Privacy Policy

1. Who we are

Recruix is a product of Business Made Safe Holdings (Pty) Ltd, a company registered in South Africa. We are the Responsible Party as defined under the Protection of Personal Information Act 4 of 2013 (POPIA).

Contact: hello@recruix.co.za

2. What personal information we process

Recruix processes the following categories of personal information:

• Account holders — name, email address, role.
• Candidates — name, contact details, employment history, skills, education, EEA classification (race group, gender, disability status as defined in the Employment Equity Act 55 of 1998).
• Clients — company name, contact name, email address.
• Usage data — IP addresses, browser information, pages visited, actions taken in the platform.

3. Why we process personal information

• To provide and operate the Recruix platform.
• To process candidate data on behalf of our tenants (recruitment agencies and HR teams).
• To communicate with account holders about their subscription and support queries.
• To comply with legal obligations, including POPIA and the Employment Equity Act.

4. Candidate consent

Candidates whose CVs are uploaded to Recruix must have given their explicit consent to the recruitment agency or employer that uploaded their data. The tenant (your agency or HR team) is responsible for obtaining and recording that consent. Recruix stores a consent flag and timestamp per candidate for audit purposes.

5. AI processing

CV data is processed by Anthropic's Claude AI to extract structured information and score candidates against job specifications. Before submission to the AI, South African ID numbers and other high-risk identifiers are stripped. Anthropic processes this data under their standard API terms. No CV data is used to train AI models.

6. Data retention

Candidate data is retained while the tenant account is active. On account termination, candidate data is deleted within 30 days. Tenants may request immediate erasure of a specific candidate's data at any time — this is logged as a POPIA erasure event.

7. Your rights under POPIA

Data subjects have the right to:

• Access their personal information held by us.
• Request correction of inaccurate information.
• Request deletion of their personal information (right to erasure).
• Withdraw consent for processing.
• Lodge a complaint with the Information Regulator of South Africa.

To exercise any of these rights, email hello@recruix.co.za.

8. Security

We implement industry-standard security measures including encryption at rest and in transit, role-based access control, Row-Level Security on all database tables, and virus scanning of all uploaded files.

9. Sub-processors

• Supabase — database and authentication (EU-West-1, Ireland).
• Cloudflare R2 — file storage.
• Anthropic — AI processing (CV extraction and scoring).
• Resend — transactional email.
• PayFast — payment processing (South Africa).

10. Changes to this policy

We may update this policy from time to time. Material changes will be communicated by email to account administrators. Continued use of the platform after notification constitutes acceptance.