Last updated: August 11, 2026
This Privacy Policy explains what StaffCastle (“we,” “us”) collects on staffcastle.com (the “Site”), how we use it, and the choices you have. StaffCastle is a marketplace connecting employers (“Employers”) with Filipino virtual assistants and remote professionals (“Jobseekers”). It is written in plain English on purpose.
1. What we collect
Account information (everyone): name, email address, password (stored hashed), and account type.
Jobseeker profiles: the information you choose to put on your profile so Employers can evaluate you — professional title, skills, work experience, expected rates, availability, your recorded English video introduction, your description of how you use AI tools, and any work samples you submit.
Jobseeker verification files: to verify profiles we collect a government-ID upload and an internet speed-test screenshot. These two are used for verification only, are stored with admin-only access, and are never displayed to Employers or anyone else. Employers see only the verification badges on your profile.
Employer billing: subscription payments and the Concierge Shortlist are processed by Stripe. Your card details go directly to Stripe — we never see or store your full card number. We keep records of your plan, transactions, and billing status. Charges appear on statements as STAFFCASTLE.
Messages and support: messages sent through the Site and emails you send us.
Usage data: standard technical logs (IP address, browser and device type, pages visited) collected when you use the Site.
2. How we use it
- To run the marketplace: create accounts, display Jobseeker profiles to Employers, show verification badges, deliver job posts and applications, and enable contact between the two sides.
- To verify Jobseeker profiles as described above.
- To process payments and manage subscriptions (via Stripe).
- To send transactional email (receipts, password resets, account notices) and — if you opt in — marketing email such as guides and product updates, sent via Brevo. Every marketing email has an unsubscribe link, and you can opt out at any time without affecting your account.
- To keep the Site secure, prevent fraud and spam, and enforce our Terms and Acceptable Use Policy.
- To comply with legal obligations.
3. Who can see what
- Employers using the Site can see Jobseeker profile content — that visibility is the product. They never see your verification files (government ID, speed-test screenshot) or your account password.
- Service providers that help us run StaffCastle process data on our behalf: Stripe (payments), Brevo (email), and our hosting provider (Hostinger, with servers in the United States). They may only use your data to provide their service to us.
- Legal: we may disclose information if required by law, or to protect the rights, safety, or property of StaffCastle or its users.
- Business transfer: if StaffCastle is ever acquired or merged, user data may transfer as part of that transaction, under this policy’s protections.
We do not sell your personal information, and we do not share it with third parties for their own advertising.
4. Cookies and email tracking
The Site uses cookies that are necessary to function: login/session cookies, security cookies, and caching cookies (we use LiteSpeed Cache to make pages load faster). Stripe sets cookies on checkout pages for fraud prevention. Our emails may include standard open/click tracking so we can tell whether they are useful. You can control cookies in your browser settings; blocking essential cookies may break login.
5. Where your data lives
StaffCastle is operated from the Philippines with hosting in the United States, so your information is processed in both countries. Wherever it is processed, it is protected by this policy.
6. How long we keep it
We keep account and profile data while your account is active. If you close your account, we delete or anonymize your personal data within a reasonable period, except what we must keep for legal, tax, security, or dispute purposes. Verification files are kept while your account is active and for up to 12 months after closure, unless the law requires longer.
7. Security
We use reasonable technical and organizational measures to protect your data — HTTPS everywhere, hashed passwords, and admin-only access to verification files. No system is 100% secure, so please use a strong, unique password.
8. Your rights and choices
You can view and edit your profile and account details after logging in, and unsubscribe from marketing at any time. You can also email he***@*********le.com to request a copy of your personal data, correction of inaccurate data, or deletion of your account and data — we will verify the request and respond.
Philippines: if you are in the Philippines, you have rights under the Data Privacy Act of 2012 (RA 10173), including the rights to access, correct, and request erasure of your personal data, and the right to lodge a complaint with the National Privacy Commission.
California: if you are a California resident, you have the right to know what personal information we collect and how it is used (this policy), to request access or deletion, and to not be discriminated against for exercising those rights. We do not sell or “share” personal information as defined by the CCPA/CPRA.
EEA/UK: if you use the Site from the EEA or UK, we process your data to perform our contract with you, for our legitimate interest in running a safe marketplace, or with your consent (marketing), and you have equivalent rights of access, correction, erasure, and objection.
9. Age
StaffCastle is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.
10. Changes
We may update this policy as StaffCastle grows. Material changes will be announced on the Site or by email. The “Last updated” date at the top always tells you the current version.
11. Contact
Privacy questions or requests: he***@*********le.com.
