Privacy Policy

AjiraNext ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

By using AjiraNext, you agree to the collection and use of information in accordance with this policy. This policy applies to all users of the Platform — job seekers, employers, and visitors.

Information you provide directly

• Account information — name, email address, and profile photo (via Google OAuth or email sign-up)
• CV / Resume — the document you upload for AI processing, including your employment history, education, skills, and contact details
• Job preferences — your target roles, salary expectations, location preferences, and career goals set during onboarding
• Job applications — cover letters, assessment answers, and messages you send to employers through the Platform
• Employer information — company name, contact details, job descriptions, and candidate communications if you use the employer features
• Payment information — your M-Pesa phone number used to process payments (we do not store card details)

Information collected automatically

• Usage data — pages visited, features used, job listings viewed and clicked
• Device information — browser type, operating system, IP address
• Cookies — session cookies for authentication (via Clerk) and analytics (via Google Analytics)

• To provide the service — matching your CV to job listings, generating AI-powered CVs and cover letters, scoring your job fit, and powering interview preparation tools
• To run AI features — your CV text and job descriptions are sent to Anthropic's Claude API and Deepgram (for voice transcription) to power our AI tools. This data is processed but not used to train their models (per their enterprise agreements)
• To communicate with you — sending job alerts, AI result notifications, subscription confirmations, and support responses via Resend
• To process payments — facilitating M-Pesa transactions via the Safaricom Daraja API
• To improve the Platform — understanding usage patterns to fix bugs and improve features (via anonymised analytics)
• To prevent fraud — detecting and blocking abuse, spam, and unauthorised access

With employers

When you submit an in-platform application, we share your name, email address, CV, and cover letter with the employer who posted that specific job. We do not share your information with other employers or use it for any other job application without your action.

With service providers

We use the following trusted third-party services to operate the Platform. Each is bound by their own privacy policies and data processing agreements:

• Clerk — authentication and user management
• Neon — PostgreSQL database hosting (your data is stored here)
• Vercel — hosting and serverless functions
• Anthropic — Claude AI for CV generation, cover letters, match scoring, and interview prep
• Deepgram — speech-to-text for voice interview practice
• Resend — transactional and notification emails
• Safaricom (Daraja API) — M-Pesa payment processing
• Sentry — error monitoring (may capture anonymised error traces)
• Google Analytics — anonymised usage analytics
• Sanity — content management for blog and static content

Legal requirements

We may disclose your information if required by law, court order, or government authority, or if necessary to protect the safety of our users or the public.

We do not sell your data

We do not sell, rent, or trade your personal information to any third party for marketing purposes.

• Account data — retained for as long as your account is active. You may delete your account at any time from Dashboard → Settings.
• CV files — stored in private Vercel Blob storage. Deleted automatically when you upload a new CV, or when you delete your account.
• AI results — generated CVs, cover letters, and match scores are retained in your account for your reference. Deleted when you delete your account.
• Payment records — transaction records (order ID, amount, M-Pesa receipt) are retained for 7 years for accounting and legal compliance.
• Application data — in-platform applications, messages, and interview records are retained for 2 years after the application, or until account deletion.
• AI processing queue — temporary queue entries containing CV text are automatically deleted within 48 hours of processing.

We take the security of your data seriously and implement the following measures:

• CV files are stored with private access — they are never publicly accessible and are only accessible through an ownership-verified download proxy
• Sensitive API keys and credentials are encrypted at rest using AES-256-GCM
• All data is transmitted over HTTPS/TLS
• Authentication is handled by Clerk with support for Google OAuth and multi-factor authentication
• Database access is restricted by credential and network controls

No method of transmission or storage is 100% secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

You have the following rights regarding your personal information:

• Access — request a copy of the personal data we hold about you
• Correction — update or correct inaccurate information via your account settings
• Deletion — delete your account and associated data from Dashboard → Settings → Delete Account
• Portability — request an export of your data in a portable format
• Objection — object to certain uses of your data

To exercise any of these rights, contact us at privacy@ajiranext.com. We will respond within 30 days.

We use the following types of cookies:

• Essential cookies — required for authentication and secure session management (Clerk). Cannot be disabled.
• Analytics cookies — Google Analytics to understand how the Platform is used (anonymised, no personally identifiable data). You can opt out via your browser settings or the Google Analytics opt-out extension.

We do not use advertising or tracking cookies.

AjiraNext is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of material changes by email or by posting a notice on the Platform. The "Effective date" at the top of this policy indicates when it was last updated.

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact us:

AjiraNext
Email: privacy@ajiranext.com
Support: support@ajiranext.com