Privacy Policy

1. Who We Are

VAjeter is a virtual assistant staffing and workforce coordination platform operated by JetherWeb, a business enterprise established in the Philippines. Our platform enables business clients to coordinate virtual assistant staffing, and supports country partners and virtual assistant professionals in connecting with legitimate employment and business opportunities.

For any privacy-related inquiries, please reach us through our contact page at vajeter.com/contact.

2. Applicable Legal Frameworks

Philippine Law: This Privacy Policy is written in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR). The DPA governs the collection, handling, and protection of personal information of data subjects in the Philippines, including virtual assistant professionals and any other Philippine-based users of our platform.

International Standards: VAjeter also services business clients, country partners, and other data subjects located outside the Philippines, including within the European Economic Area (EEA), the United Kingdom, Australia, and other jurisdictions. Where applicable, we aim to align our data handling practices with principles reflected in the General Data Protection Regulation (EU GDPR), the UK GDPR, and other relevant frameworks — including lawful basis for processing, data subject rights, and cross-border transfer safeguards.

If you are located in the EEA or UK, our legal basis for processing your personal data includes: performance of a contract (when providing services to you), compliance with a legal obligation, legitimate interests pursued by us (such as fraud prevention and platform security), and your explicit consent where required.

3. Personal Information We Collect

Account and Identity Information: Full name, email address, password (stored in hashed form via Supabase Auth), role type (client, virtual assistant, or country partner), country of residence or business registration.

Professional and Business Profile: For virtual assistants — job title, professional skills, experience level, portfolio descriptions, and salary expectations. For business clients — company name, industry, staffing requirements, and team size. For country partners — business or commercial network description, region of operation, and contact details (provided through our contact form at /contact only).

Identity Verification Data: As part of our onboarding process, we require certain account holders to complete identity verification through a certified third-party KYC provider, Didit (didit.me). This may include government-issued identification and facial biometric data processed directly by Didit under their own privacy policy and data processing agreements. VAjeter receives only a verification status outcome and does not store raw biometric data.

Usage and Technical Information: IP addresses, browser type, device information, session duration, pages visited, and interaction data collected through standard server logging and analytics tools. This information is used for security, fraud prevention, and platform improvement.

Communications: Messages, support inquiries, and correspondence you submit through our platform, including through our contact form at /contact.

Financial and Operational Data: For country partners and business clients, engagement records, billing arrangements (described but not directly processed by VAjeter), and staffing coordination details relevant to your service arrangement.

4. How We Use Your Information

Service Delivery: To provide, operate, and maintain the VAjeter platform — including account authentication, virtual assistant matching, staffing coordination, onboarding workflows, and attendance and engagement tracking.

Identity and Compliance: To verify identity, prevent fraud, and comply with applicable legal obligations including anti-money laundering and know-your-customer requirements relevant to staffing arrangements.

Partner Attribution and Commercials: To maintain accurate country partner lead attribution, commission calculations, and protected territory records.

Communication: To send transactional messages (account confirmations, operational updates, service notifications) and, where you have consented, occasional relevant product or partnership updates.

Platform Improvement: To analyse usage patterns, resolve technical issues, and enhance the quality and reliability of our services.

Legal and Security: To enforce our Terms of Service, protect users from abuse, and comply with legal process or law enforcement requests where applicable.

5. Sharing Your Information

We do not sell your personal information.

Service Providers: We share information with trusted service providers who process data on our behalf — including Supabase (database, authentication, and storage infrastructure), Didit (identity verification), ZeptoMail (transactional email delivery), and analytics providers. These providers are contractually bound to handle data securely and only for the purposes we specify.

Country Partners: Business client information (company name, staffing requirements, and engagement status) may be shared with the country partner attributed to that client relationship. This is disclosed during the onboarding process.

VAjeter Internal Teams: Authorized operations, finance, and staffing coordination staff may access profile and engagement data as required for service delivery.

Legal Requirements: We may disclose personal data when required by law, court order, or binding government authority request in the Philippines or in other applicable jurisdictions.

Cross-Border Transfers: Our infrastructure providers may process and store data outside the Philippines (including in the United States and European Union). We take reasonable steps to ensure such transfers are governed by appropriate contractual safeguards consistent with applicable data protection standards.

6. Data Retention

We retain personal data for as long as is necessary to fulfil the purposes described in this Policy and to comply with our legal and operational obligations.

Account data is retained for the duration of your account and for a reasonable period thereafter to support dispute resolution and legal accountability.

Engagement and financial records relevant to staffing arrangements may be retained for up to seven (7) years to comply with applicable tax and business record-keeping requirements.

Identity verification records (status outcomes) are retained for the minimum period required by applicable KYC and AML obligations.

You may request deletion of your personal data by contacting us through /contact. Deletion requests are subject to legal retention obligations and will be processed within the timeframes required under applicable law.

7. Your Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), and where applicable under international frameworks (including the EU GDPR and UK GDPR), you have the following rights with respect to your personal data:

Right to be Informed: To know how your data is collected, used, and shared.

Right of Access: To request a copy of the personal data we hold about you.

Right to Rectification: To request correction of inaccurate or incomplete information.

Right to Erasure / Right to be Forgotten: To request deletion of your personal data, subject to applicable legal retention obligations.

Right to Object: To object to processing based on legitimate interests or for direct marketing purposes.

Right to Data Portability: To receive your data in a structured, machine-readable format where technically feasible.

Right to Lodge a Complaint: Philippine data subjects may lodge complaints with the National Privacy Commission (NPC) at privacy.gov.ph. EEA and UK data subjects may lodge complaints with their local data protection supervisory authority.

To exercise any of these rights, please contact us through our contact page at vajeter.com/contact.

8. Security

We implement industry-standard technical and organizational measures to protect your personal information, including role-based access controls, encrypted data transmission (TLS), server-side password hashing, and audit logging.

No system is completely immune to security risk. If you believe your account or personal data has been compromised, please notify us immediately through /contact.

9. Image and File Storage

Profile images and uploaded files are processed through a WebP conversion pipeline before storage. VAjeter does not store unprocessed raw image files. Files are stored in access-controlled storage buckets via Supabase Storage.

10. Cookies and Tracking

We use essential session cookies to maintain authentication and platform functionality. We do not use third-party advertising cookies or behavioural tracking cookies. Basic anonymized analytics may be used to understand aggregate platform usage patterns.

11. Children's Privacy

VAjeter is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us through /contact.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through a notice on our platform or via email. Continued use of VAjeter following notice of changes constitutes acceptance of the updated policy. The effective date at the top of this document reflects the date of the most recent revision.

13. Contact

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach us through our contact page at vajeter.com/contact. We aim to respond to all legitimate data privacy inquiries within 15 business days.