Privacy Policy

1. Who we are and how to reach us

EasyHire is operated by Tech Adventures Ltd, a private company limited by shares incorporated in the Federal Republic of Nigeria with Corporate Affairs Commission registration number RC 8855272.

For any question about this Policy, or to exercise any of the rights described below, contact us at info@easyhire.africa.

2. The scope of this Policy

This Policy covers three groups of people:

• Employers — people who sign up to use EasyHire to hire.
• Candidates — people who apply to a role or complete an assessment through EasyHire.
• Visitors — people who visit our website or marketing pages without signing up.

We process Personal Data in line with the Nigeria Data Protection Act 2023 ("NDPA") and, where applicable, other data-protection laws.

3. Our two roles: controller and processor

Our responsibilities under the NDPA depend on whose data we are handling and why:

• When you create an account with us, visit our website, or use our Service as an Employer at an account level, we are a data controller of your Personal Data (account details, billing information, usage data).
• When an Employer uses EasyHire to collect and evaluate Candidate information, the Employer is the data controller of that Candidate data, and Tech Adventures acts as a data processor on the Employer's behalf. This means the Employer decides why and how that data is collected and used, and we handle it according to their instructions and our contract with them.

If you are a Candidate and you want to understand how your data is used in a specific hiring process, please refer to the Employer's own privacy notice. We have included section 14 below to help Candidates exercise their rights.

4. What we collect

4.1 From Employers

• Identity and contact information: name, work email, job title, phone number.
• Organisation information: company name, website, size, industry, values, logo, and any documents you upload to describe the company.
• Account security information: passwords (stored in hashed, unreadable form) and sign-in activity.
• Billing information: tier selected, invoices, and payment confirmations. Full payment-card numbers are handled by our regulated payment processor and are not stored on our systems.
• Communications: messages you send to support, feedback, and notes you write inside the Service.

4.2 From Candidates

• Identity and contact information: name, email, phone number.
• Application information: CV, education, employment history, skills, links to portfolios, and answers to screening questions.
• Assessment content: written answers you submit, audio recordings of voice interviews, transcripts produced from those recordings, and any files you upload as part of a take-home task.
• Interview content (where an Employer uses it): transcripts and AI-generated summaries of scheduled interviews you attend.
• Optional account information: if you choose to create a Candidate account to track your applications.

4.3 Automatically

• Device and connection information: IP address, browser type, operating system, approximate location inferred from your IP.
• Usage information: pages viewed, actions taken, time spent, and errors encountered.
• Cookies and similar technologies — see section 15 below.

4.4 From third parties

• If you sign in with a third-party sign-in provider, we receive your name, email address, and profile picture from that provider.
• If an Employer connects a calendar provider to schedule interviews, we receive the access tokens and calendar availability needed for scheduling.
• If we crawl a company website or process an uploaded document during onboarding, we collect the content of those pages or files.
• Our payment processor tells us whether a payment succeeded.

5. How we use Personal Data and our legal basis

We use Personal Data only for the purposes described below. Under the NDPA, each purpose needs a lawful basis:

• To provide the Service — creating your account, authenticating you, generating job postings, screening and scoring applications, hosting audio and files, and delivering emails. Lawful basis: performance of our contract with you (Employers and Candidates with accounts), and legitimate interests (for Candidates applying without an account, so that the application reaches the Employer).
• To process payments — billing, receipts, and fraud prevention. Lawful basis: performance of a contract and compliance with legal obligations.
• To keep the Service secure and reliable — detecting and preventing abuse, investigating incidents, maintaining backups, and protecting our systems. Lawful basis: legitimate interests.
• To improve our product — analysing how the Service is used, fixing bugs, and building new features. We use aggregated, de-identified data wherever possible. Lawful basis: legitimate interests.
• To communicate with you — product updates, security notices, responses to support requests. Lawful basis: performance of a contract and legitimate interests. Marketing emails are sent only where you have opted in, and you can opt out at any time.
• To comply with the law — responding to valid legal requests, enforcing our terms, tax and accounting records. Lawful basis: legal obligation and legitimate interests.

6. How AI is involved

AI is at the heart of how EasyHire helps Employers move quickly while seeing Candidates as whole people. The Service uses AI to:

• Extract structured information from CVs (name, experience, education, skills).
• Generate draft job postings and assessment questions for Employers to review and edit.
• Score written responses and transcribed voice interviews against the rubric an Employer configures.
• Produce transcripts, summaries, and recommendations from assessments and interviews.
• Power the floating AI assistant available inside the Service.

To deliver these features, Content may be sent securely to specialist third-party providers under contract — for example, AI inference providers, speech-to-text providers, and meeting-transcription providers. These providers process data only on our instructions and are not permitted to use Content to train public AI models. We do not sell Personal Data, and we do not use Employer or Candidate Content to train publicly available AI models.

7. Voice recordings and interview calls

Where an Employer enables a voice assessment, Candidates are told before recording begins and must actively start each recording. Audio files are stored securely and transcribed so that Employers can review them.

Where an Employer enables the EasyHire meeting assistant to join a scheduled interview, the assistant identifies itself to participants on the call. Employers are contractually responsible for informing every participant that the call will be recorded and transcribed, and for obtaining any consents required by law. If you do not want a call to be recorded, tell the Employer or leave the call.

8. Automated decision-making and your rights

Employers may configure EasyHire so that Candidates are automatically advanced to the next stage of a pipeline when an AI-generated score is above a threshold they set, or so that Candidates are automatically rejected when a score is below a threshold. Where that automated processing produces a decision that has a significant effect on you as a Candidate, the NDPA gives you the right to:

• Be informed that the decision was made automatically.
• Request meaningful human review of the decision by a person with the authority and understanding to change it.
• Express your point of view and contest the outcome.

To exercise these rights, please contact the Employer who posted the role in the first instance. If you cannot resolve the matter with them, contact us at info@easyhire.africa and we will help route your request.

9. Who we share data with

We do not sell Personal Data. We share it only in the following circumstances:

• With the Employer you applied to — if you are a Candidate, your application and assessment content are shared with the Employer that posted the role.
• With sub-processors we engage to operate the Service. These fall into a small number of categories: cloud hosting and storage, AI inference, speech-to-text and meeting transcription, email delivery, payment processing, calendar and video-conferencing integrations, analytics, and customer-support tooling. Each sub-processor is bound by a written agreement that restricts how they may use the data. A current list of sub-processor categories is available on request from info@easyhire.africa.
• With professional advisers such as auditors, accountants, and lawyers, where needed and under a duty of confidentiality.
• To comply with law or a valid legal request, or to protect the rights, safety, or property of Tech Adventures, our users, or the public.
• In a business transfer, such as a merger, acquisition, reorganisation, or sale of assets — we will only share data where the receiving party is bound by protections at least as strong as this Policy.

10. International data transfers

Some of the providers we rely on to deliver the Service are based outside Nigeria. Where Personal Data is transferred out of Nigeria, we do so under safeguards permitted by the NDPA — for example, contractual protections that require the recipient to protect the data to a standard comparable to Nigerian law. We take reasonable steps to ensure your data continues to be protected wherever it is processed.

11. How long we keep data

We keep Personal Data only for as long as we need it for the purposes described above or to meet legal, accounting, or reporting obligations.

• Employer account data is kept for as long as the account is active, and for up to thirty (30) days after the account is closed to allow export. After that, it is deleted or anonymised, except where we must keep records to comply with law.
• Candidate application data is kept for as long as the Employer — who is the controller — instructs us to keep it. By default, we retain Candidate data for twelve (12) months after a job closes, unless the Employer extends or shortens that period.
• Audio recordings and transcripts follow the same retention rule as the Candidate application they relate to.
• Billing records are kept for the period required by Nigerian tax and accounting law.
• Security and audit logs are retained for a limited period to help us detect and investigate abuse.

12. How we protect data

We apply technical and organisational measures to protect Personal Data, including encryption in transit and at rest, access controls, least-privilege administration, activity logging, secure development practices, and incident-response procedures. No system is perfectly secure, and we cannot guarantee absolute security, but we work continuously to reduce risk and respond promptly when issues arise.

13. Your rights

Under the NDPA, and subject to its conditions and exemptions, you have the right to:

• Access the Personal Data we hold about you.
• Ask us to correct Personal Data that is inaccurate or incomplete.
• Ask us to delete Personal Data, or to restrict how we use it.
• Object to certain uses, including where we rely on legitimate interests.
• Receive a copy of the Personal Data you provided to us in a structured, machine-readable format, where technically feasible.
• Withdraw consent, where we rely on it (this does not affect processing done before withdrawal).
• Not be subject to a decision based solely on automated processing that has a significant effect on you, and to request human review — see section 8.

To exercise any of these rights, contact us at info@easyhire.africa. We will respond within the timeframe required by law, normally within thirty (30) days. We may ask you to verify your identity before acting on a request.

14. If you are a Candidate

Because the Employer is the controller of your application data, we usually cannot grant a request to access, correct, or delete that data on our own — we will pass the request to the Employer and support them in answering it.

You can also contact the Employer directly at the email address they provided in the job posting. If you cannot resolve an issue with the Employer, or if you believe your rights have not been respected, please contact us at info@easyhire.africa.

15. Cookies, analytics, and session replay

We use cookies and similar technologies for three reasons:

• Strictly necessary cookies that keep you signed in, remember your preferences, and keep the Service secure. Without these the Service cannot function.
• Product analytics and session replay that help us understand how the Service is used so we can fix bugs and improve the experience. We use PostHog (hosted in the European Union) as our analytics and session-replay provider. PostHog records: pages visited, clicks and other interaction events, the timing of actions, your browser and device, and the sequence of screens you saw. Where session replay is active, the screens are reconstructed as a video-like timeline.
• Preference cookies that remember choices you make (for example, language or theme).

Privacy safeguards in session replay. All text you type into form fields (including names, emails, passwords, and free-text answers) is automatically masked before it leaves your browser. Areas of the Service that display Candidate-specific Personal Data — including names, contact details, CVs, transcripts, written answers, and AI-generated profile summaries — are also masked, so that recordings show the layout and interaction without exposing the underlying content. Payment-card numbers are collected in an isolated frame provided by our payment processor and never reach our analytics tooling.

Errors and crashes. When the Service hits an unexpected error, we forward the error message and technical context (route, browser, anonymised user identifier) to PostHog so we can diagnose and fix it.

Our lawful basis for analytics, session replay, and error tracking is our legitimate interest in keeping the Service reliable, secure, and easy to use. You can control cookies through your browser settings. Blocking strictly necessary cookies may break parts of the Service.

16. Minimum age

EasyHire is not intended for anyone below the minimum legal working age in their jurisdiction. Candidates must be at least 16 years old to apply through the Service. Employers must be at least 18. If you believe someone below these ages has provided Personal Data to us, please contact us and we will remove it.

17. Data breaches

If we become aware of a Personal Data breach that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission and any affected controller (for Candidate data) without undue delay, and in any case within the timeframe required by the NDPA. Where we are required to notify you directly, we will do so.

18. Complaints

If you have a concern about how we handle your Personal Data, please contact us first at info@easyhire.africa and we will do our best to resolve it. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

19. Changes to this Policy

We may update this Policy from time to time. If a change is material, we will notify you by email or through the Service before it takes effect and update the "Last updated" date at the top of this page. Please review this Policy periodically to stay informed.

20. Contact us

For any questions about this Policy or about how we handle Personal Data: