Privacy Policy

1. Information We Collect

We collect various types of personal information to provide our job board services effectively:

2. Purpose of Processing

We process your information for the following purposes:

• To facilitate the recruitment process by connecting job seekers with employers.
• To manage user accounts and provide access to platform features.
• To process payments for subscription plans via PayFast (South African payment gateway).
• To send job alerts, marketing communications, and platform updates (with your consent).
• To generate aggregated analytics and reports on recruitment trends and demographics for B-BBEE / Employment Equity reporting (counts only; not per-candidate drill-down).
• To comply with legal and regulatory obligations, including POPIA and B-BBEE reporting.

3. Sharing of Information

We do not sell your personal information. We share your data only with:

• Employers/Recruiters: When you apply for a job or make your profile public.
• Service Providers: Operators who host or process data on our behalf, including PayFast (payments, South Africa), Oracle Cloud (object storage), Supabase (authentication and database), Resend (transactional email), Cloudflare (CDN and security), PostHog and Google Analytics (product analytics, only with your cookie consent), and Google (calendar/meetings when you connect them).
• Legal Authorities: When required by law or to protect our legal rights.

4. Data Security

We implement industry-standard security measures, including AES-256-GCM encryption for sensitive documents and secure server environments. Payment information is handled entirely by PayFast, and no credit card data is stored on our servers.

5. Your Rights (POPIA & GDPR)

You have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal information we hold about you. Signed-in job seekers can download a machine-readable copy from Profile → Data Subject Rights. Self-serve exports include the most recent records up to these caps: 500 applications, 100 conversations, 500 messages, 200 attachments, 200 security events, 100 billing records, and 100 interview-feedback rows. Email [email protected] if you need a complete extract beyond those limits.
• Right to Correction: Update or correct inaccurate or incomplete information.
• Right to Deletion: Request the deletion of your personal information ("Right to be Forgotten").
• Right to Object: Object to the processing of your data for marketing or other purposes.
• Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise these rights, please contact our Information Officer at [email protected].

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with services. We may also retain information as required to comply with legal obligations, resolve disputes, and enforce our agreements.

7. Cross-border transfers (POPIA section 72)

Some operators process personal information outside the Republic of South Africa. We only transfer personal information where POPIA section 72 is met: the recipient is subject to a law, binding corporate rules, or a binding agreement that provides an adequate level of protection, or you consent to the transfer.