Privacy Policy

Kazii is an AI-powered job application platform built to make job searching less painful. We're currently based in South Africa and our service is focused on the South African job market, with expansion to other African markets planned.

When this policy refers to "Kazii", "we", "us" or "our", it means the Kazii platform and the people who run it.

For any privacy-related questions, reach us at privacy@kazii.io.

We collect only the information needed to do the job — literally.

Information you give us directly

• Account details — your name, email address, and password when you sign up.
• Profile information — phone number, city, LinkedIn URL, years of experience, highest qualification, salary expectations.
• Your CV — we parse it to extract your work history, skills, and qualifications. The original file is stored securely.
• Job search preferences — job titles you're looking for, location, salary range, industries, excluded companies, preferred application methods.
• Work history — job titles, employers, dates, and descriptions you add manually or that we extract from your CV.
• Skills — a list of skills associated with your profile.

Information we generate on your behalf

• Application history — a record of every job we've applied to for you, including the date, method, and current status.
• Match scores — an AI-generated score and reasoning for how well each job fits your profile.

Information collected automatically

• Usage data — pages visited, features used, and general interaction patterns. Used to improve the product.
• Cookies — session cookies to keep you logged in. See Section 8 for details.

Your data is used for one core purpose: getting you more interviews.

• Automating job applications — filling out application forms on your behalf using your profile data and CV.
• Matching you to jobs — scoring job listings against your profile so we only apply to roles that are a genuine fit.
• Sending you notifications — emailing you when we've applied to a job or found new matches (maximum one digest email per day).
• Improving the service — analysing usage patterns (in aggregate, not individually) to make Kazii better.
• Legal compliance — retaining records as required by applicable law.

We do not sell your data. We do not use your data for advertising. We do not share your information with employers unless you explicitly instruct us to apply to their job.

For users in South Africa, Kazii operates in compliance with the Protection of Personal Information Act, 2013 (POPIA).

Under POPIA, we commit to:

• Lawful processing — we only process your data with your consent or where another lawful basis applies.
• Purpose limitation — we collect data for specific, defined purposes and don't repurpose it without telling you.
• Minimisation — we only collect what's necessary.
• Data quality — you can update or correct your information at any time in your profile settings.
• Openness — this policy explains what we collect and why.
• Security safeguards — we take reasonable steps to protect your data from unauthorised access.
• Data subject participation — you have the right to access, correct, and request deletion of your data.

As Kazii expands to other African markets, we will comply with the applicable data protection laws in those jurisdictions. For example, users in Kenya are protected by the Kenya Data Protection Act 2019, users in Nigeria by the Nigeria Data Protection Regulation, and so on. If you're accessing Kazii from outside South Africa, please contact us if you have questions about how your local laws apply.

You can lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za if you believe your rights have been infringed.

• Account data — retained for as long as you have an active account.
• CV and profile data — retained until you delete it or close your account.
• Application history — retained for 24 months after each application to allow you to track outcomes. You can delete individual records from your dashboard.
• Notification logs — retained for 90 days to prevent duplicate emails.
• After account closure — we delete your personal data within 30 days. Aggregated, anonymised usage statistics may be retained indefinitely.

You have the following rights over your personal data:

• Access — request a copy of all personal data we hold about you.
• Correction — update or correct any inaccurate information in your profile settings, or ask us to do it.
• Deletion — ask us to delete your account and all associated data. We'll process this within 30 days.
• Objection — object to a specific type of processing.
• Portability — request your data in a portable format (JSON or CSV).
• Withdrawal of consent — you can turn off auto-apply in your settings at any time, which stops us submitting new applications on your behalf.

To exercise any of these rights, email privacy@kazii.io with your registered email address. We'll respond within 5 business days.

Kazii is built on a small number of trusted third-party services. Each receives only the data necessary to perform their function.

We do not share your data with any other third parties. We do not use advertising networks, analytics trackers, or social media pixels.

We use a minimal set of cookies:

• Session cookie — keeps you logged in during your browser session. Deleted when you close your browser or log out. Strictly necessary; cannot be disabled.
• Auth token — a secure, HTTP-only cookie used to verify your identity on each request. No tracking or advertising information is stored in this cookie.

We do not use advertising cookies, third-party tracking cookies, or analytics cookies. You will never see a cookie consent banner on Kazii because we don't set any cookies that require consent.

We take reasonable and appropriate measures to protect your data:

• All data is encrypted in transit using TLS 1.2+.
• Passwords are never stored — authentication is handled via Supabase Auth using industry-standard hashing.
• CV files are stored in a private Supabase Storage bucket — not publicly accessible.
• Database access is restricted to Kazii's own services via row-level security policies.

No system is 100% secure. If you discover a vulnerability, please report it responsibly to privacy@kazii.io.

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top and, if the changes are significant, send you an email notification. Continuing to use Kazii after a policy update means you accept the revised terms.

For anything privacy-related: