1. Who we are
NewGenJobs is a free job application platform for South Africans, operating at newgenjobs.co.za. We are the Responsible Party under POPIA and are registered as an Information Officer with the Information Regulator of South Africa.
Information Officer contact: privacy@newgenjobs.co.za
2. What information we collect
·Account information
Your name, email address, and province when you register.
·CV data
Text extracted from your CV (PDF or DOCX). Your original CV file is compressed and stored securely. Extracted text and scores are stored in our database.
·Job applications
The jobs you apply to, the cover notes you write, and the date and method of application.
·Gmail access tokens
If you connect Gmail, we store an encrypted access token and refresh token. We request only gmail.send (to send applications) and gmail.readonly (to detect employer replies by reading sender addresses only).
·Activity data
An audit log of sensitive actions (CV uploads, applications sent, Gmail connections) for POPIA compliance.
·Device information
IP address and browser type for security logging only.
3. What we do NOT collect or do
✓We never store your Google password.
✓We never read the body content of your emails — only sender addresses and subjects to detect employer replies.
✓We never access Google Drive, Calendar, Contacts, or any other Google service.
✓We never share your CV or personal data with employers without your explicit action.
✓We never use your CV data, application history, or personal information for advertising targeting.
✓Ads shown on this platform are contextual only (based on page content, not your personal data).
4. Why we process your information (lawful basis)
We process your personal information on the following lawful bases under POPIA Section 11:
- Consent — You explicitly consent when you upload your CV and when you connect Gmail.
- Contract — Processing is necessary to provide the job application service you have requested.
- Legitimate interest — Security logging and POPIA compliance audit trails.
5. How we protect your information
- · CV files are stored in a private Supabase storage bucket — no public URLs exist.
- · Gmail tokens are AES-256 encrypted before being stored in our database.
- · All database tables have row-level security — you can only access your own data.
- · All connections use HTTPS/TLS encryption.
- · We do not transfer your data outside South Africa or the EEA.
6. Your rights under POPIA
Access (Section 23)Request a copy of all personal data we hold about you.
Correction (Section 24)Request correction of inaccurate or incomplete data.
Deletion (Section 24)Request permanent deletion of your account and all data. We complete deletion within 7 business days.
Withdraw consentWithdraw consent for CV storage or Gmail access at any time from Account Settings.
Object to processingObject to processing of your data for a specific purpose.
Lodge a complaintLodge a complaint with the Information Regulator at inforeg.org.za.
To exercise any right, go to Account Settings → My Data (POPIA) or email privacy@newgenjobs.co.za.
7. Advertising
NewGenJobs is free because we show advertisements. We use Google AdSense and the Meta Audience Network. These networks may use cookies to show relevant ads based on your browsing history across other sites. Your CV data, application history, and personal information are never shared with advertisers.
Ads are never shown on:
- · The Gmail consent screen during onboarding
- · The application review screen (when you are reviewing what will be sent)
- · The confirmation screen immediately after sending
8. Data retention
- · CV files and extracted text: retained until you delete your account or upload a replacement CV.
- · Application records: retained for 2 years or until account deletion.
- · Gmail tokens: deleted immediately when you revoke Gmail access.
- · Audit logs: retained for 5 years for POPIA compliance.
- · Account data: deleted within 7 business days of a confirmed deletion request.
9. Changes to this policy
We will notify you by email if we make material changes to this policy. The date at the top of this page always reflects the most recent update.