Privacy Policy

1. Who is responsible for your data

PuenteVA, operated by [registered business name and address], is the personal information controller for the data described here. Our data protection officer can be reached at hello@puenteva.com.

We never sell personal information, and we don't use it for advertising.

2. What we collect

Employers (clients)

• Account: full name, email address and password. Passwords are stored only as a one-way, salted hash that can't be turned back into the password.
• Company profile: company name, website, description, type of business, size, location; contact person's name and role; phone or WhatsApp (optional); preferred language; project markets; office and customer languages; when you accepted the terms.
• Activity: job posts, applications you open, conversations and messages, your plan, upgrade requests and plan history.

Specialists

• Profile: the information you enter in the application, such as name, contact details, location, headline, construction experience, skills, software, language background, writing samples, links, availability and expected rate.
• Assessments: language assessment results and, only if you agree, a recording of your spoken assessment.
• Consent records: which consents you gave, the version and when.
• Activity: job applications, conversations and messages, and whether your profile is paused.

Everyone

• Sign-in and security: a session cookie while you're signed in; one-time sign-in codes (stored hashed); scrambled (hashed) versions of your IP address and email used to limit repeated sign-in attempts; the result of the Cloudflare Turnstile “verify you are human” check.
• Audit records: we log when an employer opens a specialist's full profile, and admin actions such as assessments and plan changes, to protect specialists and keep the platform fair.
• Technical data that any website receives, such as IP address and browser type, handled by our hosting provider (see section 5).

3. Why we use it, and on what basis

4. Who can see your information

• Specialist profiles are shown only to registered employers, and only after assessment. Employers may be located outside the Philippines. They see your first name and last initial, headline, city, skills, experience, writing samples, assessment results, availability and expected rate. Your email, phone number, full name, full address and links are never shown in the directory. You can pause your profile to hide it.
• Employers' company details (company name, type, size and location) appear on job posts that specialists see. The employer's contact name, phone and email are not shown.
• Messages are visible only to the employer and the specialist in that conversation, and to PuenteVA administrators when needed to handle a report or keep the platform safe.
• PuenteVA administrators can see account and profile data to assess specialists, manage plans and support users.
• We may disclose information if required by law, or to protect someone's safety or rights.

5. Service providers and international transfers

We use a small number of providers to run the site. They process data on our behalf:

• Cloudflare, Inc. hosts the website and database (database region: Asia-Pacific), sends our service emails, and runs the Turnstile bot check.
• Google Fonts serves the site's typeface, so your browser connects to Google, which receives your IP address.

Some of these providers process data outside the Philippines. Employers who view specialist profiles may also be outside the Philippines. Where data leaves the Philippines, we rely on providers' security commitments and on the consent specialists give when creating a profile. [Data processing agreements to be confirmed.]

6. Cookies and similar storage

PuenteVA uses one essential cookie, pv_session, which keeps you signed in for up to 30 days or until you sign out. It can't be read by page scripts and is sent only over secure connections. If you start a form before signing in, your answers are kept temporarily in your browser's session storage and cleared once saved. Cloudflare's Turnstile check may use its own technical storage to tell people from bots. We don't use advertising or analytics cookies.

7. How long we keep it

• Accounts and profiles: while your account is open. When a specialist deletes their account, their profile and sign-in data are deleted immediately. Employers can ask us to delete their account.
• Sign-in codes: expire after 10 minutes and are deleted once used.
• Sessions: up to 30 days, or until you sign out.
• Security and audit records: [retention period to be confirmed].
• Messages and billing records: [retention period to be confirmed], or longer if the law requires it.

8. How we protect it

• The site uses HTTPS only, and the database can't be reached from the internet directly.
• Each person sees only what their role allows. Contact details are kept out of the directory, and the admin area is hidden from everyone except administrators.
• Passwords and sign-in codes are stored hashed. Sign-in attempts are rate-limited, and new accounts pass a bot check.
• Access to profile views and admin actions is logged.

No system is perfectly secure. If a breach affects your personal information, we'll notify you and the National Privacy Commission as the law requires.

9. Your rights

Under the Data Privacy Act you have the right to:

• be informed about how your data is processed;
• access your data and get a copy, including in a portable format;
• correct inaccurate data. Specialists can update their profile at any time;
• object to processing, or withdraw consent. Specialists can do this by deleting their profile;
• have your data erased or blocked;
• ask a person to review any automated assessment result;
• claim damages, and complain to the National Privacy Commission.

To use any of these rights, email hello@puenteva.com. We'll reply within [timeframe to be confirmed].

10. Children, changes and contact

PuenteVA is for people aged 18 and over. We don't knowingly collect data from children.

We'll update this policy as PuenteVA changes, change the date at the top, and tell registered users about significant changes.

See also our Terms of Service. Questions: hello@puenteva.com.