Padagos | Irosin Employment & Service Marketplace

1. Who is responsible for your information

Public Employment Service Office (PESO), Municipality of Irosin, Sorsogon (Irosin Municipal LGU, Irosin, Sorsogon) operates Padagos and decides how your information is used. In the law's terms, it is the personal information controller.

Data Protection Officer: To be announced by PESO
Email: To be announced by PESO

2. What we collect

Everyone	Name, email address, password (stored only as a one-way hash), an optional contact number (added on your profile page), account status and email verification, sign-in records (time, IP address and browser details), messages and photos you send, notifications, reports you file or that are filed about you, and your confirmation of this notice.
Job seekers	Gender, birthdate, address, education level, skills, years of work experience, bio, profile photo, biodata file, an optional intro video, applications (with an optional cover letter file and screening answers), interview details, job offers (start date, pay note, and a checklist of items to bring that records whether each one was received; the documents themselves are never uploaded to Padagos), invitations and PESO referrals you receive, your choice whether employers may find you, ratings, and employment and hire or release records.
Employers	Position at the company; company name, address, industry, description and logo; verification documents (such as a business permit, DTI/SEC registration and a valid government ID); job posts; decisions on applicants; job offers and invitations they send; and ratings.
Service providers	Gender, service category, bio, address and photo; verification documents (such as a valid government ID, barangay clearance and certificates); listings; service requests (including the date, time and address of the work); and reviews.
Identity verification	Everyone who verifies their account gives their full name, birthdate and home address as shown on their ID, the type of ID, the last 4 digits of its number, photos of the front (and back) of the ID, and a selfie holding the ID. Employers also give their business name and address, the type, number and expiry date of their permit, and a photo or PDF of the permit. Service providers may add a supporting document.

Sensitive personal information. The law treats some of this as sensitive: your birthdate (age), your education, government-issued IDs and the last digits of their numbers, and the photo of your face in your ID selfie. We process it only with your consent and we ask only for what the service needs. Files you upload can contain more than we ask for, so upload only what is required and cover up details that are not needed.

Video interviews and screen sharing are not recorded or stored.

3. Why we use it

To create and run your account, and to verify the identity of job seekers, employers and service providers: PESO compares the details you type with your ID photo and your selfie before a job seeker can apply or an employer or provider goes live.
To connect job seekers with employers, and employers with service providers.
To rank applicants. A score out of 100 is worked out automatically from the profile and screening answers and shown to the employer, who makes the actual decision.
To let people message each other, schedule and hold interviews, and send notifications and emails (such as verification and password-reset emails).
To show you where your application stands: the time an employer first opens it, and each step after that, are recorded and shown to you.
To let employers find and invite verified job seekers who allow it, to let PESO refer job seekers to open jobs, and to let an employer send a job offer and record which items on its checklist were received.
To keep the platform safe: preventing misuse, handling reports, and keeping an activity log of sign-ins and administrative actions, including each time an administrator opens or downloads a verification document, biodata file or cover letter.
To let PESO administrators prepare reports on local employment. Administrators can export lists of users, jobs, applications and service requests as spreadsheets for official reporting.

4. Our basis for using it

We process your information with your consent, which you give when you create your account and which you can withdraw at any time. Where it applies, we also process it to provide the service you asked for, and to carry out PESO's public employment-service functions. We do not sell your personal information, we do not share it with advertisers, and we do not use advertising or tracking services.

5. Who can see what

Employers	See details of people who apply to their jobs: name, email, contact number (if added), photo, skills, education, bio, cover letter, screening answers, biodata, intro video and ratings. They see the contact details of people they hire. They can also see provider listings, names, photos, bios, addresses and ratings. Next to an applicant who passed PESO's identity check they see a "verified" mark, but never the ID or the selfie. They can download the biodata and print the cover letter of people who applied to them. Before anyone applies, an employer who browses job seekers sees only a short profile: first name and last initial, skills, education level, years of experience, rating and the verified mark, and only for job seekers who have allowed it. A photo, email address, contact number, address and biodata are never shown until the person applies.
Job seekers	See the company profile, job details and rating of employers who post jobs. They also see when an employer opened their application and what happened next. Job offers, invitations and PESO referrals sent to them appear on their own pages.
Service providers	See the name or company, email and request details (date, time, address, message) of employers who request their services, and those employers' ratings.
Any signed-in user	Can open a short quick profile of another user: name, role, photo and the public parts of the profile (skills, education and bio for job seekers; company details for employers; service details and ratings for providers). For employers and service providers whose accounts PESO has verified, it also shows the registered email address and the optional contact number. A job seeker's email address and contact number are shown only to that job seeker, to PESO administrators, and to employers who received that job seeker's application.
PESO administrators	Can see account information, the details typed for verification, verification documents (ID, selfie and permit), biodata files and cover letters, and can download them, in order to verify accounts, handle reports and run the platform. Each time they open or download one, it is recorded. They can also read the activity log. When PESO refers a job seeker to a job, the printable referral slip shows only the name of the applicant, the job, the employer, the date and the name of the officer.
Your ID, selfie and permit	Only you and PESO administrators can open them. No other user can see them.
Messages	Messages and chat photos are visible only to the people in that conversation.

6. Outside services we rely on

Hostinger	Provides the server where Padagos and all its data are stored.
Brevo	Sends verification and password-reset emails from the Padagos address, so your email address and name pass through Brevo's mail systems.
Metered	When two people in a video interview cannot connect directly, an encrypted relay is used. The relay can see network addresses but not the content of the call.
jsDelivr	Delivers the page design, icon and chart libraries, and so can see the IP address and browser details of visitors loading those files.

These services handle information only to provide their function for Padagos.

7. How long we keep it

Account, profile and activity (applications, messages, interviews, requests, ratings)	For as long as your account exists. When you delete your account in Account Settings, or a PESO administrator deletes it, these records are removed from the database.
Uploaded files (photos, biodata, cover letter files, intro videos, ID and selfie photos, permits, chat photos)	Kept while your account exists. When you delete your account, or a PESO administrator deletes it, these files are deleted from the server together with your records. Photos in your conversations are deleted too, because deleting an account deletes its conversations, including the other person's copy of them.
Job offers, the checklist of items to bring, invitations and PESO referrals	Kept while your account exists, and removed when it is deleted. An offer is removed together with the application it belongs to.
Details typed for verification (name and birthdate on the ID, address, ID type, last 4 digits, business and permit details)	Kept while your account exists, and removed when it is deleted.
Activity logs (sign-ins, administrative actions, IP addresses)	12 months, after which they are deleted automatically.
Video calls and screen sharing	Not recorded, so nothing is kept.
Backups	Backup copies of the system may still contain deleted information until those backups are replaced.

We may keep specific information longer where the law requires it or where it is needed to handle a complaint or dispute.

8. How we protect it

Passwords are stored only as one-way hashes, never in plain text.
Connections to Padagos are encrypted (HTTPS).
Pages and actions are limited by role, and forms are protected against forged requests.
Repeated wrong passwords temporarily lock an account, and sessions end after a period of inactivity.
Chat photos can only be opened by the people in that conversation.
Verification documents, biodata files and intro videos can be opened only by the people allowed to see them, through a permission check. Uploaded files are stored under random file names, and folder listings are turned off.
Each time a PESO administrator opens or downloads someone's verification document, biodata or cover letter, it is recorded in the activity log. ID, selfie and permit photos are also re-saved when they are uploaded, which removes hidden data such as the GPS position a phone can store inside a photo.
Sign-ins and administrative actions are recorded in an activity log.

No system is perfectly secure. If a security incident affects your personal information in a way that could put you at risk, we will notify you and the National Privacy Commission as the law requires.

9. Your rights

Under the Data Privacy Act you have the right to:

Be informed about how your information is used, which is the purpose of this notice.
Object to the processing of your information, or withdraw your consent.
Access the personal information we hold about you.
Correct information that is wrong or out of date.
Request erasure or blocking of your information.
Data portability: obtain a copy of your information in a commonly used format.
Claim damages if you were harmed by inaccurate, incomplete or unlawfully used information.
File a complaint with the National Privacy Commission.

You can correct most information yourself in your profile and Account Settings, and delete your account there too. For anything else, contact the Data Protection Officer using the details in section 1. We may need to confirm who you are first. If you believe your rights have been violated, you may complain to the National Privacy Commission at privacy.gov.ph.

10. Cookies and browser storage

Padagos uses one session cookie that keeps you signed in and protects your forms. It is removed when you close your browser, and it ends after 2 hours of inactivity. We do not use advertising or tracking cookies, and we do not use analytics services.

11. Who Padagos is for

Padagos is intended for people who are of legal working age in the Philippines, and for businesses and service providers in and around Irosin.

12. Changes to this notice

We may update this notice. When we make an important change, we raise the version number above and ask signed-in users to review and confirm the new version.

Privacy Notice