium plan. It shows your name, which checks you passed and when, when a clearance expires, the employer's name and your start date. It never shows ID scans or ID numbers, because we delete those when our team decides. The employer sees it on the engagement page, and anyone they give the link to can open it. You can stop sharing at any time, and the link stops working then. It also stops 30 days after the engagement ends. An employer can't make sharing a condition of being paid. We log when a certificate is requested, shared and stopped.
Job posts and company profile (employers)
Company name, description, job posts, applicant pipeline, saved talent, talent pools, team members and billing details for paid plans.
If an employer requests business verification, its owner or admin provides the legal business name, country, registration number or independent-employer evidence, hiring type, proof of authority to hire, and fair-hiring commitments. Only our staff and the employer team's owner/admin can access submitted evidence. Staff review this evidence separately from email-domain confirmation. Documents and the typed registration number are deleted after the decision; we retain the declared business details, review result and note, reviewer and dates, and a protected registration-number fingerprint. Hiring-type labels are employer-declared. A business-reviewed badge does not guarantee a job, payment, or future conduct.
Applications and messages
Applications you send or receive, when they were seen, and messages between jobseekers and employers on the platform. Every job post is checked automatically before it goes live, by our scam patterns and by Anthropic's Claude; our team reviews posts the check flags, and messages and posts that users report. Messages that employers send to jobseekers are checked automatically for scam signs, by our scam patterns and by TypeSafe's Jev model; for that check we send TypeSafe only the message, the conversation's subject and the employer's name. A flagged message is still delivered, with a warning for the jobseeker, and our team may read it and the messages just before it.
When you apply, the employer sees a match breakdown: how your profile (skills, years of experience, education level and school, the city you list publicly, English score, hours and expected pay) compares with what the post asks for. It never uses your age, birth year, gender or photo. On the Premium plan, the employer can also run an AI fit check: Anthropic's Claude reads the post and your profile and CV and quotes the parts of your CV that fit each criterion. Before it is sent we remove your name, contact details, photo and lines such as birthday, age or civil status. The fit check is advice for that employer only and never changes your application's status or match score.
Live interviews (optional)
An employer on a paid plan can hire one of our approved interviewers to interview you on a video call. Before a time is booked, you agree to the call being recorded, transcribed and assessed with AI help. We keep the recording, the transcript, the interviewer's scorecard (including the identity checks done on camera) and an AI-assisted assessment of the transcript. The video call runs on LiveKit (livekit.io), which records it straight into our private storage, so the recording is not kept at LiveKit. The assessment is made by Anthropic's Claude from the transcript and the job post. It is advice for the employer only: it never changes your application's status or match score by itself. Only the employer who booked the interview sees the recording, transcript and assessment, through links that expire after 15 minutes; the interviewer sees your first name and headline, never your contact details or pay links; our team can review a recording to check for abuse. For interviewers we keep their application, price, payout details (a Wise or Payoneer link, or a GCash or Maya number and the account name), ratings and an earnings ledger.
Payments
We never hold, move or touch workers' pay. Employers pay workers directly through the worker's own Wise, Payoneer, PayPal or other link; those payments are governed by that provider's terms and privacy policy, not ours. For employer plan subscriptions, card details are collected and stored by our payment processor, Stripe, not by us.
Payout details (interviewers and affiliates)
Where we send interviewer earnings and affiliate commission, which our team pays by hand each month: a Wise or Payoneer link, or a GCash or Maya mobile number and the name the account is registered under. We also keep a record of each payout we send (amount, transfer reference and date). The payout details are part of your data export and are deleted with your account; the payout records are financial records and are kept.
Technical data
IP address, browser and device type, pages visited, and timestamps, used for security, abuse prevention and fixing bugs.
Why we use it
- To run the service: accounts, profiles, job posts, applications, messages, job alerts and notifications.
- To keep both sides safe: identity checks, scam flags on job posts and employers' messages, reviewing reports, and recognising banned or returning users so they can't dodge a ban or a bad review.
- To bill employers on paid plans and pay affiliates.
- To send service emails (account, application and message notifications). Marketing emails are optional and you can unsubscribe from them at any time.
- To comply with the law and respond to lawful requests.
Cookies and local storage
We use cookies to keep you signed in and to protect against misuse. We use your browser's local storage to remember things like dashboard preferences, drafts and notification state on your device. We do not use third-party advertising cookies. You can clear cookies and local storage in your browser; the site will still work but you will be signed out and lose saved preferences.
Who sees your data
- Other users: a jobseeker's public profile (name, skills, rate, badges, test results they chose to show) is visible to employers browsing talent. Pay links are shown only to an employer who has hired you. An employer's company name and job posts are public.
- Talent pools: employers can save profiles to private lists, with private notes, that only their own team can see. You aren't told when you're added, and you're removed from every list when your account is deleted (after the 30-day restore window).
- Sign-in providers: if you sign in with Google, Google sends us your name, email address and profile picture, and Google's own privacy policy applies to your Google account.
- Service providers: hosting, email delivery, payment processing for employer plans, and error monitoring. They may only use your data to provide their service to us. They are Railway (application hosting and database), Vercel (website hosting), Cloudflare (DNS, file storage and staff access), ZeptoMail by Zoho (email delivery), Upstash (temporary data such as rate limits), Sentry (error monitoring), Ably (real-time updates), Inngest (background jobs and scheduled emails), Stripe (payments), Google (sign-in), Anthropic (AI checks of job posts, AI fit checks of applications and interview assessments), TypeSafe (AI scam checks of employers' messages) and LiveKit (interview video calls).
- Authorities: when the law requires it, or to investigate fraud, scams or threats to users.
- A buyer or successor: if PH Online Jobs is sold or merged, your data moves with the service under this policy.
Jobs with scam signals (pay-to-apply, commission-only, pushing applicants off-platform) are flagged on the site and excluded from search engine job listings. Otherwise, public job posts may appear in search engines such as Google Jobs.
How long we keep it
- Account and profile data: for as long as your account is open. When you delete your account, it is deactivated at once: you are signed out and your profile and company page are hidden. You can restore it by logging in within 30 days. After 30 days we delete your personal data, except what we list under "What we keep after you delete your account".
- Messages and applications: as long as either party's account is open, so hiring history stays visible to both sides.
- Verification documents, selfies and clearance numbers, and the documents companies send to verify their business: deleted as soon as our team decides; the badge result is kept while your account is open, and the keyed fingerprint as described below.
- AI fit checks: kept with the application, and deleted when your personal data is purged after an account deletion.
- Interview recordings, transcripts and AI assessments: deleted 30 days after the job post is filled, closed or expired, or sooner when either account is deleted. Scorecard results and interviewer earnings records are kept like other hiring and billing records.
- Talent pools: while you are in a deleted account's 30-day restore window, employers see you only as "No longer available"; after that, you are removed from every employer's pools. An employer's pools are deleted with their company's data.
- Billing records: as long as tax and accounting law requires.
- Reviews and hire records stay after an account is deleted, shown under "Deleted user".
- Scam and abuse records: kept to stop banned users from coming back.
What we keep after you delete your account
Some records stay after the 30 days, attached to an anonymous account named "Deleted user". We keep them to prevent fraud, to keep reviews honest for the people who rely on them, and to meet legal and tax duties. They are:
- Reviews you wrote and reviews about you, good or bad, with their replies. They keep showing where they show today, under "Deleted user".
- Reports about you, what our team decided, and any ban and its reason.
- Hires, recorded payments, payment disputes and interview earnings records.
- Invoices and billing history, for as long as tax and accounting law requires.
- For jobseekers: identity fingerprints, explained below.
Identity fingerprints (jobseeker accounts only). For every jobseeker account we keep keyed fingerprints of: your email address, mobile number, verified ID and clearance numbers, Google account ID, payout links, GCash or Maya numbers, and your name with your birth year. We don't keep fingerprints for employer accounts. A fingerprint is a one-way code made with a secret key. It can't be turned back into the original, and nobody can read your details from it. We only use fingerprints to compare them with those of deleted and banned accounts, so we can recognise someone who comes back.
If an ID number, Google account, payout link or GCash or Maya number matches a banned account, the ban applies to the new account too. Weaker matches, like a shared phone number or the same name and birth year, never act on their own: our team reviews them. If our team confirms it is the same person, the reviews from the old account move to the new one. We delete the fingerprints 5 years after the account is deleted. They are not part of your data export, because they are security records and not readable data about you.
Your rights
You can access and correct most of your data from your dashboard settings. You can also ask us to:
- Give you a copy of the personal data we hold about you.
- Correct data that is wrong.
- Delete your account and personal data, subject to the retention rules above.
- Stop sending you marketing emails.
- Object to, or ask us to restrict, how we use your data.
Email support@phonlinejobs.com with your request. We will confirm your identity first and reply within 30 days. If you are in the Philippines, you also have the right to complain to the National Privacy Commission. If you are in the US or elsewhere, you may have additional rights under your local law and may contact your local data protection authority.
Legal basis and applicable law
For users in the Philippines we process personal data under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. For users in the United States we follow applicable federal and state privacy laws. We process your data because you asked us to provide the service, because you consented (for example to verification or marketing emails), because the law requires it, or because we have a legitimate interest in keeping the platform safe.
Security
Data is encrypted in transit. Passwords are hashed. Access to verification data is limited to our team. No system is perfectly secure; if we learn of a breach that affects you we will notify you and, where required, the relevant authority.
Children
You must be 18 or older to use the service. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it.
Changes
We may update this policy. We will post the new version here with a new date and, for material changes, notify you by email or in your dashboard before it takes effect.
Contact
PH Online Jobs Detroit, Michigan, USA support@phonlinejobs.com
Data protection contact: our Data Protection Officer, reachable at the same email address.