JOBYODA Inc. ("JobYoda," "we," "us," or "our") is committed to protecting your personal data in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC").

This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, and what rights you have. It applies to all users of the JobYoda website (jobyoda.com) and mobile application (collectively, "the Platform"), including job seekers, recruiters, and employer companies.

If you do not agree to this Privacy Policy, please do not use the Platform.

JobYoda acts as a Personal Information Controller (PIC) under the DPA. Our Data Privacy Officer can be contacted at:

Email: dataprivacyofficer@jobyoda.com

Address: Level 10-1 Fort Legend Tower, 3rd Avenue, Bonifacio Global City, Taguig City, Metro Manila, Philippines 1634

From Job Seekers:

• Full name, email address, phone number, date of birth
• Location data (including GPS-based location when enabled)
• Nationality, educational background, work history, and credentials
• Resume, profile photo, and salary expectations
• Benefits preferences (e.g., HMO, joining bonus, work setup)
• Application history and platform activity

From Recruiters and Employer Companies:

• Company name, business address, and billing address
• Primary contact name, email address, and phone number
• Sub-recruiter names and email addresses (if added by administrator)
• Job posting content and Company Materials

Automatically Collected Data (All Users):

• IP address, device type, browser type
• Time, date, and duration of Platform visits
• Clickstream data and usage patterns
• Cookie and tracking technology data (see Section 9)

We collect and process personal data only for specific, legitimate purposes and only to the extent necessary to achieve those purposes (data minimization), in accordance with NPC Circular 2023-04 on Consent.

You may withdraw consent for any specific purpose at any time by contacting us at help@jobyoda.com or adjusting your account settings. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

JobYoda uses GPS-based location data as a core product feature, as it enables you to find jobs near you and allows employers to reach candidates in specific locations.

Location data is collected only with your express consent. You may disable location access at any time through your device settings. Disabling location access may limit certain features of the Platform but will not prevent you from using the Platform generally.

Location data is not sold to third parties and is not used for purposes beyond job matching and related Platform features.

JobYoda uses artificial intelligence and automated decision-making tools to match job seekers with relevant job postings and to rank candidates for employer review. This includes:

• Profile-based job card recommendations
• AI-assisted candidate screening and ranking for employer accounts
• Instant application processing features

In accordance with the DPA and applicable NPC guidelines, you have the right to:

• Be informed that your data is being processed through automated means
• Request human review of any automated decision that significantly affects you
• Object to automated processing in certain circumstances

Automated processing on the Platform does not involve profiling based on race, religion, health, or other sensitive personal information as defined under the DPA.

If you have questions about how automated processing affects your profile or application, contact our Data Privacy Officer.

You are responsible for providing accurate, not misleading, complete and up-to-date information to jobyoda.com Services about yourself and any other person whose personal information you provide us and for updating this personal information as and when it becomes inaccurate, misleading, incomplete and out-of-date by contacting jobyoda.com Services.

With Employers/Recruiters:

When you apply for a job or your profile matches an employer's criteria, your JobYoda profile and resume are shared with that employer. By using the Platform, you consent to this sharing. Employers who access your data are required under our Terms of Use to handle your data in compliance with applicable law and to use it solely for recruitment purposes.

With Third-Party Service Providers (Processors):

We engage the following categories of service providers who process personal data on our behalf:

• Customer engagement and communications platforms (including push notification, email, and in-app messaging services such as CleverTap)
• Analytics and performance monitoring tools
• Cloud infrastructure and data storage providers

All processors are contractually bound to process data only on our instructions and in compliance with the DPA. A list of key processors is available upon request from our Data Privacy Officer.

For Legal Compliance:

We may disclose personal data to government authorities or law enforcement when required by law, court order, or valid legal process.

Cross-Border Transfers:

Some of our service providers may process data outside the Philippines. Where such transfers occur, we take steps to ensure adequate protection in accordance with NPC Advisory 2024-01 on Model Contractual Clauses for Cross-Border Transfers

We do not sell your personal data to third parties.

We retain personal data only for as long as necessary for the purposes for which it was collected, and in accordance with applicable legal requirements.

You may request deletion of your account and associated data at any time (see Section 11). Please note that data already shared with employers prior to your deletion request may be retained by those employers subject to their own data retention policies.

We use cookies, web beacons, and similar technologies to operate and improve the Platform. These include:

• Essential cookies: Required for basic Platform functionality.
• Analytics cookies: Help us understand how users interact with the Platform.
• Marketing cookies: Used to deliver relevant job and employer advertisements.

If you log in using a third-party account, we receive certain profile information from that provider (name, email address, profile photo) for authentication purposes. This information is governed by your agreement with that third party. You may disconnect third-party login access through your account settings on that platform.

Under the DPA, you have the following rights:

• Right to be informed: Know what data we collect and how we use it.
• Right of access: Request a copy of your personal data held by us.
• Right to rectification: Correct inaccurate or incomplete data.
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to data portability: Receive your data in a structured, commonly used format.
• Right to object: Object to processing for direct marketing or automated decision-making.
• Right to restriction: Limit how we process your data in certain circumstances.

To exercise any of these rights, contact our Data Privacy Officer at dataprivacyofficer@jobyoda.com. We will respond within 15 business days. We may request proof of identity before processing your request.

In the event of a personal data breach that poses a real risk of serious harm to affected individuals, JobYoda will:

• Notify the National Privacy Commission within 72 hours of becoming aware of the breach.
• Notify affected data subjects without undue delay, providing details of the breach, the data affected, and steps taken.
• Maintain an internal breach register in accordance with NPC Circular 2023-06.

We implement appropriate technical, administrative, and physical safeguards to protect your personal data, consistent with the requirements of NPC Circular 2023-06 on the Security of Personal Data. These include encryption, access controls, and regular security reviews.

No method of transmission over the internet is 100% secure; we cannot guarantee absolute security, but we take all reasonable steps to protect your data.

The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has created an account, we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date of the updated policy constitutes acceptance of the revised terms.

For privacy-related concerns, contact our Data Privacy Officer:

Email: dataprivacyofficer@jobyoda.com

Address:
Level 10-1 Fort Legend Tower,
3rd Avenue, Bonifacio Global City,
Taguig City, Metro Manila,
Philippines 1634