Waaholi Privacy Policy

Last updated: 19 October 2026

1. Who we are

Waaholi (the "Service") is operated by Kloobel Limited, a company incorporated in Hong Kong with registration number 79524275 ("Waaholi", "we", "us"). We are the data controller for personal data processed through the Service. Contact: support@waaholi.com, Unit 2904-05, 29/F, Universal Trade Centre, No.3 Arbuthnot Road, Central, Hong Kong.

This policy explains what personal data we collect, why, who we share it with, and the choices you have. It applies to visitors and account holders. We handle personal data in line with Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486) and, where they apply to you, other privacy laws such as the GDPR/UK GDPR and Japan's APPI.

2. What we collect

Information you give us

• Account details: your email address and a password (stored only as a salted hash), or your Google account identifier, name, and email if you sign in with Google.
• Subscription details: your plan, billing status, and payment history. Card details are collected and held by Stripe, not by us. Stripe also uses your billing country or address to calculate tax.
• Your activity settings: bookmarks, saved searches (filters such as place, keywords, posted within, compensation, duration, work eligibility, housing), and alert preferences. Filters such as work eligibility (for example visa sponsorship or work-rights requirements) and housing can reflect personal circumstances. We use them only to run your searches and alerts, and we never sell them or share them with employers.
• Messages and requests: anything you send us by email or through forms, including source requests.

Information collected automatically

• Approximate location from your IP address. When you open Browse, we infer an approximate place (city, region, or country) from your IP address to pre-fill the Place filter. For signed-in accounts, we also keep a copy of that inferred place on your account. We do not collect precise GPS location. You can clear or change the Place filter at any time. For this feature we store only the derived place, not your IP address.
• Technical data: IP address, browser and device type, pages viewed, filter state in the URL, and timestamps, in server logs for security, debugging, and abuse prevention, and in product analytics to understand how features are used.
• Cookies and similar technologies: see section 7.

Information about listings (not about you)

We crawl allowlisted employer and event hiring pages and store listing content such as job titles, employer names, places, pay, and descriptions. This is business information about opportunities. It may occasionally include a contact name or email that an employer chose to publish in a posting. We use it only to present and link to the listing.

3. How we use your information and why

We do not use your data to make decisions that have legal effects on you based solely on automated processing. We do not sell your personal data, and we do not share it for third-party advertising.

4. Marketing emails

Alert digests are part of your paid service and you can switch them off per saved search or pause them all in Settings. We do not currently send promotional email. If that changes, we will do so only with your consent, and every such email will include an unsubscribe link.

5. Who we share data with

We share personal data only with service providers that help us run the Service, under contracts that limit how they can use it:

• Payments: Stripe (subscriptions, billing, fraud checks).
• Authentication: Google, if you choose Sign in with Google.
• Hosting and database: Vercel (website hosting) and Convex (database) for storing account data and serving the site.
• Email delivery: Amazon SES for alert digests and service emails.
• IP geolocation: Vercel (approximate place derived from your request) to infer an approximate place.
• Analytics and error monitoring: PostHog to understand how the Service is used and to fix problems.

We use AI services (for example through OpenRouter) to read and structure crawled listing content. That processing is about listings, not about your account or personal data.

We may also disclose data where required by law, court order, or to protect rights, safety, and the security of the Service, and to a successor if our business is sold or restructured, subject to this policy.

6. International transfers

Our providers may process data in countries other than where you live, including the United States and other regions. Where required, we rely on appropriate safeguards such as contractual protections. By using the Service you understand your data may be processed outside your country. Our hosting, database, and email services are located in the United States (US East).

7. Cookies and similar technologies

A cookie is a small file a website stores in your browser. We use essential cookies and similar storage needed to run the Service, such as keeping you signed in and remembering security and filter state. These do not require consent. We also use product analytics, described below.

We do not use advertising cookies or cross-site tracking, and we do not load third-party marketing pixels. Our product analytics may set cookies or use browser storage to recognise a browser between visits. Where the law requires consent, such as in the EU and UK, we will ask before setting non-essential analytics cookies.

Please note that looking up your approximate location from your IP address is not a cookie. It happens on our servers when you load a page, and we treat the result as personal data as described in section 2.

You can block or delete cookies in your browser settings, but the Service may not work properly without essential ones.

8. How long we keep data

• Account data, bookmarks, and saved searches: while your account is open. If your subscription lapses, we keep saved searches and bookmarks so you can resume later, until you delete your account.
• Billing records: as long as needed for tax, accounting, and legal purposes (typically up to seven years in Hong Kong).
• Server logs and technical data: kept for a limited period, typically up to 90 days.
• Inferred place on your account: until you delete your account or we remove the feature.

When we no longer need data, we delete or anonymize it.

9. Your rights and choices

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct inaccurate data;
• delete your data or close your account;
• object to or restrict certain processing, and withdraw consent where we rely on it;
• receive your data in a portable format;
• opt out of direct marketing at any time;
• complain to your local privacy regulator. In Hong Kong this is the Office of the Privacy Commissioner for Personal Data.

To exercise a right, email support@waaholi.com. We may need to verify your identity, and we will respond within the time required by applicable law (for example 40 days under the Hong Kong PDPO). You can also delete your account in Settings. Deleting your account will cancel any active subscription going forward; it does not refund past payments, per our Terms.

10. Security

We use reasonable technical and organizational measures to protect personal data, including encrypted connections, hashed passwords, and access controls. No system is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your data, we will notify you and authorities as required by law.

11. Children

The Service is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.

12. Third-party sites

Apply links take you to employer or host websites we do not control. Their privacy practices apply once you leave Waaholi. Read their policies before sharing personal information with them.

13. Listings that mention you

If you are named in a crawled listing and want it corrected or removed, email support@waaholi.com with the listing link. We will review and act on reasonable requests.

14. Changes to this policy

We may update this policy. For material changes we will notify you by email or in the Service before they take effect. The "Last updated" date above shows the latest version.

15. Contact

Kloobel Limited, Unit 2904-05, 29/F, Universal Trade Centre, No.3 Arbuthnot Road, Central, Hong Kong

Privacy enquiries: support@waaholi.com