Privacy notice

Data, purposes and access

Email, password hashes and necessary verification records support account access and security. Profile details, languages, experience and visa declarations support applications and participant contact. Saved listings, applications, messages, interviews and expressions of interest preserve relevant activity. Service-notification and delivery information supports sending and troubleshooting. Support correspondence, attachments, reports, provider authorization and necessary audit records support handling requests, review and safety.

Policy confirmations record the versions, language, server timestamps and content hashes to document the separate choices you actually made. This evidence does not establish blanket consent to other data use or transfers.

Applications retain a snapshot of the profile at submission; later profile edits do not automatically alter that copy. Relevant participants see information according to feature permissions, not unrestricted public access. Necessary and optional fields are identified by the interface; missing necessary data may prevent the corresponding account or application function. Do not submit irrelevant sensitive documents.

Providers and processing regions

Railway/PostgreSQL hosts the website, database and notification workers with necessary account, application and activity data; the recorded deployment region is Virginia, USA. Resend processes recipients, notification content and delivery results; the recorded sending-domain region is Tokyo, while Resend states that stored data is held in the United States. Zoho Mail processes support correspondence, submitted attachments and notification copies; the support account was confirmed in its US data center.

Cloudflare Turnstile processes anti-abuse signals such as IP, browser, connection and website-origin information. Encrypted backups are stored on the operator's computer and Google Drive; Drive also processes file/account/access metadata. UptimeRobot checks public URL availability and handles alert contact details, without submitting member applications or login cookies. Cloudflare Pages separately hosts backup-tool instructions and necessary visitor traffic. Restricted processing regions or full log/metadata retention have not been confirmed for these services.

Data may be processed outside your country. Japanese language support does not mean data stays in Japan. Deployment/sending regions do not limit all provider support, logs, backups or subprocessors to those regions. Backup encryption does not hide all file metadata. Contact WORKANDER first about requests; data under its control and copies held by suppliers or other participants must be addressed separately.

Retention arrangements

Accounts and profiles are retained during use. An approved deletion request is reviewed by identity, scope, shared records and necessary exceptions; there is no automatic inactivity-based account deletion. Ordinary applications, messages and interviews have a six-calendar-month target after case completion; general support has six calendar months after closure. Unknown historical closure times and post-closure activity require review. Privacy, dispute and security cases do not automatically inherit ordinary support periods.

Settled mail-delivery records have a 90-elapsed-day target from a server-recorded confirmed outcome or explicit manual disposition after sending has stopped. Meaningful later outcome changes restart the anchor; duplicate events and views do not. Provider submission is not recipient delivery. Pending/retrying, unclear outcomes, active work and holds require separate review. Suppression lists used to prevent further mail are excluded.

Ordinary administrative/security audit has a 12-calendar-month target from event creation, calculated at the same Taipei time with month-end clamping. Privacy cases, authorization evidence and unresolved disputes follow their own purposes. A privacy-request case has one Taipei calendar year after confirmed closure; February 29 maps to February 28 in the next year. Reopening pauses the old period and a newly completed, confirmed closure starts a new year. Authorization evidence lasts through active permission and for 12 months after completed withdrawal or permanent listing closure, using the later recorded event. Temporary unpublishing is not permanent closure. Release of a hold rechecks the original expiry rather than automatically adding another year.

Ordinary encrypted backups have a seven-day retention target; an offline computer or failed process may delay cleanup. Only a specifically designated final closure backup has a 30-day exception from successful restore verification. Expiry targets are not automatic erasure guarantees. A mailbox label does not synchronize a website case or delete mail/attachments; provider, mailbox, participant and backup copies require separate handling.

Requests and security

Use the website privacy-request entry or askworkander@workander.com to request inquiry, access/copies, correction, restriction/cessation or deletion. The individual operator reviews requests and verifies necessary identity, authority and scope. If you cannot sign in or act through a representative, contact support for a necessary, case-specific identity/authorization check; unverified persons are not given account data.

Never email or enter passwords, verification/recovery codes or unnecessary full identity documents in request descriptions. The secure website may separately require password reauthentication and applicable MFA to verify account control. Responses distinguish completed work, necessary retention, pending backup cleanup and unresolved parts, with a way to supplement or seek reconsideration. Submission, stopped reminders, account suspension and case closure are not complete deletion. There is no automatic deletion or always-available complete self-service download; provision is arranged after review. Applicable deadlines and exceptions still apply despite support having no fixed hours.

Protections include password hashing, session/permission controls, backup encryption and necessary audit records; absolute security is not guaranteed. Essential cookies support sessions and language settings, while Turnstile processes the stated anti-abuse signals. Privacy-notice acknowledgment records receipt of this information, not blanket authorization for every use or international transfer. Contact support about changes, rights or safety concerns.