1. Who is responsible for your data
The jops service is run by [TO COMPLETE: legal name, legal form, country of registration, registration number], whose registered office is at [TO COMPLETE: registered address] (Ouagadougou, Burkina Faso). On this page, "jops", "we" and "our" mean that entity.
For any question about your data: contact@jops.africa.
2. The data we collect
We only collect what the service needs. Depending on what you do on jops:
| Situation | Data |
|---|---|
| You create an account | Name, e-mail address (your login), password (kept only in encrypted form, never in clear), country and city, role (talent or organization), language and display preferences. Optionally: username, gender, two-factor authentication. |
| You are a talent | Your profile: name, professional title, phone, location, photo, CV (PDF or Word), bio, LinkedIn link, skills, experience, education, projects, contact persons, seniority level, certification requests and signature. |
| You represent an organization | The organization's name, logo, e-mail, phone, address, website, description, industry and size; the name, e-mail and role of the team members you invite. |
| You use the service | Your applications, the offers you save or skip in the app, access or interest requests between organizations and talents, your event registrations, your invitations. |
| You post an announcement without an account | Your business e-mail and phone, the text of the announcement and, if you attach one, the job sheet as a PDF. A draft of your announcement is kept in your browser (see "Cookies and local storage"). |
| You write to us (contact form) | Name, e-mail address, subject, message, plus the IP address and device type used to send it. |
| You pay | Amount, currency, the payment method chosen (Flutterwave or PawaPay), the transaction reference and status. Card and mobile money numbers are handled by those providers: we do not keep them. |
| You use the website or the app | IP address, device type, browser and operating system, recorded in your sign-in sessions, in the log of sensitive actions (sign-in, password change...) and in the server's technical logs. Passwords and e-mail codes are never written to those logs. |
We also show job offers found on other sites. They are companies' public announcements, not data of our users: jops shows a summary and links to the original site, without endorsing them or guaranteeing they are up to date.
3. Why we use it
- To run the service: create and secure your account, connect talents and organizations, handle applications and announcements, send the e-mails the service needs (confirmation code, password reset, invitations, application notifications).
- To bring forward profiles and offers that match (automatic search and ranking, see "Automated search and analysis").
- To review announcements before they are published and fight abuse and fraud.
- To collect payments and keep our accounts.
- To keep the service secure and understand its technical problems.
- To answer your messages.
We rely on: performing the service you ask for; our legitimate interest in protecting and improving it; your choices, for example when you make your contact details visible to organizations; and our legal obligations.
[TO COMPLETE: say whether jops sends promotional e-mails: no / only with your consent / not yet]
4. Who sees your information
- Talents: organizations see your profile and CV when you apply to them. They can also search talent profiles. Your contact details (phone, e-mail) are only shown to them if you turned on the "public contact" option.
- Your online portfolio is visible [TO COMPLETE: to everyone / only to ...: state who can see the public profile page].
- Organizations: your team members see the organization's information according to their role.
- Announcements posted without an account: our team reviews the announcement before it is published. Your e-mail and phone are only used to get back to you; they are never shown publicly.
- Events: the organizer sees the name and e-mail of the people registered. The list of registrants is not public: visitors only see how many there are.
- Our team can access the data needed to run and protect the service, within the limits of its role.
We do not sell your data.
5. Providers and third parties
Some providers receive part of your data for a specific task:
| Who | What it receives | Why |
|---|---|---|
| Server host: [TO COMPLETE: host name and country] | All the service's data (database, files) | Hosting jops |
| E-mail sending provider: [TO COMPLETE: provider name] | The recipient's address and the message content | Sending codes, invitations and notifications |
| Flutterwave, PawaPay | The payer's and the payment's details | Collecting payments |
| Anthropic (AI analysis) | The text of an imported PDF document or CV | Reading a document to prefill a profile or an announcement [TO COMPLETE: confirm the use in production and on which documents] |
| Search engine provider: [TO COMPLETE: hosted on our servers / provider name] | The text of profiles and offers, as a calculation | Matching talents and offers |
| DB-IP | Nothing: the country-by-IP-address database is a file stored on our server, your IP address is sent to no one | Choosing French or English on your first visit |
| Google Play, Apple | According to their own rules | Distributing the mobile app |
[TO COMPLETE: if sign-in with an external account (Google, GitHub) is offered in production, say so here: that provider passes us your name and e-mail]
IP geolocation by DB-IP: https://db-ip.com ("IP to Country Lite" database, CC BY 4.0 licence).
6. Automated search and analysis
To match talents and offers, jops computes a numeric representation of the text of profiles and offers. It is used to rank results, never to decide for you: no decision about you is taken by a machine alone, the ranking only suggests.
When you import a document (a CV or a PDF job sheet), its text may be read by an AI tool to prefill fields. The result may contain mistakes: always check what is prefilled.
8. How long we keep it
| Data | Duration |
|---|---|
| Confirmation code received by e-mail | 10 minutes, or until it is used |
| Sign-in (access token) | About 5 hours; the website sign-in session expires after 12 hours without signing in again |
| Account, profile, CV, applications | [TO COMPLETE: retention period, for example: as long as the account is active] |
| Inactive account | [TO COMPLETE: time before an inactive account is deleted, or "kept until you ask"] |
| After a deletion request | [TO COMPLETE: deletion delay, for example 30 days]; [TO COMPLETE: what we must keep (invoices, payment records) and for how long] |
| Technical server logs | [TO COMPLETE: duration, for example 90 days] |
| Log of sensitive actions, contact form messages | [TO COMPLETE: duration, for example 12 months] |
9. How we protect it
- Encrypted connection (HTTPS) across the whole site and the app.
- Passwords kept in encrypted form; e-mail codes valid for 10 minutes; changing or resetting a password signs out your other devices.
- Limits on the number of attempts on sign-in and codes.
- Optional two-factor authentication.
- Role-based access inside organizations, and a log of sensitive actions.
- Files (CVs, photos, logos) are on our server and are only served by it.
No system is perfect: if a breach of your data put you at risk, we would tell you and the competent authority, as the law requires.
10. Your rights
At any time, you can:
- see your data and correct it (from your profile, on the website and in the app);
- ask for your account and your data to be deleted;
- ask for a copy of your data;
- object to a use of your data, or withdraw a consent you gave (for example turn off "public contact");
- ask how we use it.
For deletion, a copy and other requests, write to contact@jops.africa from your account's address. We answer within [TO COMPLETE: answer delay, for example 30 days]. There is no deletion button yet in the website or the app: the request is made by e-mail.
If you think your rights are not respected, you can complain to the data protection authority: [TO COMPLETE: name and details of the authority, for example the CIL in Burkina Faso].
11. Where the data is
Data is hosted on servers located in [TO COMPLETE: country and city of the server]. Some of the providers listed above may process data outside your country; we only give them what they need.
12. Minimum age
jops is meant for people aged at least [TO COMPLETE: minimum age, for example 16]. If you think a younger child has given us data, write to us and we will delete it.
13. The mobile app
- The app asks for a single Android permission: access to the Internet. It uses neither your location, nor your contacts, nor the camera, nor the microphone, nor notifications, nor an advertising identifier.
- When you choose a CV, the app sends the file you selected (PDF or Word, 5 MB at most) to our servers.
- Kept on the phone: your sign-in tokens (in the device's secure storage), your language, your theme, your "stay signed in" choice and the remembered e-mail address.
- To open a CV, the server gives a link valid for 5 minutes.
14. Changes to this page
If we change this policy in an important way, we will say so on the site before it takes effect. The date of the last update is at the top of the page.
15. Contact us
A question about your data? Write to us at contact@jops.africa, or by post to: jops, Ouagadougou, Burkina Faso.