Privacy Policy

1. Introduction

Welcome to Yanooka (hereinafter referred to as "we", "us", "our", or the "Platform"). We are committed to protecting your privacy and ensuring that your personal information is collected and processed properly, lawfully, and transparently in accordance with the Protection of Personal Information Act, No. 4 of 2013 (POPIA) of South Africa.

This Privacy Policy governs our data collection, processing, and usage practices when you access our platform, use our AI-powered Executive CV Builder, or host a Live Web Profile. By utilizing our services, you consent to the data practices described in this policy.

2. The Information We Collect

To provide our frictionless ATS-optimization services, we collect the following categories of personal information:

• Identity & Contact Data: First name, last name, email address, physical location, and mobile phone number.
• Professional & Career Data: Raw CV data, employment history, educational background, core competencies, job titles, and AI proficiency levels.
• Special Personal Information: We collect your Employment Equity (EE) status solely at your discretion. This information is processed strictly for the purpose of accurately representing your demographic profile to prospective employers in alignment with South African corporate compliance requirements.
• Media: Profile headshots uploaded voluntarily for inclusion in your Executive Profile.
• Financial Data: We do not store your credit card information. All payments are securely processed and encrypted via our designated third-party payment gateway (e.g., Stitch).
• Technical Data: Usage data, IP addresses, browser types, and generated "Magic Tokens" used for secure, passwordless authentication.

3. How We Use Your Information

We will only use your personal information for the purposes for which it was collected:

• To parse, structure, and format your career history into an ATS-optimized Executive CV using our proprietary engine.
• To host and display your Live Profile Preview via a secure, shareable web link.
• To authenticate your identity using passwordless, secure Magic Links.
• To process your payments and manage recurring dashboard hosting subscriptions.
• To communicate with you regarding expiring links, account updates, and relevant ecosystem tools.

4. Third-Party Processing & Artificial Intelligence

To deliver elite CV formatting, your raw career data is processed using advanced third-party Artificial Intelligence (AI) algorithms (including OpenAI).

By using Yanooka, you explicitly consent to the following:

• Your raw text and uploaded documents are temporarily transmitted to our AI processing partners solely for the purpose of formatting and ATS keyword optimization.
• We enforce strict API agreements ensuring that our AI partners do not use your personal career data to train their public models.
• Your parsed PDF documents are processed locally via your browser and are not stored as raw files on our servers, ensuring an added layer of protection against unauthorized access.

5. Cross-Border Data Transfers

In order to utilize state-of-the-art AI processing and cloud hosting infrastructures, your personal information may be transmitted to servers located outside of South Africa. We ensure that any cross-border transfer complies with Section 72 of POPIA, meaning the receiving third parties are subject to laws, binding corporate rules, or binding agreements that provide an adequate level of data protection equivalent to POPIA.

6. Data Security & Magic Link Authentication

We have implemented rigorous, high-end security measures to prevent your personal information from being accidentally lost, used, or accessed in an unauthorized way.

• Passwordless Security: We utilize encrypted "Magic Tokens" delivered directly to your verified email address, eliminating the risk of compromised passwords.
• Data Isolation: Your generated CVs and personal data are strictly bound to your secure dashboard and are only publicly visible if you choose to share your specific profile URL.

7. Data Retention

We will only retain your personal information for as long as necessary to fulfill the purposes we collected it for.

• Active dashboards and hosted profiles are maintained as per your subscription or purchase terms.
• If a profile expires and is not renewed, access is revoked, and associated personal data may be scheduled for routine deletion in accordance with our data retention schedule.

8. Your Legal Rights Under POPIA

Under South African law, you have the right to:

• Request access to the personal information we hold about you.
• Request correction of any incomplete or inaccurate data we hold.
• Request erasure (Right to be Forgotten) of your personal data where there is no good reason for us continuing to process it.
• Object to processing of your personal information.
• Withdraw consent at any time where we are relying on consent to process your personal information.

To exercise any of these rights, please contact our Information Officer.

9. Contact Details & Complaints

If you have any questions about this Privacy Policy or our privacy practices, please contact us at:

Email: legal@yanooka.com
Platform: www.yanooka.com

You also have the right to lodge a complaint at any time with the Information Regulator of South Africa:
Email: complaints.IR@justice.gov.za
Website: https://inforegulator.org.za/