1. Introduction
Welcome to Imarapath ("we," "our," or "us"). We are a hiring marketplace platform based in Tanzania that connects African talent with companies hiring across the continent. This Privacy Policy explains how we collect, use, share, and protect your information when you use our services at imarapath.com.
By using Imarapath, you agree to the practices described in this policy. If you don't agree, please don't use our services.
2. Information We Collect
From Job Seekers (Candidates)
- Account info: Name, email, password (encrypted)
- Profile info: Phone number, country, city, years of experience, bio
- Resume content: The text extracted from your uploaded PDF resumes
- Application data: Cover letters, application history, status
From Companies (Hirers)
- Account info: Company name, contact name, email, password (encrypted)
- Job postings: All content you submit when posting jobs
- Hiring activity: Application reviews, status changes, messages sent
Automatically Collected
- Usage data: Pages visited, features used, timestamps
- Device info: Browser type, operating system, IP address
- Cookies: Session cookies to keep you logged in (see Section 9)
3. How We Use Your Information
We use your information to:
- Provide and improve the Imarapath platform
- Match candidates with relevant job opportunities using AI
- Enable companies to review applications
- Send transactional emails (verification, status updates, messages)
- Detect and prevent fraud, scams, and inappropriate content
- Comply with legal obligations under Tanzanian law
4. AI Processing of Resumes
What the AI does:
- Reads your resume text and the job description
- Generates a match score from 1-100
- Identifies matching and missing skills
- Writes a brief summary of your fit
What the AI does NOT do:
- Make hiring decisions on its own — final decisions are made by humans
- Discriminate based on protected characteristics
- Share your data with other companies or jobs you didn't apply to
You can request a human review of any AI assessment by contacting us.
5. Information Sharing
We share your information ONLY in these specific cases:
- With companies you apply to: Your application details, resume, and AI score are shared with the hiring company for that specific job
- Service providers: We use Supabase (database), Anthropic (AI), and Resend (email) to operate. They process data only as needed to provide services
- Legal requirements: If required by valid legal process under Tanzanian law
We do NOT sell your personal information to anyone.
6. Data Security
We take security seriously and implement industry-standard measures:
- Passwords are hashed using bcrypt (we never store them in plain text)
- All connections use HTTPS encryption
- Database access is restricted via row-level security policies
- Email verification prevents unauthorized account creation
However, no system is 100% secure. We can't guarantee absolute security, but we'll notify you within 72 hours if a data breach affects your information.
7. Data Retention
We keep your data for as long as your account is active. Specifically:
- Active accounts: Retained indefinitely while you use Imarapath
- Deleted accounts: Removed within 30 days of deletion request
- Applications: Retained for 2 years after submission, then anonymized
- Email logs: Kept for 90 days for delivery/support purposes
8. Your Rights
Under the Tanzania Personal Data Protection Act (2022) and similar regulations, you have the right to:
- Access: Request a copy of your personal data
- Correction: Update inaccurate information (most editable in your profile)
- Deletion: Request deletion of your account and data
- Object: Object to certain processing of your data
- Portability: Request your data in a portable format
- Withdraw consent: Stop using Imarapath at any time
To exercise these rights, email us at privacy@imarapath.com. We'll respond within 30 days.
9. Cookies
We use minimal cookies — only what's necessary to keep you logged in. We don't use tracking cookies, advertising cookies, or third-party analytics cookies that follow you across the web.
10. Children's Privacy
Imarapath is intended for users aged 18 and over. We don't knowingly collect data from anyone under 18. If you believe a minor has signed up, contact us and we'll delete the account.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we'll notify you by email and update the "Last updated" date at the top of this page. Continued use after changes means you accept the updated policy.
12. Contact Us
Questions about your privacy or this policy?
- Email: privacy@imarapath.com
- Location: Dar es Salaam, Tanzania