Privacy Policy

Account Information

• Full name and email address
• Organization name and role
• Authentication credentials (hashed, never plain text)
• Multi-factor authentication device identifiers

Candidate Data (Processed on Behalf of Organizations)

• CVs/resumes (PDF, DOCX, TXT)
• Candidate names and contact details
• AI-generated scores and extracted skills
• Pipeline status (shortlisted, interviewed, hired, rejected)

Usage Data

• Audit logs of platform actions
• Login timestamps and sessions
• Feature usage for service improvement

• Provide and maintain the Ajirii platform
• Process CVs using AI-powered extraction and scoring
• Send transactional emails (verification, password resets, invitations)
• Generate analytics and insights for your organization
• Enforce security measures and detect abuse
• Comply with legal obligations

• AI extracts text from documents (Amazon Textract OCR)
• Skills and qualifications identified from job descriptions (Amazon Bedrock)
• Candidates scored against requirements — advisory only
• No candidate data is used to train AI models
• All AI processing within AWS EU infrastructure (eu-west-1)
• Final hiring decisions remain with human recruiters

• Hosted on AWS in the EU (Ireland, eu-west-1)
• Encryption at rest: AES-256
• Encryption in transit: TLS 1.2+
• JWT-based authentication with token revocation
• Role-based access control (RBAC)
• Immutable audit logs for accountability
• S3 bucket encryption with blocked public access

• Account data: retained while account is active
• Candidate CVs: per organization retention policy (default 12 months)
• Audit logs: retained indefinitely for compliance
• Deleted data: permanently removed within 30 days
• Closed job data: moves to cold storage after 180 days

Under the Kenya Data Protection Act 2019 and GDPR:

• Access — request a copy of your personal data
• Rectification — correct inaccurate data
• Erasure — request deletion (right to be forgotten)
• Restriction — limit how we process your data
• Portability — receive data in machine-readable format
• Objection — object to processing based on legitimate interests