Legal Policy

Privacy Policy

Flex is committed to protecting your privacy. This policy explains what information we collect across our talent, hiring, and Flexperts services, how we use it, who we share it with, and what rights you have under Philippine law.

Last updated: August 16, 2026

Who we are

Flex (legally Flex Web Development Services) is a talent company based in the Philippines, operating the platform at flex.com.ph. We vet Filipino professionals and place them with remote teams worldwide through two hiring models: on the managed model Flex employs the people it places, and on FlexDirect clients hire them directly. Through Flexperts, our build studio, we design and build complete web platforms. This privacy policy applies to all visitors and users of the Flex platform and every service above.

Information we collect

We collect the information needed to run a staffing and build business: to evaluate applicants honestly, to introduce them to clients, and to respond to the people who contact us. We practice data minimization, and we do not collect more than the service in front of you needs.

Information you provide directly

  • → Talent Application: name, email address, phone number, location, work history, education, skills, languages, rate expectation, availability, links you choose to share (portfolio, LinkedIn, GitHub), and your resume file when you apply through our talent application form.
  • → Skills Assessment: if your application advances, we may invite you to an online assessment. We record the conversation transcript, timing, and the resulting evaluation. The assessment is conducted by an AI assistant and reviewed by our team.
  • → Text Messages: we may text the mobile number you provide with short updates about your application, such as a note that an email is waiting for you. Texts are delivered through an SMS provider in the Philippines, and we keep a log of what was sent.
  • → Identity Verification: at a later stage of vetting we may ask you to verify your identity through our verification partner, Didit. This can include a government ID document and a live selfie check, processed under Didit's own privacy policy.
  • → Interview and Intro Recordings: with your consent, we may record your interview with us, and we may invite you to record a short introduction video of yourself. Recordings are stored privately, and where your consent covers it, a recording or your chosen intro video may be shared with a client considering you for a role.
  • → Hiring Brief: name, email address, company, the roles you want to fill, and any team or budget details you choose to share when you submit a brief as a client.
  • → Flexperts Project Brief: name, email address, company, and project details when you request a build through Flexperts.
  • → Support & Appointments: the content of support requests, email correspondence, and the details needed to book a scheduled call when you accept an appointment invitation.

Information collected automatically

  • → Technical Diagnostics: IP address, browser type and version, operating system, and device type, collected through Cloudflare's edge network for security monitoring and performance.
  • → Performance Reports: when a page loads unusually slowly, the browser may report anonymous timing data (page path, load timings, country, and network route) so we can find and fix the cause. These reports contain no personal identifiers and use no cookies.
  • → Search Queries: when you use the site search, your query and result count are recorded anonymously to improve search relevance. Queries that return zero results are not stored.
  • → hCaptcha Verification: when you submit our forms, hCaptcha processes a challenge to distinguish human users from bots. hCaptcha may collect browser metadata for this purpose under its own privacy policy.

Cookies & local storage

The Flex platform uses minimal browser storage:

  • → Theme Preference: we store your light/dark mode preference in localStorage so it persists across visits. This is purely cosmetic and contains no personal information.
  • → Session State: temporary UI state (such as filter selections) may be stored in sessionStorage, which is automatically cleared when you close the browser tab.
  • → Service Worker Cache: if you install Flex as a PWA, the Service Worker will cache fonts, images, and pages locally to enable faster loading and offline access. This data remains on your device and is never transmitted back to us.
  • → Meta Pixel: on select pages, the Meta (Facebook) Pixel may set cookies for conversion tracking and audience analytics. You can opt out of Meta tracking through your Facebook ad settings or browser privacy controls.

Third-party data processors

We share data only with the service providers who process it on our behalf to run the platform, each bound by their own privacy policies and data protection commitments:

  • → Cloudflare, Inc.: edge computing, CDN, DNS, DDoS protection, bot management, and file storage. Uploaded files such as resumes are stored on Cloudflare infrastructure.
  • → Database hosting: a managed database provider on secure cloud infrastructure in Singapore. Application records, briefs, and support conversations live here.
  • → Google LLC: email delivery and, when you book an appointment with us, calendar scheduling and Google Meet.
  • → Anthropic, PBC: the AI that conducts our skills assessment. Assessment conversations are processed through Anthropic's API to run and evaluate the session.
  • → Didit: identity verification for applicants at the later stages of vetting, including document and liveness checks.
  • → hCaptcha (Intuition Machines, Inc.): human verification on our public forms.
  • → Meta Platforms, Inc.: conversion tracking via the Meta Pixel on select pages.

We do not sell, rent, or trade your personal data to any third party for their own marketing purposes.

How we use your information

  • → Process and evaluate talent applications, run assessments, and verify identity as part of vetting.
  • → Introduce vetted candidates to prospective clients. When a client considers you for a role, we share the professional details relevant to that role, such as your experience, skills, and assessment outcome.
  • → Respond to hiring briefs, Flexperts project inquiries, support requests, and appointments you initiate.
  • → Operate, maintain, and secure the Flex platform infrastructure.
  • → Analyze aggregate usage patterns to improve content, performance, and user experience.
  • → Detect, prevent, and respond to security threats, abuse, and fraudulent activity.
  • → Comply with applicable legal obligations and enforce our Terms of Service.

Data retention

We retain personal data for as long as necessary for the purposes described in this policy. Specifically:

  • → Talent applications: retained for as long as necessary for recruitment and placement, regardless of the application's outcome, so we can consider you for future roles. You may request deletion at any time and we will honor it, subject only to records we are legally required to keep.
  • → Briefs and support conversations: retained for the duration of the business relationship or inquiry resolution, then archived or deleted.
  • → Search analytics: stored in aggregate with no personally identifiable information.
  • → Technical logs: retained by Cloudflare according to their data retention schedule, typically no longer than 30 days.

Your rights under Philippine law

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights as a data subject:

  • → Right to be Informed: you have the right to know what personal data we hold about you and how it is processed.
  • → Right to Access: you may request a copy of the personal data we hold about you.
  • → Right to Correction: you may request that inaccurate or incomplete data be corrected.
  • → Right to Erasure: you may request deletion of your personal data, subject to legal retention requirements.
  • → Right to Object: you may object to the processing of your personal data under certain circumstances.
  • → Right to Data Portability: you may request an export of the data you provided in a structured, machine-readable format.
  • → Right to File a Complaint: you may file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, contact us at privacy@flex.com.ph.

International transfers

Flex operates from the Philippines. Some of our processors run infrastructure abroad: Cloudflare's edge network is global, our database is hosted in Singapore, and Google, Anthropic, and Didit process data on their own international infrastructure. When data crosses borders during processing, we rely on each provider's contractual data protection commitments and standard safeguards so your data receives equivalent protection regardless of where it is processed.

Age requirement

The Flex platform is not directed at anyone under the age of 18, and talent applications are open only to applicants who are at least 18 years old. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at privacy@flex.com.ph so we can delete it.

Changes to this policy

We may update this privacy policy to reflect changes to our services, data practices, or legal requirements. Material changes will be communicated through the platform. The "Last Updated" date at the top of this policy indicates when the most recent revision was made. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

Contact us

For questions about this policy, to exercise your privacy rights, or to report a data concern, contact us at privacy@flex.com.ph or use the contact form .