Privacy Policy

Kazicloud Kenya is the data controller responsible for personal data collected through the Kazicloud platform, websites and services. Questions about this policy can be sent to support@kazicloud.co.ke or to our Nairobi office in Westlands, Nairobi, Kenya.

We are committed to protecting personal data in line with the Kenya Data Protection Act, 2019 (the "DPA"), the General Data Protection Regulation (GDPR) where it applies to our users in the European Economic Area, and best practice for pan-African recruitment platforms.

When you create a candidate profile or apply to a role, we collect: contact details (name, email, phone/WhatsApp), your CV and its contents (work history, education, skills), job preferences (target roles, locations, salary expectations in KES), application history, assessment responses you complete, and communications you have with employers through the platform.

We only collect what is necessary to make hiring work: matching you to roles, allowing employers to review your application, and powering your application history. We never collect data we do not need for these purposes.

Employer information — company details, contact persons, and job postings — is used to run the platform: publishing roles, processing applications, billing, and support.

KES salary bands and hiring metrics from platform activity are aggregated and anonymised before they appear in market reports, salary guides or insights. Aggregates are built from groups of at least several employers and never reveal an individual employer’s or candidate’s figures. Your compensation data is never sold, and individual salary figures are never displayed publicly.

Internal recruiter notes, fit scores, interview feedback and internal shortlists are strictly internal to the hiring organisation and its authorised team members. They are never shown on the candidate-facing surface, never published, and never sold.

Candidates always see the same profile the employer sees — there is no hidden "shadow profile". If you want to know what an employer has on file about you, ask them through the platform; their recruiter notes remain their internal record, subject to their own data obligations.

We process personal data under the following bases: (a) your consent, which you may withdraw at any time; (b) performance of a contract — running your account, applications and subscriptions; (c) legitimate interests — fraud prevention, platform security and improving matching, balanced against your rights; and (d) compliance with legal obligations.

We share data only with: employers you apply to or who shortlist you (limited to what your application contains), payment providers (M-Pesa via Safaricom Daraja and Paystack) for billing, and infrastructure processors (hosting, email, analytics) bound by data-processing agreements. We never sell personal data to third parties.

We keep account data for as long as your account is active, and application data for a reasonable period after, to support hiring compliance and dispute resolution. You can delete your account from your profile settings — upon deletion we remove or anonymise your personal data unless we are legally required to keep it.

To exercise any data subject right — access, correction, deletion, restriction, portability or objection — email support@kazicloud.co.ke. We respond within the statutory timelines under the DPA, and you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.

We use essential cookies to keep you signed in and to protect the platform, and privacy-respecting analytics to understand aggregate usage. We do not use invasive ad-tracking cookies. You can block cookies in your browser; core functionality such as logging in may then be affected.

We apply industry-standard safeguards: encryption in transit, hashed credentials, role-based access control, least-privilege team permissions, and regular security reviews. No method of transmission is perfectly secure, and we cannot guarantee absolute security.

We may update this policy as the platform evolves. Material changes will be announced through the platform or by email. Continued use of Kazicloud after changes take effect constitutes acceptance of the updated policy.