Privacy Policy
How we collect, use, share and protect personal information under POPIA.
1. Who we are
Employability Hub is operated by DigiHR Versatile Solutions, a non-profit organisation ("we", "us"). We are the responsible party for personal information processed through theemployabilityhub.com.
Information Officer: Nthabeleng Motaung (Director), acting as Information Officer by default; registration with the Information Regulator is pending. Contact: nthabeleng_m@outlook.com.
2. Information we collect
Account details: name, email address, password (stored only in hashed form by our sign-in provider), account type (job seeker or recruiter) and, for recruiters, company name.
Career information: uploaded CVs and the details extracted from them, such as contact details, work history, education, skills and certifications; CVs and cover letters you generate.
Optional equity information: if you choose to provide it, such as race, gender or age group. This is kept separately and recruiters only see combined, anonymous totals — never your individual details.
Applications and messages: jobs you apply for, application status, and messages exchanged with recruiters on the platform.
Coaching: AI coaching conversations, coaching orders, and booking requests (name, email, preferred time and your session note).
Payments: order and payment references and status. Card details are entered on Yoco's payment page and do not reach our systems.
Technical information: information needed to keep you signed in and keep the site secure, such as session data and basic request logs.
3. Why we use it and the lawful basis
To provide the services you ask for (account, CV tools, applications, messaging, coaching, downloads): processing necessary to carry out our agreement with you (POPIA s11(1)(b)).
To keep the platform secure, prevent abuse and fix faults: our legitimate interests (s11(1)(f)), balanced against your rights.
To keep financial and tax records: compliance with legal obligations (s11(1)(c)).
Optional equity information is special personal information. We process it only with your separate, specific consent (s27(1)(a)), which you may refuse or withdraw without losing access to the platform.
Accepting this policy is not a blanket consent. Where we rely on consent for a specific activity, we ask for it separately.
4. CVs, applications and recruiters
When you apply for a job, the recruiter for that vacancy can see your application and the profile and CV details you share with it. A recruiter may also send applications to its own recruitment system; it is then responsible for that copy.
Recruiters must use candidate information only for the genuine vacancy and lawful recruitment purposes.
5. AI processing
We use AI tools to read uploaded CVs, draft CVs and cover letters, and run AI coaching. Your content is sent to an AI service provider to produce the result. See "How AI is used" for details.
AI is not used to make hiring decisions about you.
6. Service providers and international transfers
We use service providers (operators) for hosting, database and sign-in, AI processing and card payments (Yoco). [OWNER INPUT REQUIRED: confirm full list of providers and their countries].
Some providers may process information outside South Africa. Where they do, we rely on POPIA s72 safeguards, such as binding agreements providing adequate protection. We do not sell personal information.
7. How long we keep information
Account, CV and application information: [OWNER INPUT REQUIRED: retention period after account closure].
Messages, coaching conversations and booking requests: [OWNER INPUT REQUIRED: retention period].
Payment and tax records: [OWNER INPUT REQUIRED: period required for tax records — confirm with accountant].
8. Your rights
You may ask to access, correct or delete your personal information, object to processing based on legitimate interests, and withdraw consent at any time by emailing nthabeleng_m@outlook.com. We may need to verify your identity first.
Withdrawing consent does not affect processing that already took place lawfully.
9. Security and incidents
We use reasonable measures such as encrypted connections, account-level access controls and restricted staff access. No system is completely secure.
If we reasonably believe your personal information was accessed without authorisation, we will notify the Information Regulator and you as required by POPIA s22.
10. Complaints
Please contact us first at nthabeleng_m@outlook.com. You may also complain to the Information Regulator: inforegulator.org.za, POPIAComplaints@inforegulator.org.za.