Privacy Policy

Recruix is operated by Business Made Safe Holdings (Pty) Ltd, registered in South Africa and based in Cape Town. We build AI-powered recruitment software for South African agencies and HR teams.

The companies that use Recruix agree to our Terms of Service, which set out how we process candidates' information for them.

For privacy enquiries, contact us at privacy@recruix.online.

We collect and process the following categories of personal information:

• Candidate CV documents (uploaded by recruitment agencies on your behalf)
• Full name, email address, phone number, and physical location
• Work history, education, certifications, and professional skills
• Current and expected salary information
• Employment Equity Act (EEA) data: race group, gender, and disability status — collected for legislative reporting purposes only, with explicit consent
• Recruiter and agency account information (name, email, billing details)

We process candidate data solely to facilitate recruitment placement on behalf of the recruiting agency. This includes AI-assisted CV analysis, candidate scoring against job specifications, branded CV generation, and shortlisting. We do not use candidate data for any other purpose.

Personal data is stored in a Supabase PostgreSQL database hosted in the eu-west-1 (Ireland) region. CV files and generated documents are stored on Cloudflare R2 with access controlled via signed links that expire within one hour. All data is encrypted in transit (TLS 1.2+) and at rest.

Recruix uses the Anthropic Claude API (US-based) to extract structured data from CV text and generate recruitment documents. For each task it sends Anthropic the text of CVs and job specifications and the candidate and job details the task needs, such as work history, skills and salary expectations. South African ID numbers are removed from CV text before it is sent. Anthropic processes this data under its commercial terms, keeps it only for a limited period, and does not use it to train its models. Refer to Anthropic's privacy policy for their data handling practices.

We engage the following sub-processors to deliver the service:

Under the Protection of Personal Information Act (POPIA), you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — request that inaccurate or incomplete information be corrected
• Deletion (Erasure) — request that your personal information be permanently deleted
• Objection — object to the processing of your personal information
• Complain — lodge a complaint with the Information Regulator (see section 10)

To exercise any of these rights, email privacy@recruix.online with the subject line "POPIA Request" and your full name and email address. We will respond within 30 days.

We delete candidate personal information 24 months after the last activity on it. The company that holds the candidate's information is warned 30 days before and can choose to keep it.

When you apply for a job through a company's careers page on Recruix, your CV and the details you enter go to that company. A coded form of your internet (IP) address is kept for 30 days, only to limit repeat applications and spam. We don't collect details of your browser.

If you are not satisfied with how we have handled your personal information, you may lodge a complaint with the Information Regulator of South Africa: