Privacy Policy

1. Who we are

Recruix is operated by Business Made Safe Holdings (Pty) Ltd, registered in South Africa and based in Cape Town. We build AI-powered recruitment software for South African agencies and HR teams.

For privacy enquiries, contact us at privacy@recruix.online.

2. What data we collect

We collect and process the following categories of personal information:

• Candidate CV documents (uploaded by recruitment agencies on your behalf)
• Full name, email address, phone number, and physical location
• Work history, education, certifications, and professional skills
• Current and expected salary information
• Employment Equity Act (EEA) data: race group, gender, and disability status — collected for legislative reporting purposes only, with explicit consent
• Recruiter and agency account information (name, email, billing details)

3. Why we collect it

We process candidate data solely to facilitate recruitment placement on behalf of the recruiting agency. This includes AI-assisted CV analysis, candidate scoring against job specifications, branded CV generation, and shortlisting. We do not use candidate data for any other purpose.

4. How we store it

Personal data is stored in a Supabase PostgreSQL database hosted in the eu-west-1 (Ireland) region. CV files and generated documents are stored on Cloudflare R2 with access controlled via signed URLs valid for one hour. All data is encrypted in transit (TLS 1.2+) and at rest.

5. Cross-border transfers and AI processing

Recruix uses the Anthropic Claude API(US-based) to extract structured data from CV text and generate recruitment documents. Only CV text content is transmitted — no South African ID numbers or financial information is ever sent to Anthropic. Anthropic's zero-data-retention policy applies to API calls; data is not used to train Anthropic models. Refer to Anthropic's privacy policy for their data handling practices.

6. Sub-processors

We engage the following sub-processors to deliver the service:

7. Your rights under POPIA

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Deletion (Erasure) — request that your personal information be permanently deleted
• Objection — object to the processing of your personal information
• Complain — lodge a complaint with the Information Regulator (see Section 9)

To exercise any of these rights, email privacy@recruix.online with the subject line "POPIA Request" and your full name and email address. We will respond within 30 days.

8. Data retention

We retain candidate personal information for 24 months from the date of last activityon the recruiting agency's account. After this period, data is permanently deleted. Agencies may request earlier deletion at any time.

9. Information Regulator

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator of South Africa: