Privacy Policy
Last updated: 1 May 2026
This policy explains how Ubuntu AI Jobs processes your personal information in line with South Africa's Protection of Personal Information Act, 2013 (POPIA).
1. Responsible party
Ubuntu AI Jobs (Pty) Ltd, Cape Town, South Africa. Information Officer: privacy@ubuntuaijobs.co.za.
2. What we collect
- Account info: name, email, phone (optional), password hash.
- Profile info: CV details, work history, skills, location, desired role and salary.
- Application data: jobs you applied to, cover letters, match scores.
- Usage data: log-in times, AI feature usage counts, IP address, device type.
- Payment data: handled by our PCI-compliant payment processor — we never store full card numbers.
3. Why we process it (lawful basis)
- Contractual necessity: matching you to jobs, processing applications, billing.
- Legitimate interest: fraud prevention, service improvement, anonymised analytics.
- Consent: marketing emails (opt-in only), cookies beyond strictly necessary.
4. Who we share with
- Employers — only when you apply to their job, and only the data you've chosen to share.
- Payment processor — for subscription billing.
- AI provider — anonymised prompt content only; your inputs are never used to train third-party models.
- Hosting provider — encrypted at rest and in transit.
We never sell, rent or trade your personal information for marketing.
5. International transfers
Some of our processors operate outside South Africa. We use providers that offer comparable POPIA-level protection, with standard contractual clauses where required.
6. Retention
Active accounts: retained while in use. Closed accounts: deleted within 90 days, except where law requires longer retention (e.g. tax records — 5 years).
7. Your rights under POPIA
You may at any time:
- Access the personal information we hold about you.
- Correct inaccuracies.
- Request deletion ("right to be forgotten") subject to legal retention.
- Object to processing for direct marketing.
- Lodge a complaint with the Information Regulator (inforegulator.org.za).
To exercise any right, email privacy@ubuntuaijobs.co.za.
8. Security
TLS 1.2+ in transit, AES-256 at rest, role-based access, row-level security on every database table, regular penetration testing, and daily encrypted backups.
9. Cookies
We use strictly necessary cookies for sign-in. Analytics cookies are opt-in via the consent banner.
10. Changes
We will notify you by email at least 14 days before material changes take effect.