Privacy Policy
Last updated 12 August 2026
What we collect
You give us: username, email address, password, and optionally a display name, short bio, country and mobile number. Employers provide job content; workers provide proof of completed work, which may include screenshots.
We record automatically: IP address and browser user-agent on signup, login, deposits and withdrawals; a device fingerprint at signup; and a log of security- and money-relevant actions.
Payment details: the mobile banking number or wallet address you withdraw to, and the transaction ID and sender number you report for a deposit. We never ask for, and never store, your PIN or banking password.
Why we collect it
- To operate your account and pay you
- To match your deposits to payments we actually received
- To detect fraud — duplicate accounts, referral farming, and payments made from mobile banking accounts the sender does not own
- To keep a permanent, auditable record of every movement of money
The IP and device data exists for fraud detection specifically. It is what lets us tell the difference between a household sharing a connection and one person running fifty accounts.
How it is protected
- Passwords are hashed with argon2id and are not recoverable by us
- Payout account numbers and two-factor seeds are encrypted at rest (AES-256-GCM), so reading the database alone does not reveal them
- Login sessions are stored only as hashes
- Proof screenshots are stored outside the public web directory and are visible only to you, the employer whose job it was submitted to, and our staff
- All traffic is encrypted in transit
What we do not do
- We do not sell or rent your personal data
- We do not run advertising trackers or third-party analytics that identify you
- Our emails contain no tracking pixels
- We do not show your email address to other users, including on referral pages
Who else sees your data
Only the service providers we need to operate: our hosting provider, our email delivery provider, and payment providers when a payout is sent. We disclose data to authorities only where legally required.
Other users see your username, display name, bio, country, and your public work history. An employer additionally sees the proof you submit to their job.
How long we keep it
Financial records are kept permanently — the ledger is append-only by design, and this is also what allows you to audit your own balance. Uploaded proof files that are never attached to a submission are deleted after 24 hours. Expired login sessions and unused verification tokens are purged automatically.
If you close your account, your profile is deactivated but financial history is retained, because it is part of records that involve other people's money too.
Your choices
You can update your profile at any time in settings, see every device signed into your account and sign any of them out, and export your full transaction statement.
To request a copy of your data or ask us to delete what we are not required to keep, email privacy@microworkjobs.com.