Privacy Policy

1. Information we collect

Information you give us

• Account details. Your name, phone number, email address, password or passkey, preferred language and what you joined to do, such as find professional work, offer local services or hire.
• Verification codes. One-time codes we send by SMS or email to confirm that a phone number or email address belongs to you.
• Professional profile. Your photo, headline, work experience, education, skills, languages, certifications, references, portfolio and job preferences, such as job types, locations and expected pay. If you upload a CV, we extract its contents to fill in your profile for you to review.
• Local-work profile. The services you offer, your rates, availability, working days, service area, portfolio photos, certifications and references.
• Identity documents. If you choose to verify your identity as a local worker, the document type and a photo or scan of the document. We collect it only with your consent.
• Employer and company details. Company name, description, logo, industry and location, the jobs and local tasks you post, and the members of your hiring team.
• Applications and hiring. Cover letters, answers to screening questions, assessment responses, interview arrangements, offers, and the notes and decisions employers record about an application.
• Bookings. Task descriptions, dates, locations, agreed prices and booking status, including whether a booking was marked as paid.
• Messages, ratings and reviews. Messages you exchange through the Services and the ratings and reviews you give or receive.
• Learning. The programmes you enrol in, your progress, quiz and assessment results, and the goals you share to personalise a learning path.
• Support requests. What you tell us when you contact us.

Information we collect automatically

• Device and log data. IP address, device and browser type, operating system, app version, time zone, and the date and time of requests.
• Usage data. Pages and screens viewed, searches, jobs and profiles viewed, features used, and how you move through steps such as onboarding.
• Notification tokens. The push notification token your device provides, if you allow notifications.
• Error reports. Technical details about crashes and errors, which we use to find and fix problems.
• Assessment integrity signals. If an employer turns on proctoring for an assessment, events such as switching tabs, leaving full screen, copy or paste attempts, opening developer tools or turning off your webcam.
• Cookies and similar technologies. See "Cookies" below.

Information from other people

• Employers who update the status of your application, record interview feedback or make you an offer.
• Clients and workers who rate or review you after a booking.

2. How we use your information

• To provide the Services: create and secure your account, verify your contact details, build your profile, and let you post, find, apply for, book and manage work.
• To match and recommend: suggest jobs, local work, workers, candidates and learning programmes, and show how well a profile fits a job.
• To support hiring: deliver applications, screening answers and assessment results to employers, and keep both sides informed of progress.
• To communicate with you: send verification codes, application, interview and booking updates, security alerts and, where you allow it, reminders and job suggestions by SMS, email and push notification.
• To keep Kazispace safe: verify identities, review jobs and profiles before they are published, detect fraud, fake jobs and abuse, and enforce our Terms of Use.
• To improve Kazispace: understand how the Services are used, measure performance and fix errors.
• To meet legal obligations: keep required records, respond to lawful requests, and establish or defend legal claims.

We do not sell your personal data, and we do not use it for third-party advertising.

3. Legal bases for processing

We process personal data only where Rwandan law allows it:

• Contract. To provide the Services you asked for under our Terms of Use.
• Consent. For identity verification, optional notifications and anything else we ask your permission for. You can withdraw consent at any time. This does not affect processing that already took place.
• Legitimate interests. To keep the Services secure, prevent fraud and improve our products, where your rights do not override those interests.
• Legal obligation. Where the law requires us to keep or disclose information.

4. Automated processing and AI

We use automated tools, including artificial intelligence services, to:

• read an uploaded CV and suggest profile entries, which you can review and edit before saving;
• score how well profiles match jobs, and write short match summaries;
• build personalised learning paths and recommendations.

Employers can choose to shortlist or reject applications automatically when screening answers score above or below a threshold they set. If a decision about your application was made this way, you can ask for a person to review it by contacting support@kazispace.com.

Match scores and AI-generated suggestions can be wrong. They are there to help people decide, so check anything that was filled in for you.

5. How we share your information

With other users

• Employers you apply to see your application, the profile details relevant to it (such as experience, education and skills), your screening answers and your assessment results. The CV file you upload is used to fill in your profile and is not shared with employers.
• Anyone using Kazispace can see a published local-work profile: your name, photo, services, rates, service area, portfolio and ratings. Your phone number and identity documents are never shown on your profile.
• The other party to a booking receives the details needed to carry out the work, such as the task, the time and the location.
• Your hiring team can see the candidates and applications for the jobs your company posts.

With service providers

We use trusted providers who process data on our behalf and only on our instructions:

• hosting, database and file storage providers, including Cloudflare;
• SMS delivery and email delivery;
• push notification delivery ;
• AI LLMs for CV reading, matching and learning features;
• error monitoring;
• assessment proctoring providers, where an employer turns on proctoring.

For legal and safety reasons

We may disclose information when the law, a court or a competent authority requires it, or when it is necessary to protect the rights, property or safety of our users, the public or Kazispace.

If our business changes

If Kazispace is involved in a merger, acquisition or sale of assets, personal data may transfer to the new owner, subject to this policy.

6. International transfers

Some of our service providers store or process data outside Rwanda, for example in the European Union or the United States. When personal data leaves Rwanda, we rely on the safeguards Rwandan law requires, such as contractual protections, so that your data keeps a comparable level of protection.

7. How long we keep information

We keep personal data only as long as we need it for the purposes in this policy:

• account and profile data for as long as your account is open;
• applications, bookings, messages, ratings and reviews while your account is open, and afterwards only as long as needed to resolve disputes or meet legal obligations;
• identity documents for as long as needed to verify you and maintain your verified status;
• assessment integrity signals for 30 days;
• verification codes until they are used or expire;
• records the law requires us to keep, for the period the law sets.

When you delete your account, we delete or anonymise your personal data unless we need to keep it for one of these reasons.

8. Security

We protect personal data with technical and organisational measures, including encryption in transit, hashed passwords, one-time verification codes, passkey support, access controls and masking of personal data in our logs. No system is completely secure, so keep your password and devices safe, and tell us right away if you think someone has accessed your account.

If a personal data breach is likely to put your rights at risk, we will notify the supervisory authority and the people affected, as the law requires.

9. Your rights

Under Rwandan data protection law, you have the right to:

• be informed about how your personal data is used;
• access the personal data we hold about you;
• have inaccurate or incomplete data corrected;
• have your data deleted;
• object to processing, or ask us to restrict it;
• receive your data in a portable format;
• not be subject to a decision based solely on automated processing that significantly affects you;
• withdraw any consent you have given.

You can update most profile information yourself in the Kazispace apps. For any other request, including deleting your account, email support@kazispace.com and tell us which account it concerns. We may ask you to confirm your identity first, and we will respond within the time the law allows.

If you are unhappy with how we handled your data, you can complain to the National Cyber Security Authority (NCSA), the data protection supervisory authority in Rwanda.

10. Notifications and your choices

Some messages are needed for the Services to work, such as verification codes, security alerts and updates about your applications and bookings. Others, such as reminders and job suggestions, are optional. You can turn optional messages off in your notification settings, and control push notifications in your device settings.

11. Cookies

We use cookies and similar technologies, such as local storage, to keep you signed in, protect your account, remember your language and make the Services work. We also collect error and performance data to keep the Services reliable. We do not use advertising cookies. You can block or delete cookies in your browser settings, but parts of the Services may stop working.

12. Children

The Services are not intended for anyone under 16, and we do not knowingly collect personal data from children under 16. If you believe a child has created an account, contact us and we will delete it.

13. Changes to this policy

We may update this policy as the Services change. The date at the top shows when it was last updated. If we make significant changes, we will tell you through the Services, by email or by SMS before they take effect, and ask for your consent again where the law requires it.

14. Contact us

For questions about this policy or your personal data, email support@kazispace.com or use the contact page on kazispace.com.