TayoTayo Privacy Policy

This Privacy Policy explains how TayoTayo collects, uses, shares, stores, and protects personal data when you visit or use the TayoTayo marketplace. TayoTayo acts as the personal information controller for personal data processed to operate the platform.

This policy applies to visitors, customers, and individual professional workers. It does not govern information exchanged outside TayoTayo after users choose to communicate through another service.

Account and contact data: name, email address, phone number, authentication provider, account status, and profile photo.

Early-access registration data: selected role, name, email address, mobile number, general location, service interests, contact preference, and consent choices submitted before or while creating an account.

Professional profile data: trade, services, service area, availability, experience, optional age, gender and education, rates, tools, certifications, portfolio or completion photos, reviews, and profile visibility choices.

Verification data: identification and government-clearance files you voluntarily upload, their verification status, and records of permission requests. These files may contain sensitive personal information and receive restricted access.

Marketplace activity: searches, favorites, job offers, job details, schedules, status updates, messages, reviews, notifications, and related timestamps.

Device and usage data: IP address, browser and device information, security logs, cookies, local-storage preferences, approximate location or addresses entered into location search, and basic usage events if analytics is enabled.

TayoTayo does not process customer-to-worker project payments in the MVP and does not ask you to provide payment-card or bank credentials for those payments.

We process data to manage early-access interest; plan initial service areas; create and secure accounts; display worker profiles; provide search and matching; create job offers and projects; enable messages and notifications; record project progress and completion; support reviews, favorites, and analytics; prevent fraud and misuse; respond to requests; improve accessibility and language preferences; and comply with legal obligations.

Depending on the activity, processing is based on your consent, steps necessary to provide the service or fulfill an agreement with you, TayoTayo's legitimate interests in operating a safe marketplace, or compliance with law. We request consent where the Data Privacy Act requires it, particularly for voluntary sensitive personal information.

TayoTayo does not use solely automated decision-making to determine whether a person may offer or request work through the platform.

A worker who enables Visible in worker search makes selected professional information available to customers and, in limited form, visitors. This may include name, photo, trade, general service area, availability, rate, experience, services, portfolio, certifications, ratings, and reviews.

Government identification and clearance files are not part of the public profile. A customer must request access, and the worker must approve or decline the request. Approved access is limited to the requesting customer through temporary links. Workers should approve only requests connected to a legitimate job discussion.

Messages and project records are available only to their participants and authorized TayoTayo personnel or service providers when reasonably necessary for support, safety, fraud prevention, legal compliance, or dispute handling.

TayoTayo uses service providers to operate the platform, including Supabase for authentication, database, and file storage; Vercel for application hosting and delivery; and Google Maps Platform for address suggestions. Optional analytics providers may be added only in line with your cookie preferences.

These providers process data under their own security and privacy commitments and may operate infrastructure outside the Philippines. Where personal data is transferred or accessed abroad, TayoTayo will require appropriate contractual, organizational, and technical safeguards consistent with Philippine law.

TayoTayo does not sell personal data. We may disclose information when required by law, a valid government request, to protect users or the platform, or as part of a business reorganization subject to continued privacy safeguards.

Essential authentication and security cookies are required to keep accounts signed in and protect sessions. Local storage may remember language, appearance, accessibility, search, and login-convenience preferences. The login-convenience setting stores only your email address; TayoTayo never saves your password in local storage. Password saving is controlled by your browser or password manager.

You may manage personalization and analytics choices from Preferences. If persistent personalization storage is disabled, those choices are retained only for the current browser session. Analytics and advertising cookies are not currently active. Clearing TayoTayo's device preferences does not delete your account, projects, messages, or profile. Blocking essential cookies may prevent login and other protected features from working.

We retain account and profile data while your account is active and for as long as reasonably necessary to provide the service. Job, message, review, verification-access, safety, and audit records may be retained after account closure when needed to resolve disputes, prevent fraud, enforce agreements, establish or defend legal claims, or comply with law.

When data is no longer required, it will be deleted, anonymized, or securely disposed of. Information already shared with another user may remain in that user's conversation or job record where retention is necessary for both parties' legitimate records.

TayoTayo uses access controls, authenticated database policies, restricted storage, temporary file links, logging, and other reasonable safeguards appropriate to the data and the MVP. No online system is completely secure.

Keep your login details confidential, use a strong unique password, review document-access requests carefully, and avoid sending unnecessary sensitive information in messages. Notify TayoTayo promptly if you suspect unauthorized account access or misuse of your data.

Under Republic Act No. 10173, or the Data Privacy Act of 2012, and its implementing rules, you may have the right to be informed, object to processing, access your personal data, correct inaccurate data, request erasure or blocking where legally available, receive portable data, claim damages, and file a complaint with the National Privacy Commission.

You may update much of your profile directly in TayoTayo, pause worker-search visibility, decline private-document requests, change device preferences, delete your account, or request assistance for other privacy rights. Account deletion also removes an early-access registration that uses the same authenticated email. We may need to verify your identity before fulfilling other requests. Some requests may be limited where retention or processing is required by law or needed to protect another person's rights.

TayoTayo is intended for people who are at least 18 years old and legally able to enter work arrangements. We do not knowingly create accounts for children. A parent or guardian who believes a child provided personal data should contact TayoTayo so it can be reviewed and removed where appropriate.

We may update this policy as TayoTayo adds features, service providers, or legal requirements. Material changes will be announced in the application before they take effect when reasonably possible. The effective date at the top identifies the current version.

Privacy questions, consent withdrawal, data-subject requests, and security reports may be submitted through TayoTayo's official support channel shown in the application. Before public production launch, TayoTayo will publish the legal name and contact details of its operator and designated privacy contact in this section.