Privacy Policy

1. 1.Data controller and contact

   • Controller: Davick Int'l Trade, LLC, as the entity that determines the purposes and means of processing applicant and contractor personal data.
   • Privacy contact: the administrator contact listed in the Legal Notice. Davick does not invent a privacy officer name, address, or retention period here — those fields are administrator-configurable and should be confirmed before publication.
   • Technology provider: ClientFlux AI provides platform infrastructure but is not the data controller for applicant/ contractor data.

2. 2.Categories of personal information we collect

   • Application data (public /apply page): full name, professional email, country, city, WhatsApp (optional), time zone, specialization, experience, skills, platforms, certifications, portfolio/LinkedIn URL, CV file, professional introduction, availability, expected rate in PHP, and answers to project questions.
   • Account data: email, password (hashed), and authenticated session identity used for the electronic-acceptance audit trail.
   • Onboarding records: the personal and collaboration details, classification review, document acceptance history (document slug, version, acceptor identity, timestamp), and trial information.
   • Jibble time data: where a contractor and Davick agree to use Jibble for billable-time documentation, Jibble collects time entries and project allocations. See the Jibble Time Tracking Transparency Notice.

3. 3.What we do NOT collect at the application stage

   • We do not request passports, government IDs, or banking details at application.
   • Such sensitive data is collected only if necessary and legally justified for a specific engagement, with separate notice and consent where required.

4. 4.Purposes and lawful bases

   • Contract administration: processing your application, conducting onboarding, managing the independent contractor relationship, and paying agreed fees.
   • Identity and access management: authenticating accounts and enforcing role-based access and RLS isolation between records.
   • Legal compliance: meeting U.S. and Philippine legal obligations and maintaining audit trails.
   • Legitimate interests: preventing fraud, spam, and abuse, and securing the Platform.
   • Consent (optional): optional talent-pool communications only, given by a separate, genuinely optional checkbox that is never preselected. Declining does not affect your application.

5. 5.Philippine Data Privacy Act considerations

   • Applicants and contractors based in the Philippines are subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and the rules of the National Privacy Commission (NPC), which grant rights to be informed, access, object, rectify, erase, data portability, and damages, subject to exceptions.
   • Processing of personal data must be for a declared and specified purpose, lawful, proportionate to the purpose, and handled with reasonable and appropriate security (DPA Sections 11-13, 20-21).
   • Where Davick acts as a personal information controller for Philippine data, it observes these principles. Sensitive personal information is not collected at the application stage.
   • Personal-data breaches likely to materially affect a data subject will be reported to the NPC and the affected data subjects as required by the DPA and NPC Circular No. 2016-03, within the timeframe required by law.
   • Cross-border transfers of Philippine personal data require a lawful mechanism and assessment under the DPA before transfer.
   • Qualified Philippine legal counsel should confirm full DPA and NPC compliance before processing Philippine personal data at scale.

6. 6.U.S. privacy considerations

   Davick Int'l Trade, LLC is a U.S. company. Depending on the state of operation and the data subjects involved, state privacy laws may grant rights of access, correction, deletion, and opt-out of sale or targeted advertising. Davick does not sell applicant or contractor personal data. Qualified U.S. counsel should confirm applicable state-law obligations.

7. 7.Service providers and international transfers

   • The Platform uses a managed backend (database, authentication, file storage) and a tracking/analytics provider. CV files are uploaded to a private, access-controlled bucket.
   • Because Davick engages contractors in the Philippines and infrastructure may be hosted outside the Philippines, personal data may be transferred internationally. Where the DPA applies, such transfers require lawful mechanisms and should be documented.
   • The exact list of service providers, hosting locations, and transfer mechanisms should be confirmed by Davick administrators and legal counsel.

8. 8.Jibble and monitoring transparency

   • Jibble is used only where relevant to an agreed project or billing arrangement, and only for billable-time documentation and project allocation — not as proof of employee attendance or as an automatic penalty for inactivity.
   • No intrusive monitoring by default: no screenshots, webcam, webcam monitoring, keystroke logging, or continuous location tracking is enabled. Any such monitoring requires separate legal review and appropriate transparency and consent.
   • Full details appear in the Jibble Time Tracking Transparency Notice accepted during onboarding.

9. 9.Data retention

   We retain personal data only as long as necessary for the purposes described, to comply with legal obligations, and to defend legal claims. The specific retention period is administrator-configurable and should be documented by Davick. When no longer needed, data is deleted or anonymized, except where law requires longer retention.

10. 10.Security safeguards

    • Role-based access control, server-side authorization, and Row-Level Security (RLS) isolate each contractor's and applicant's records.
    • CV and document files are stored in a private bucket with access controls; downloads are authorized.
    • Spam protection, honeypot fields, rate limiting, and duplicate detection are applied to the application endpoint.
    • Applicants cannot access other applications, contractor records, administrator dashboards, or internal documents.

11. 11.Your rights

    • Access: request a copy of the personal data we hold about you.
    • Correction: request correction of inaccurate data.
    • Deletion / erasure: request deletion where lawful, subject to legal retention obligations.
    • Object or restrict processing where applicable.
    • Withdraw optional consent (talent-pool communications) without affecting your application.
    • Exercise these rights through the administrator contact in the Legal Notice.

12. 12.Children's privacy

    The Platform is not directed to anyone under 18. We do not knowingly collect data from minors. Contact us if you believe a minor submitted data.

13. 13.Changes to this policy

    We may update this Privacy Policy. Material changes will be posted with an updated effective date. For material changes affecting onboarding, contractors may be asked to acknowledge the updated notice.

14. 14.Contact

    For access, correction, deletion, or other privacy requests, contact Davick Int'l Trade, LLC through the administrator contact in the Legal Notice.