Privacy Policy

HelperDoc is operated by HelperDoc Limited, a licensed Hong Kong employment agency. We are the data user under the Personal Data (Privacy) Ordinance (Cap. 486) for the personal data described in this policy.

Account data — your name, email, phone, role (helper / employer / agency), and locale.

Helper profile data — date of birth, nationality, contract status, work history, education, language abilities, identification photos and document scans, video introductions, declarations and signatures.

Employer profile data — household composition, address, contract preferences, household photos, payment metadata.

Job-posting data — duties, salary range, schedule, location, special requirements.

Communications — messages exchanged on the platform, support inquiries, hire-offer history.

Technical data — IP address, browser/user agent, access timestamps, device identifiers, security audit log entries.

To deliver matching, messaging, hire-confirmation, and contract workflows between helpers, employers, and agencies.

To verify identity and contract eligibility — including WhatsApp verification, passport reviews, and government-form preparation.

To respond to support inquiries and to operate audit trails for security, fraud prevention, and dispute resolution.

To comply with Hong Kong employment-agency regulations, including record-keeping obligations.

To send transactional notifications (hire offers, message replies, profile-status updates). Marketing communications are sent only with explicit opt-in.

Helpers control which fields are visible to employers via their privacy settings during onboarding. Sensitive identifiers (passport number, full date of birth, full last name) are gated behind a paid employer subscription.

Anonymous and free visitors see redacted teaser views — first name, age range, nationality, top skills.

Agency white-label viewers see the same redaction as a free employer; contact channels are routed through the agency.

Admin staff see full data only as needed to operate the platform; every admin field-read is audit-logged and gated by role-based field permissions.

Data is hosted on Supabase (PostgreSQL) in a Singapore region with row-level security policies on every table. Document scans and photos are stored in private object storage and served via short-lived signed URLs.

Passwords are stored hashed (bcrypt) by Supabase Auth — we never see plaintext.

Backups are encrypted at rest and retained for 30 days.

You may request access to or correction of your personal data at any time by emailing the Data Protection Officer.

You may delete your account from your dashboard. Soft-deleted accounts are anonymised within 90 days; some records (audit log, hire offers, financial records) are retained for the periods required by Hong Kong law.

You may withdraw consent for marketing communications without affecting account access.

We use essential cookies for authentication and locale preference. We do not currently run third-party advertising trackers. Analytics, when enabled, use first-party cookies and aggregated reporting only.

Subscription payments are processed by Stripe Payments Europe Limited (Ireland). HelperDoc receives only the Stripe customer ID and subscription status; card numbers, CVV codes, and billing addresses never reach our servers. Stripe processes payment data under PCI-DSS Level 1 certification and is GDPR-compliant. For Stripe's privacy notice see stripe.com/privacy.

Hong Kong FPS / bank-transfer payments are recorded as ledger entries in our database; sales staff verify and confirm payments manually before the case advances.

Your data is held by the following processors:

· Supabase, Inc. (US) — database + storage. The HelperDoc project is provisioned in the Singapore region (ap-southeast-1).

· Vercel, Inc. (US) — web application hosting. Edge requests are served from the geographically closest region.

· Resend, Inc. (US) — transactional email (account confirmations, password reset, invite links).

· Stripe Payments Europe Limited (Ireland) — subscription billing only.

Each processor is engaged under a data processing agreement that requires GDPR-equivalent safeguards. By using HelperDoc you consent to these cross-border transfers as necessary for the service.

We will notify you in-app at least 14 days before any material change. The current version date is shown at the bottom of this page.

Data Protection Officer · privacy@helperdocs.com

HelperDoc Limited · Hong Kong

Hong Kong Office of the Privacy Commissioner for Personal Data (PCPD): pcpd.org.hk — you may lodge a complaint with the PCPD if you believe your privacy rights under the Personal Data (Privacy) Ordinance have been breached.