Privacy Notice

Effective 12 October 2026 · Last updated 14 October 2026.

N3Pass helps students and professionals keep career records, request external verification, prepare résumés and apply to organizations. This notice explains the current service, including names, member listings and sponsored content. A privacy notice does not replace the separate choices shown when you share information.

Who handles your information

Operator: Registruum Technologies Inc.
Privacy and support contact: [email protected]

Our founder and purpose

N3Pass is led by Ruzyl Earl Cabarles, Founder and CEO of Registruum Technologies Inc. His aim is to expand fair access to opportunity around the world—not only for those who already excel, but also for people working toward their future and growth.

You do not have to be outstanding today to build a meaningful future. Keep learning, gaining experience and recording your achievements. Each honest step can become part of the foundation of your future career.

Information we handle and why

• Account information: sign-in identity and email supplied through Google and our authentication service, used to create, secure and maintain your account.
• Your records: profile details, education, experiences, achievements, credentials, selected supporting files and links, and résumés, used to provide your private workspace and the sharing you request.
• Applications: the information and résumé you select, application status, sharing permissions and related history, used to deliver your application to the relevant organization.
• Verification: recipient first and family name, email, relationship, selected record and evidence; the verifier’s response, name, email, optional phone, remarks and timestamps. These support invitations, exact-record confirmations, audit history and abuse prevention.
• Technical information: necessary authentication storage, app caching and service/security logs used by the platform and its providers to operate and protect the service. Demo records are stored on your device.

Who can see names and other details

Your member profile starts private. An organization receives only information selected for its application. Selecting a résumé shares the entire chosen document. Your name may be visible in a selected application, verification invitation or an optional directory listing.

The signed-in member directory is optional. Joining shares only the display name, headline and introduction you approve with other signed-in members. It does not open your full profile, contact details or private records. Home shows combined account, record and verification-request counts, without identifying the people behind those totals.

A verifier receives your name and the selected record’s title, organization, dates and description in the invitation email. Email copies may be retained or forwarded and cannot be recalled when the seven-day review link expires. Supporting evidence you explicitly include is available on the secure review page. The member can see the verifier’s name, decision, remarks and response date. An organization reviewing a selected exact-version record can see its current confirmation name and date. Verifier email and phone are private; employer access to these contact details is not available in the current release. The optional follow-up permission does not authorize advertising or AI contact.

Public opportunity listings and search

Organizations may request public visibility for a published opportunity. After review, its title, description, requirements, organization name, location and dates may appear on public pages and in search results. Existing listings are not automatically made public. Do not put private applicant information or personal contact details into these descriptions. Withdrawing public visibility removes the listing from the public feed; search-engine copies may take time to update.

Member profile-sharing links contain only selected information, expire after seven days and may be revoked. External summary and detailed links can be opened by anyone holding the link; connected application links require authorization. Private sharing pages are marked noindex and excluded from the sitemap, but recipients can still copy information. Verifier email and phone remain excluded.

Service providers and external recipients

N3Pass uses Supabase for accounts, database and file storage, Cloudflare for hosting, Google for sign-in, and Resend for verification email. These services process information necessary for their functions and may process it outside your country. Verification recipients receive the invitation and selected material; organizations receive the applications directed to them. External websites, advertisers and organizations have their own practices when you visit or contact them.

Private schedules and Google Calendar

Schedules are stored in your private N3Pass account and are not included in applications or member listings. Choosing Add to Google Calendar sends that selected event’s title, description, location, dates, timezone and repeat settings to Google through the calendar link. Review the event and its reminder, then save it in Google. The link may remain in your browser history. Google copies are separate: editing or deleting an N3Pass schedule does not change an existing Google copy. Calendar reminders depend on your Google notification settings. Direct account syncing is not enabled in this release.

Ads, sponsors, promotions and freebies

N3Pass may display organization names, sponsor names, advertisements, events, promotions and offers. Sponsored placements must be identified as such. Displaying a name or offer does not verify it or promise a benefit. The current release does not provide advertisers with your private profile or verifier contact details for targeting. Directory participation or submitting a verification is not consent to marketing. Any future personalized advertising or additional sharing will require an updated notice and an appropriate separate choice where required.

Optional organization AI summaries

With your separate permission on an application, its organization may ask Cloudflare Workers AI to summarize selected career text and shared education, skills, headline and introduction against relevant criteria. Dedicated name/contact fields, verifier contacts, private files, resume attachments and unselected records are excluded. Selected free text may still contain identifying details; review your selection before consenting. Processing may occur outside your country. Cloudflare states it does not use this content to train models without consent.

AI can make mistakes. Reviewers must check the source records and make their own decisions; a summary is not verification, a ranking or a hiring recommendation. Summaries are cached with application and consent versions to reduce repeat processing. Revoking AI permission or withdrawing the application stops new authorized access to summaries, but does not recall copies already retained by a recipient. Revocation does not automatically erase stored audit history; contact us for deletion or retention questions. The pilot has daily limits and may be unavailable. Member AI drafting and AI contact with verifiers remain disabled. Verification consent does not authorize AI processing, surveillance or marketing.

Planned public support and merchandise

A Support N3Pass area is being prepared for the public landing page. Payments and supporter uploads are not open yet. The planned flow offers private contributions or optional public recognition. Only an explicitly approved display name and photo or organization logo would appear publicly; payment details and private contact information would not be displayed. A photo would be used for recognition, not facial recognition or identity verification. Before launch, we will explain Stripe payment processing, upload review, retention, removal requests and the information needed to fulfill merchandise orders. Supporting N3Pass will not grant access to private member profiles.

Your choices, retention and requests

You can edit your profile and education, remove your directory listing, select information for each application, and withdraw an application. Changing a verified record ends its current confirmation. Withdrawing an application or removing a résumé stops new access; previously issued file links may last up to one minute, and copies already downloaded by a recipient cannot be recalled.

All account types can request deletion from Account settings in the member or organization workspace, or through our account deletion request page. The server records the request and an earliest processing date at least 30 days later. Pending requests can be cancelled; signing in does not cancel them. Existing sharing remains active unless separately withdrawn. Deletion is support-managed, not an automatic day-30 purge. A request includes the sign-in account, its personal records and owned organizations; applicants retain their own accounts. Support will resolve any ownership-transfer issue before closing an organization.

Verification-link expiry does not erase response history. Any retention exception for a specific legal obligation, security investigation or dispute must be explained with its applicable period when handling the request. Contact the operator for access, correction, export, consent withdrawal or a concern. Self-service data export is not yet available. Do not submit someone else’s sensitive information without authority. Young users should involve a parent or guardian where required; schools and parents do not automatically receive access to a member’s account.

Protecting people while improving N3Pass

The company may use information necessary to investigate reported misuse, secure accounts, prevent verification fraud, resolve disputes and meet applicable obligations. Access should be limited to authorized people and service providers who need it for the stated task. Product improvement should use aggregate or de-identified information where possible; identifying records must not be repurposed merely because a new feature could benefit the business. A new purpose needs an appropriate legal basis, clear notice and any required consent.

N3Pass should retain personal information only while needed for its stated purpose, a legitimate and documented operational need, legal claims or applicable obligations. The lack of an automatic deletion tool does not justify indefinite retention. Retention periods and manual request handling remain operational matters the company must maintain and review. This notice does not claim that every future privacy or security feature is already implemented.

Updates and privacy rights

Material changes will be reflected in this notice. New optional purposes will not be treated as authorized merely because you used the service before. Where Philippine data-protection law applies, information about rights and complaints is available from the National Privacy Commission. This notice does not remove rights provided by applicable law.