Privacy Policy

• Account information — your name, agency name, email address, phone number and role.
• Applicant and worker records — the information your agency enters to run recruitment: identity and passport details, contact information, employment history, medical and training status, visa and DMW documentation, and uploaded files.
• Usage data — modules accessed, actions taken, IP address, browser and device information, and timestamps.

Applicant records routinely contain sensitive personal information as the Data Privacy Act defines it. We collect it only because processing a deployment requires it.

We use this information to provide the Service — running the recruitment, mobilization, welfare, billing and reporting modules your agency subscribes to — and to operate it securely. We also use it to support your account, and to help you meet the DMW and other government documentation your agency has to file.

For your account and billing records we are the personal information controller. For the applicant and worker records you enter, your agency is the controller and we are the processor— those records are yours, and we act on your instructions. Each agency's data sits on its own tenant, separate from every other agency's.

We do not sell your personal information. We share it only with service providers who host, back up and support the platform for us, with government agencies and principals where you use Cris to file required documentation, and where the law or a lawful order requires it.

We keep your data for as long as your account is active, or as needed to provide the Service. Applicant records are also kept for any period Philippine recruitment and employment rules require your agency to retain them. You can export your data while your subscription is active; after it ends we delete or anonymize it, except where a law requires us to keep it.

We use industry-standard measures to protect your data, including encryption in transit and at rest. Access is scoped by role, so a user sees only the records their role allows, and administrative actions are logged.

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the right to:

• Access and review the personal data we hold about you.
• Request correction of anything inaccurate or out of date.
• Request deletion or blocking of your data.
• Withdraw consent, where processing rests on consent.
• Object to processing, and to be told of a breach affecting you.
• Damages for a violation, and to complain to the National Privacy Commission.

If your data sits in an agency's Cris account, we will pass your request to that agency, which controls the record.

Questions about this policy, or a request under the rights above, go to our Data Protection Officer at [email protected]. Anything else: [email protected].