Privacy Notice
At SapaFree, we are dedicated to safeguarding your personal data and ensuring complete transparency regarding how candidate profiles, resumes, and AI evaluations are processed.
Key Highlights
Candidate Controlled
Your CV is transmitted to hiring teams only when you explicitly submit an application.
Zero Data Selling
We never sell, rent, or trade your contact details or resume data to third-party advertisers.
Full Export & Deletion
You hold full statutory rights to export your history or permanently erase your account.
01Overview & Data Controller Information
This Privacy Notice outlines how SapaFree ("SapaFree," "we," "us," or "our") collects, processes, and protects your personal data when you visit our website, register an account, utilize our AI-powered resume matcher, or submit applications to employers.
SapaFree adheres to relevant global and regional privacy frameworks, including the Nigeria Data Protection Act (NDPA) / NDPR, the General Data Protection Regulation (GDPR), and South Africa's POPIA.
02Information We Collect
We collect personal information directly from your submissions as well as technical diagnostics generated through your usage:
A. Candidate Profile & Applications
Full name, email address, phone number, location, portfolio/GitHub/LinkedIn URLs, uploaded resume files (PDF, DOCX), employment history, education, and answers to job screening questions.
B. Employer & Recruiter Records
Corporate contact name, verified work email address, company name, corporate website, company logo, office locations, and job post details.
C. Technical & Diagnostic Data
IP address, browser type, device information, operating system, page response latency, and secure session tokens stored in browser cookies/local storage.
03How We Use Your Data
We process data strictly for legitimate operational and recruiting purposes:
- Delivering candidate applications and attached CV documents directly to prospective employers.
- Powering the AI Resume Matcher to evaluate technical skill alignment against job specs.
- Sending real-time notification alerts regarding application review, status changes, and interview invitations.
- Verifying employer corporate credentials and preventing spam or fraudulent listings.
04AI Resume Parsing & Automated Processing Transparency
When you upload a resume or utilize the AI Match tool, our natural language engine extracts text to assess technical keyword alignment, seniority indicators, and required skill sets against job descriptions.
AI Ethics & Transparency Statement
Our AI scoring models evaluate technical compatibility only. We never infer, score, or filter candidates based on sensitive attributes such as gender, age, race, religion, or ethnic origin.
05Data Sharing & Employer Access
SapaFree shares personal data only in the following contexts:
- Prospective Employers: When you submit an application, your full profile, resume, and answers are made available to that specific employer's hiring team.
- Infrastructure Sub-processors: Trusted cloud providers (Cloudinary for secure CV storage, MongoDB Atlas for encrypted database persistence, transactional email services).
- Legal Obligations: When mandated by court order or applicable regulatory bodies.
06Storage & Data Security
We implement rigorous technical safeguards:
- All network traffic is encrypted in transit via modern TLS / HTTPS.
- User passwords are protected with strong cryptographic hashing (bcrypt).
- Resume files are stored on access-restricted cloud storage with short-lived tokens.
- Database backups are encrypted at rest with multi-factor authentication for administrative access.
07Data Retention Policy
We retain your personal data for as long as your account remains active. If you delete your account, we permanently purge your profile, resumes, and logs within 30 calendar days, unless retention is mandated by law.
08Your Privacy Rights (NDPR, GDPR, POPIA)
You have comprehensive statutory rights regarding your personal data:
Right of Access
Request a copy of the personal data we store about you.
Right to Rectification
Update or correct inaccurate or incomplete profile records.
Right to Erasure
Request permanent deletion of your account and documents.
Right to Portability
Export your resume and application history in a structured format.
09Children’s Privacy
SapaFree is designed exclusively for working professionals and employers. We do not knowingly solicit or collect personal information from individuals under the age of 18.
10Data Protection Officer (DPO) & Inquiries
To exercise your statutory rights or file a privacy inquiry, reach out to our Data Protection Officer:
SapaFree Data Protection Office
Attention: Data Protection Officer (DPO)
Email: privacy@sapafree.com