Privacy Policy
This policy explains what information ESL Whitelist Korea collects, how it is used, and when it may be shared.
1. Overview
This Privacy Policy explains how ESL Whitelist Korea collects, uses, stores, and shares information when you use our ESL jobs marketplace.
Our goal is to help teachers and academies connect through a more transparent hiring process while giving users control over their information.
2. Information We Collect
Depending on how you use the platform, we may collect:
- Account information, such as your name, email address, and account type
- Profile and resume information, including work history, qualifications, and documents
- Application and hiring activity, such as jobs viewed, saved, or applied to
- Academy reviews and replies, privately linked to the submitting account even though the public display is anonymous
- Moderation records, edit history, reports, correction requests, removal requests, and records needed to address abuse
- Communications and support records when you contact us
- Technical and usage data needed to secure, maintain, and improve the service
- Complain to Dubu confessions, generated replies, and limited abuse-prevention records, including a one-way HMAC hash derived from the request IP address
3. How We Use Information
We use information to:
- Provide, operate, and secure ESL Whitelist Korea
- Create and maintain your account and profile
- Process job applications and related hiring workflows
- Review submissions, manage ownership and edits, enforce content rules, investigate abuse, and respond to correction or removal requests
- Communicate with you about account, product, or support matters
- Analyze service performance and improve product quality
- Comply with legal obligations and enforce our terms
- Screen Complain to Dubu submissions, apply submission limits, support browser-authorized deletion, and conduct human moderation
4. Complain to Dubu privacy details
A Complain to Dubu exchange is public if the confession passes screening and Dubu's reply is generated, or a manager approves it. The public chat shows both message bodies and minute-level send times without a name, account, moderation label, or private metadata. Do not include personal information or identifying details.
- Cloudflare processes the Turnstile response and associated request data to check for automated abuse. Its processing is subject to Cloudflare's service terms and privacy practices. Cloudflare Turnstile Privacy Addendum
- OpenAI processes the confession to classify safety risks and prohibited targets, then generates Dubu's comedic reply for content that can publish. We request no-storage processing. We do not ask OpenAI to rewrite or translate the confession or use either message for marketing.
- We require the request IP address to enforce submission limits, but do not store or log the raw address for this feature. The server derives a keyed HMAC hash and stores only that hash in short-lived rate-limit records. Hashing limits exposure but does not make the record risk-free.
- The browser stores the private deletion token. The server stores only its SHA-256 digest. The token is not tied to an account and may be lost if browser storage is cleared. A person who obtains it can remove the corresponding confession and reply.
- Published exchanges remain until removed. Rejection or deletion erases both message bodies, and minimal audit tombstones expire after 90 days. Rate-limit records expire after their enforcement window. Deletion does not reverse the daily submission count already used.
- We do not use Complain to Dubu confessions or replies in advertisements, social posts, AI repackaging, or other off-platform marketing, even when an exchange is public.
4. Marketing and Reporting
- We may use aggregated review data for reporting or marketing only when it includes at least ten reviews across five unrelated places and does not expose a teacher, academy branch, or small identifiable group.
- We may use Public Content other than academy reviews and replies, including profiles, resumes, academy profiles, job listings, photos, and videos, in product demonstrations, screenshots, advertisements, and other marketing materials.
- We do not use academy reviews or replies in advertisements, social posts, AI repackaging, or other off-platform marketing unless the author separately opts in.
- We will not use private application materials, direct communications, identity documents, or content restricted to hiring participants for marketing.
- We will obtain explicit consent before presenting a user's content as a testimonial, endorsement, or success story.
- Users may withdraw permission for future marketing use by unpublishing the content or contacting support. Materials already produced or distributed may not be recalled.
5. When We Share Information
We do not sell personal information. We may share information:
- With academies or employers when you apply, publish relevant profile data, or opt in
- With service providers that help us host, secure, deliver, or support the platform
- With advertising measurement partners, including Meta, by sharing hashed contact identifiers and limited conversion events such as teacher signup or resume publication
- When required by law, legal process, or to protect rights, safety, and platform integrity
- In aggregated or de-identified form for analytics, reporting, or product improvement
6. Data Retention
We retain information for as long as needed to operate the platform, satisfy legal obligations, resolve disputes, and enforce our agreements.
If you close your account, we may retain limited records where necessary for compliance, fraud prevention, backup integrity, or legitimate business purposes.
Deleting a native review or reply removes its public body immediately. We retain only a private audit tombstone needed for abuse handling and accountability.
7. Your Choices
- You can update profile information in your account when those features are available
- You can edit or delete your native review or reply, report content, or contact us about a correction or removal request
- You can stop marketing email. Every newsletter includes an unsubscribe link, and the newsletter can also be turned off in your account settings. Contact us to withdraw other marketing permissions.
- You can contact us to request deletion or access inquiries, subject to applicable law
8. Security
We use reasonable technical and organizational safeguards to protect information. No system is completely secure, so we cannot guarantee absolute security.
9. International Use
ESL Whitelist Korea may use infrastructure and service providers that process information in more than one country. By using the service, you understand that information may be transferred and processed outside your home jurisdiction where permitted by law.
10. Policy Updates
We may update this Privacy Policy from time to time. If we make material changes, we will update the date below and may provide additional notice where appropriate.