Privacy Policy
This policy explains what personal information Kyondo (“we”, “Kyondo”) collects when you use this website, why we collect it, and the choices you have. We have tried to keep it plain and short.
1. What we collect, and why
- When you visit. Our servers record your IP address, the pages you ask for, your browser type and the time. We use this to keep the site secure, fix errors and stop abuse. Log files are rotated automatically and are not used to build profiles of people.
- Employer accounts. Your company name, email address, a password (we store only a scrambled, one-way version, never the password itself), the jobs you post, and basic account activity such as your last login. We use this to run your account, show your jobs, keep your account secure and send you service emails.
- The free CV check. Your CV is read in memory to work out the score and is then discarded. We do not save your CV, the job description you paste, or your result.
- CV and cover letter services. If you message us by WhatsApp, text or email, we receive your contact details and whatever you send us, such as your CV. We use it only to do the work you asked for and to talk to you about it.
- Job alerts. If you ask for job alerts we keep your email address, the place, category or keyword you chose, and how often you want emails. We email you a link to confirm first, and send only the alerts you asked for. Every email has an unsubscribe link.
- Alert sign-up record. When you confirm a job alert we also keep the date, your IP address and your browser type, as proof that you asked for it.
- Clicks on Apply. When you press Apply we count the click, so employers can see which jobs get attention. We store only the job, the time and a short one-way code for “this browser today”. It cannot be turned back into your IP address or identity.
- Reports. If you report a job we keep your reason and note, and your email address if you chose to give one.
- Company profiles. If you are an employer, the logo, website and description you add are shown publicly on your company page. Two-step login secrets are stored encrypted.
- Other emails we send. Account confirmation, password reset, and notices about jobs you posted. We do not send marketing emails.
- Job listings. Vacancy details such as the employer’s name, job title and description. These describe jobs, not job seekers. We do not collect applicants’ personal information, because you apply with the employer.
2. Cookies and similar technology
We use one cookie: a session cookie that keeps you logged in and protects our forms from forgery. It is strictly necessary for the site to work. We do not use advertising or tracking cookies.
We do not use analytics that follow you around the web. Our pages load fonts from Google Fonts, so your browser contacts Google’s servers, which receive your IP address.
3. Who we share information with
- Service providers who help us run Kyondo, such as our hosting provider, our email delivery provider and, if you contact us there, WhatsApp or your mobile network.
- The public, for information an employer chooses to publish in a job post, such as the company name and the application link or email address.
- Authorities, if the law requires it.
We do not sell your personal information.
4. How long we keep it
- Employer account details: until you ask us to delete the account, or we close it.
- Jobs: hidden when they expire and deleted 90 days after that.
- Email confirmation and password reset links: they expire after a day or an hour, and old ones are deleted.
- Apply click counts: 180 days. Reports you send: until handled, then 180 days.
- Job alerts: until you unsubscribe. Sign-ups you never confirm are deleted after a week, and unsubscribed addresses after about six months.
- Server logs: rotated automatically, so older entries are overwritten.
- Documents you send for CV services: only as long as needed to finish the work and handle follow-up edits. We delete them if you ask.
5. Keeping information safe
We use an encrypted connection (HTTPS), store passwords in scrambled form, limit repeated login attempts, and restrict who can reach account data. No system is perfectly secure, but we take care to protect yours.
6. Your rights
You can ask us to show you the personal information we hold about you, correct it, delete it, or stop using it for a particular purpose. These rights come from data protection law, including Kenya’s Data Protection Act, 2019. Employers can download or delete their data themselves under Account, then Your data. Anyone can delete their job alerts with the “Unsubscribe and delete my data” button in an alert email. For anything else, contact us. You may also complain to your data protection authority, the Office of the Data Protection Commissioner in Kenya.
7. Children
Kyondo is meant for adults looking for work. It is not for people under 18, and we do not knowingly collect their information.
8. Changes
If we change this policy we will update the date at the top. For big changes we will tell employer account holders by email.
9. Contact
Questions about privacy? Contact us or email info@kyondo.co.ke.