Privacy Policy

1. What information we collect

• Account information: name, email address, password (hashed), and role when you register.
• Profile information: location, skills, work experience, education, availability, salary expectations, certifications, and profile photo if provided.
• Application data: job applications, cover letters, assessment answers, and application status history.
• Employer data: company name, industry, location, verification status, and job postings.
• Quick Task data: task descriptions, location, budget, tasker assignments, and completion status.
• Career Support data: eligibility interest records, skills assessments, and funding applications.
• Communication data: messages sent between candidates and employers through the platform.
• Website analytics: page paths, titles, referrer paths, interaction labels, and job-view/application events are collected automatically to improve the platform. Analytics omit search terms, full URL query strings, and raw IP addresses from stored event metadata; obvious email addresses and Kenyan phone numbers in interaction labels are redacted. Hosting and network providers may process connection data when delivering requests. Historical analytics records collected before these safeguards may contain additional fields. Operational records needed to provide account, job, and application features may be processed separately.
• Device and browser information as required for security logging.

2. How we use information

• To operate your account and provide platform features.
• To match candidates with relevant job opportunities and Quick Tasks.
• To allow employers and recruiters to review applications for their job postings.
• To process Career Support eligibility assessments and funding interest.
• To send notifications about application status, messages, and platform activity.
• To improve matching quality, platform performance, and user experience.
• To detect and prevent fraud, abuse, and security incidents.
• To comply with applicable laws and respond to legal requests.

3. How information is shared

• Your profile information is shared with employers and recruiters when you apply to their job postings.
• Employer-posted jobs are publicly visible to all platform users.
• Quick Task details are visible to eligible taskers in the relevant category and location.
• We do not sell your personal data to third parties.
• We may share data with service providers (hosting, analytics, email delivery) under data processing agreements.
• We may disclose data if required by law, court order, or to protect platform safety.

4. Employer and recruiter access

• Employers can only view applications submitted for their own job postings.
• Recruiters are scoped to the employer workspace they are assigned to.
• Employers cannot access the profiles of candidates who have not applied to their jobs.
• Admin access is reserved for platform operations, support, and safety enforcement.

5. Data retention

• Account data is retained for as long as your account is active.
• Application data is retained for a minimum of 24 months for audit and dispute purposes.
• An automated analytics retention and deletion schedule has not yet been configured. Historical analytics records may remain in storage until an approved retention policy is applied.
• You may request deletion of your account and associated data through the help centre.

6. Security

• Passwords are never stored in plain text, they are hashed by Supabase Auth.
• Service-role database keys are never exposed to browser code.
• Row Level Security (RLS) is enforced at the database level to prevent unauthorized data access.
• Rate limiting is applied to sensitive API routes to prevent abuse.
• We conduct regular security reviews of authentication, authorization, and data access patterns.

7. Your rights

• Access: You can view most of your data through your dashboard.
• Update: You can update profile information through the dashboard.
• Deletion: You may request deletion of your account by contacting support.
• Export: Data export requests can be submitted through the help centre.
• Opt-out: You may opt out of non-essential communications in account settings.

8. Cookies and tracking

Kaziin uses cookies required for authentication and temporary first-party session storage for analytics session identifiers. First-party website analytics are collected automatically without third-party advertising cookies or cross-site ad tracking.

9. Children

Kaziin is not intended for users under 18 years of age. We do not knowingly collect information from minors.

10. Changes to this policy

We may update this Privacy Policy as the platform evolves. Material changes will be communicated through the platform or by email. This policy should be reviewed by qualified legal counsel before broad public launch.

11. Contact

For privacy questions, data requests, or concerns, contact us through the Kaziin Help Centre. Formal data protection inquiries can be directed to legal@kaziin.com.