Privacy Policy

1. What we collect

• Account data: name, email address, country of residence, role, and — for talent — profile, portfolio, skills and experience-level information. For clients, company details where you provide them.
• Verification data: where identity verification applies (for example Verified Talent), we use a third-party identity provider to process your government ID and selfie. We do not keep copies of ID documents where we can avoid it; we retain verification results only as our retention schedule allows.
• Financial data: wallet and ledger balances, contract and payment history, payout status. Card and bank details are processed by our payment providers — we do not store your card number.
• Usage data: applications, contracts, messages, reviews and Seeds activity, plus technical data such as IP address and device type needed for security.
• What we do NOT collect: screenshots, keystroke logs, screen recordings or any form of work surveillance. We measure deliverables and outcomes, never your screen.

2. How we use data

• To operate the marketplace: accounts, matching, applications, contracts, work management, messaging and reviews.
• To process payments and payouts, and to keep the ledger reconcilable.
• To verify identity, prevent fraud, and keep the platform safe.
• To handle disputes and provide support.
• To meet legal obligations, such as tax reporting and records retention.
• To send service messages about your account, and — only with your separate opt-in — marketing about Magasaka. Every marketing message carries an unsubscribe.

2a. Our lawful bases

Where the law requires us to identify a legal basis for processing, we rely on: performance of our contract with you (operating your account, contracts, payments and payouts); your consent (marketing, and any optional verification or feature you choose to switch on, which you can withdraw at any time); our legitimate interests (preventing fraud and abuse, keeping the platform secure and reliable, and improving the service); and compliance with legal obligations (tax reporting, accounting records, and lawful requests from authorities).

3. What we share

• Service providers: payment and payout providers (for example Stripe, including Stripe Connect for payouts and Stripe Identity for verification, and Wise where used for payouts), hosting and infrastructure, email delivery, and customer-support tooling. Each is bound to use the data only for the service they provide to us.
• Other users, only as needed: the parties to a contract see what's required to do the work (for example the other party's name and contact details for the engagement). Your public profile is shown to the extent you choose.
• Legal: we disclose data to authorities where the law requires it, and to protect users, the platform or the public.
• We do not sell personal data. We do not share it with advertisers.

4. Retention and deletion

We keep personal data only as long as we need it for the purpose we collected it: the length of your relationship with Magasaka, plus the periods required for tax, accounting, dispute and security records. After that it is deleted or anonymised. You can delete your account; some records (for example completed contracts and tax records) are lawfully retained for the required periods.

5. Your rights

Under the Philippine Data Privacy Act (RA 10173), and other laws that apply to you, you can:

• be informed about how your data is processed;
• access, correct or object to the processing of your data;
• request a copy or export of the data you provided;
• request erasure or blocking of data, subject to lawful retention;
• withdraw consent for marketing at any time, and for other processing where consent is the basis;
• lodge a complaint — with us first, and then with the Philippine National Privacy Commission.

To exercise any of these, email hello@magasaka.com.

6. Security

We use strong authentication, least-privilege access control, encryption in transit and at rest, logging and monitoring, and tested backup and recovery. Before launch we complete an independent security assessment. Verification data is also protected by the identity provider's own security program.

7. Cookies and local storage

We use essential cookies and local storage for login, session security and remembering preferences. If we introduce analytics later, we will list them here and make non-essential cookies opt-in where the law requires it.

8. Age

Magasaka is for people 18 and older. We do not knowingly collect data from anyone under 18 and delete such data when we discover it.

9. International transfers

Data may be processed in the Philippines, the United States and the jurisdictions where our providers operate, because our payment and infrastructure partners are located there. We use contractual and technical safeguards for those transfers, consistent with this policy.

10. Changes

We publish versions of this policy with dates and tell users about material changes before they take effect. Continuing to use Magasaka after a change means you accept the updated policy, and access you already have to existing work is not affected.

11. Contact

Privacy questions and rights requests: hello@magasaka.com.

A data protection contact (our designated Data Protection Officer role) is named with full contact details at launch. We register our personal-data processing systems with the Philippine National Privacy Commission where the rules require it, and we will notify affected users and the Commission of a personal data breach where the law requires notification.