This Privacy Policy explains how Workodin LLC, operating as PayOdin in its capacity as Merchant of Record, collects, uses, stores, shares, and protects personal data. This policy supplements the Subcontractor Agreement and Terms of Service.
This policy applies to Freelancers and Clients who access or use the Platform.
PayOdin is the data controller under GDPR, the Philippines PDPA, Saudi Arabia PDPL, and other applicable laws.
Contact: Workodin LLC, 16192 Coastal Highway, Lewes, Delaware 19958. Email: legal@workodinllc.com.
As used in this policy: Chargeback means a reversal of a Client payment initiated by a card network or bank. Client means the end customer who pays PayOdin for services delivered by a Freelancer. Delivery Confirmation means the acknowledgment that a Freelancer's services have been received. Freelancer means the individual subcontractor registered on the Platform. GDPR means the EU General Data Protection Regulation. Invoice means the payment request issued by PayOdin in its own name to a Client. KYC means Know Your Customer identity verification. Merchant of Record means PayOdin's role as the legal entity of record on all Invoices and transactions. Personal Data means any information relating to an identified or identifiable natural person. Platform means the PayOdin website, apps, APIs, dashboards, and related services. SCCs means Standard Contractual Clauses approved by the European Commission. Transaction Fee means the fee described in Section 7 of the Terms of Service.
We collect data directly from users during account registration and use of the Platform, automatically through Platform systems, from payment processors Stripe and Mercury, and from third-party KYC providers.
We use your data for the following purposes, each supported by an applicable legal basis under GDPR, the Philippines PDPA, and the Saudi Arabia PDPL:
We do not sell your personal data. We do not share your data for advertising purposes. We share your data only with:
Data is hosted in the EU. Transfers to Stripe and Mercury in the United States are covered by Standard Contractual Clauses (SCCs) approved by the European Commission. Cross-border transfer requirements under the Philippines PDPA and Saudi Arabia PDPL are specifically addressed in the jurisdiction-specific provisions below.
Depending on your jurisdiction, you may have rights regarding your personal data. These include:
Under GDPR: Rights of access, rectification, erasure, restriction of processing, data portability, objection, and the right to lodge a complaint with a supervisory authority.
Under the Philippines PDPA: Rights of access, correction, erasure or blocking, data portability, and the right to be informed and to object.
Under the Saudi Arabia PDPL: Rights of access, correction, erasure, and restriction of processing, and the right to object to processing.
To exercise any of these rights, email legal@workodinllc.com. We will respond within 30 days.
Identity verification is required before any payout is released. KYC is processed by PayOdin and third-party verification providers. KYC data is used solely for verification and compliance purposes and is never used for marketing.
Payment card data is processed by Stripe. No full card numbers are stored by PayOdin (PCI-DSS tokenization is used). Bank account details for payouts are encrypted at rest.
We implement role-based access controls, encryption in transit and at rest, and continuous logging and monitoring. In the event of a data breach, we will notify the relevant supervisory authorities within 72 hours.
The Platform is restricted to adults aged 18 and over. We do not knowingly collect personal data from minors. If we become aware that we have collected personal data from a child, we will delete it promptly.
We will provide at least 30 days' notice of material changes by email or through the Platform. Your continued use of the Platform after the effective date of an updated policy constitutes acceptance of the changes.
Workodin LLC
16192 Coastal Highway, Lewes, Delaware 19958
Email: legal@workodinllc.com
No automated decision-making with legal or similarly significant effects is applied to your personal data without human review. Transfers to Stripe and Mercury in the United States are governed by Standard Contractual Clauses (SCCs). Article 28 Data Processing Agreements are in place with Stripe and Mercury.
The National Privacy Commission (NPC) serves as the supervisory authority for data subjects in the Philippines. Cross-border transfers are subject to accountability requirements under the PDPA.
The Saudi Data and Artificial Intelligence Authority (SDAIA) serves as the supervisory authority for data subjects in Saudi Arabia. Heightened safeguards apply to sensitive personal data under the PDPL.
This Privacy Policy is incorporated into the Terms of Service. Where a conflict exists between this policy and the Terms of Service regarding the processing of Personal Data, this Privacy Policy controls.