In short: we use your information to run a job platform. Employers see your CV and profile only when you apply to them, or your profile (without your CV or contact details) if you choose to be found. We don't sell personal information and we don't show ads. On our public website we use analytics cookies only if you accept them, and never inside your account.
Who we are
KaziLink is a job platform for East Africa, run by AfriSky Connect Limited, a company registered in Uganda ("we", "us", "our"). We are responsible for the personal information described in this policy, which makes us the data controller under Uganda's Data Protection and Privacy Act, 2019 and, where they apply to you, other data protection laws such as Kenya's Data Protection Act, 2019, Tanzania's Personal Data Protection Act, 2022 and Rwanda's Law No. 058/2021 relating to the protection of personal data and privacy.
Employers and recruitment agencies who receive your application decide for themselves how they use it in their hiring. For that use they are responsible for your information alongside us, under their own privacy notices.
You can reach us about anything in this policy at [email protected].
Information we collect
If you're a job seeker
- Account: your name, email address, password (stored only as a secure hash) and, if you add it, your phone number.
- Profile: headline, summary, where you live, the countries and cities you'd like to work in, whether you're open to remote work or relocation, work authorisation and sponsorship needs, expected salary, skills, languages, preferred roles, years of experience, work history and education. Nationality is optional and is never used for matching.
- CV and photo: the CV files you upload (PDF or Word) and, if you add one, a profile photo. Photos are re-saved when uploaded, which removes hidden location data from the file. We record each file's name, type and size.
- What we read from your CV: when you upload a CV, we read it to fill in your profile and keep the result so you can check and correct it. We don't keep a separate copy of the CV's text.
- Applications: the jobs you apply to, your answers to the employer's questions, any cover note, the CV you sent, a copy of your profile as it was when you applied, and each application's progress, including when the employer first opened it.
- Other activity: saved jobs, CV check results, KaziApply picks, and the results of tools you use, such as the profile coach.
If you hire on KaziLink
- Account: your name, work email, password hash and phone number.
- Organisation: the organisation's name, type, industry, location, website, logo, photos and the profile details you add.
- Hiring activity: the jobs you post, the candidates you view, invite, move through your pipeline or interview, your private notes and interview details, and messages you send to candidates through status updates.
- Integrations: the API keys you create (stored only as a hash) and any webhook address you set.
- Support requests: the messages you send us, with your name and email address.
If you visit the site, subscribe or report a job
- Newsletter: your email address, when you confirmed and unsubscribed, and the IP address you signed up from (to show the subscription was genuine).
- Plan updates: your email address, if you ask us to tell you when a paid plan becomes available.
- Job reports: the reason and details you give. If you're signed in, we link the report to your account.
Collected automatically
- Security and sign-in records: your IP address and browser details when you sign in, and a log of important account actions, such as sign-ins, password and email changes, applications and settings changes.
- Emails we send you: a copy of each email, so we can confirm it was sent and help if it didn't arrive.
- Server logs: our servers record requests (including IP addresses) to keep the service running and to detect abuse.
- Usage: the days you use your account while signed in, so we can see how many people come back and improve the service; and anonymous daily totals of job searches and job page views, which aren't linked to anyone.
Website analytics: on our public website, and only if you accept analytics cookies, we use Google Analytics and Microsoft Clarity to understand how the website is used, such as which pages people visit, how they found us, and where people click and scroll so we can see where a page is hard to use. They don't run inside job seeker, employer or admin accounts, or on sign-in pages. We don't send them your name, email, CV or account details, we remove anything in a web address that could contain an email or a link code, and Clarity hides what you type into forms. Google and Microsoft process this information under their own privacy policies: Google Privacy Policy and Microsoft Privacy Statement. You can change your choice at any time with Cookie settings.
We don't use advertising or social media tracking tools.
How we use your information
We use personal information only for these purposes, each with a lawful basis:
| Purpose | Lawful basis |
|---|---|
| Creating and running your account, letting you apply for jobs, post jobs and manage applications | Performing our agreement with you (the terms and conditions) |
| Sending your application, with your CV and profile, to the employer you apply to | Performing our agreement with you, at your request |
| Showing your profile in talent search | Your consent (you switch on "open to employers") |
| Sending your CV to an AI service to fill in your profile | Your consent (you switch on AI processing) |
| Recommending jobs, scoring how well a job fits you, and the newsletter | Our legitimate interest in a useful service; your consent for the newsletter |
| Measuring how the service is used (the days accounts are active, totals of searches and job views) to improve it | Our legitimate interest in improving the service |
| Keeping accounts secure, preventing fraud, fake jobs and requests for money, and enforcing our terms | Our legitimate interest in a safe platform, and our legal obligations |
| Service emails, such as sign-in codes, application updates and security alerts | Performing our agreement with you |
| Keeping records required by law and handling legal claims | Our legal obligations and legitimate interests |
We don't sell personal information, rent it out or use it for advertising.
AI features
Some features use an AI model provided by Anthropic, PBC. We send only what each feature needs, and Anthropic's commercial terms don't allow it to use this data to train its models.
- Reading your CV with AI: only if you switch on AI processing in your privacy settings. Otherwise our own software on our servers reads your CV. You can switch it off at any time.
- AI CV check: also only with your AI consent. Email addresses and phone numbers are removed from the CV text first.
- Tools you choose to use: the AI cover note writer, the profile coach and the interview coach send the information needed for the task you asked for (for example your headline, summary, skills and the job) when you use them.
- Employer AI tools: if an employer uses AI shortlisting or sourcing, the AI sees applicants under codes such as "c1" and "c2" with their skills, years of experience, job titles and qualifications only. Names, contact details and CV files are never sent.
- AI job search: sends the words you type in the search box.
Matching and automated decisions
KaziLink shows a relevance score of 0 to 100 and an eligibility label (for example "meets requirements" or "needs confirmation") to help match people and jobs. Both are worked out from the job's requirements and your profile, such as skills, experience, location and work authorisation. Nationality, age, gender, photos and names are never used.
These are guides, not decisions. KaziLink never rejects anyone automatically: every hiring decision is made by a person at the employer. If you think a score or label is wrong, update your profile or contact us.
International transfers
Some of our providers store or process information outside your country, including in the European Union and the United States (Anthropic is based in the United States). When we transfer personal information abroad, we do so only to providers with adequate safeguards, under contracts that require them to protect it to the standard of the data protection laws that apply to you.
How long we keep information
- Your account and profile are kept while your account is open.
- When your account is deleted, your profile, CV files, photo, work history, saved jobs and sign-in data are erased. When you ask us to delete your account, you're removed straight away from the jobs you applied to, and the employers aren't told. If you cancel the request, those applications don't come back.
- Security records, emails we've sent and records of reports are kept for as long as we need them to keep the platform secure, investigate fraud and meet our legal obligations, after which they're deleted.
- Newsletter: until you unsubscribe. Every newsletter email has an unsubscribe link.
- Organisations: jobs and hiring records are kept while the organisation's account is open. When a recruiter's account is deleted, the organisation's live jobs are closed.
How we protect your information
We protect personal information with technical and organisational measures, including:
- encrypted connections (HTTPS) and passwords stored only as strong one-way hashes;
- optional two-step sign-in with an authenticator app or a passkey, required for our staff;
- database rules that let each person see only what their role allows, so an employer can see only applications to their own organisation;
- CV files kept in private storage and opened only through short-lived links;
- limits on sign-in attempts, temporary account locks and records of important account actions.
No system is perfectly secure. If a data breach is likely to put your rights at risk, we'll tell you and the relevant authority as the law requires.
Your rights and choices
Subject to the law that applies to you, you have the right to:
- access the personal information we hold about you and get a copy of it;
- correct information that's wrong or incomplete (you can edit most of it yourself in your profile and settings);
- delete your account and personal information (job seekers can ask from Settings; anyone can ask by email);
- object to or restrict how we use your information, including for matching;
- withdraw consent at any time, for example by switching off talent search or AI processing, or unsubscribing from the newsletter, without affecting what we did before;
- receive your information in a portable format where the law gives you that right.
To use any of these rights, email [email protected] from the address on your account. We may ask you to confirm your identity. We'll reply within 30 days.
Children
KaziLink is for people aged 18 and over. We don't knowingly collect information from anyone younger. If you believe someone under 18 has created an account, tell us and we'll delete it.
Changes to this policy
We may update this policy when our service or the law changes. We'll change the date at the top and, if the changes are significant, tell account holders by email before they take effect.
Contact us and complaints
For questions or requests about your personal information, contact AfriSky Connect Limited at [email protected]. We'll try to resolve any concern you raise.
You also have the right to complain to the data protection authority in your country: in Uganda, the Personal Data Protection Office; in Kenya, the Office of the Data Protection Commissioner; in Tanzania, the Personal Data Protection Commission; in Rwanda, the National Cyber Security Authority.