Privacy Policy

Work Whale (“we”, “us”, “our”) is committed to protecting your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Work Whale platform (“the Platform”).

1. Information We Collect

We collect the following types of information:

• Account information: name, email address, password (hashed), and role (employer or worker)
• Profile information: bio, skills, work experience, location, portfolio links, resume, availability, and hourly rate
• Employment information: job applications, cover letters, and application status
• Communications: messages sent between employers and workers on the Platform
• Google account data: when you connect Google Calendar for meeting scheduling, we store an OAuth refresh token to create calendar events and Google Meet links on your behalf. We do not access any other Google data.
• Usage data: IP address, browser type, pages visited, and session activity
• Payment information: processed securely by our payment provider; we do not store card details

2. How We Use Your Information

We use your information to:

• Provide, operate, and improve the Platform
• Match workers with relevant job opportunities
• Enable communication between employers and workers
• Create Google Calendar events with Google Meet links when employers schedule interviews
• Send transactional emails (application updates, account notifications)
• Process subscription payments
• Comply with legal obligations and enforce our Terms of Service

We will not sell, rent, or share your personally identifiable information with third parties for marketing purposes.

3. Third-Party Services

We use trusted third-party providers to operate the Platform:

• Supabase — database hosting and authentication
• SendGrid — transactional email delivery
• Vercel — platform hosting and CDN
• Stripe — payment processing (card details never touch our servers)
• Google Calendar API — creating calendar events and Google Meet video conference links for interview scheduling

These providers are permitted to use your information only to perform services on our behalf and are bound by their own privacy policies.

4. Google API Services

Work Whale’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only request access to the Google Calendar events scope (calendar.events) for the purpose of creating interview meetings with Google Meet links.
• We do not use Google user data for advertising, market research, or any purpose unrelated to the meeting scheduling feature.
• We do not share Google user data with third parties except as necessary to provide the meeting scheduling feature.
• We store only the OAuth tokens required to maintain your Google Calendar connection. You can revoke access at any time from your Google Account permissions.

5. Cookies

We use cookies and similar tracking technologies to maintain your session and improve your experience on the Platform. You may disable cookies in your browser settings; however, some features of the Platform require cookies to function.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us at info@workwhale.ph. We will process deletion requests within 30 days, subject to any legal retention obligations.

7. Your Rights

Under the Data Privacy Act of 2012, you have the right to:

• Be informed about how your data is collected and used
• Access the personal information we hold about you
• Correct inaccurate or incomplete data
• Object to the processing of your data
• Request erasure of your data
• Lodge a complaint with the National Privacy Commission (NPC)

To exercise any of these rights, contact us at info@workwhale.ph.

8. Security

We implement industry-standard security measures including encryption in transit (TLS), hashed passwords, and role-based access controls. However, no method of transmission over the internet is 100% secure. We encourage you to use a strong, unique password and to notify us immediately of any unauthorised access to your account.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on the Platform. Continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

10. Contact

For questions or concerns about this Privacy Policy or your personal data, contact our Data Protection Officer at info@workwhale.ph.