Privacy Policy

Last updated: 1 March 2026 · Designed to support the Protection of Personal Information Act 4 of 2013 (POPIA)

1. Who we are

NewGenJobs is a free job application platform for South Africans, operating at newgenjobs.co.za. We are the Responsible Party under POPIA and are registered as an Information Officer with the Information Regulator of South Africa.

Information Officer contact: support@newgenjobs.co.za

2. What information we collect

·

Account information

Your name, email address, and province when you register.

·

CV data

Text extracted from your CV (PDF or DOCX). Your original CV file is compressed and stored securely. Extracted text and scores are stored in our database.

·

Job applications

The jobs you apply to, the cover notes you write, and the date and method of application.

·

Gmail access tokens

If you connect Gmail, we store an encrypted access token and refresh token. We request only gmail.send (to send applications) and gmail.readonly (to detect employer replies by reading sender addresses only).

·

Activity data

An audit log of sensitive actions (CV uploads, applications sent, Gmail connections) for POPIA compliance.

·

Device information

A one-way, short browser identifier plus hashed IP and device type. We use it only to detect repeated ad clicks, automated traffic and account abuse; we do not store the raw browser signals used to create it.

3. What we do NOT collect or do

✓We never store your Google password.
✓We never read the body content of your emails - only sender addresses and subjects to detect employer replies.
✓We never access Google Drive, Calendar, Contacts, or any other Google service.
✓We never share your CV or personal data with employers without your explicit action.
✓We never use your CV data, application history, or personal information for advertising targeting.
✓Ads shown on this platform are contextual only (based on page content, not your personal data).

4. Why we process your information (lawful basis)

We process your personal information on the following lawful bases under POPIA Section 11:

  • Consent - You explicitly consent when you upload your CV and when you connect Gmail.
  • Contract - Processing is necessary to provide the job application service you have requested.
  • Legitimate interest - Security logging and POPIA compliance audit trails.

5. How we protect your information

  • · CV files are stored in a private, encrypted cloud storage bucket - no public URLs exist.
  • · Gmail tokens are AES-256 encrypted before being stored in our database.
  • · All database tables have row-level security - you can only access your own data.
  • · Personal data stored in our database is encrypted at rest, and sensitive credentials receive additional encryption controls.
  • · All connections use HTTPS/TLS encryption.
  • · We do not transfer your data outside South Africa or the EEA.

6. Your rights under POPIA

Access (Section 23)Request a copy of all personal data we hold about you.
Correction (Section 24)Request correction of inaccurate or incomplete data.
Deletion (Section 24)Request permanent deletion of your account and all data. We complete deletion within 7 business days.
Withdraw consentWithdraw consent for CV storage or Gmail access at any time from Account Settings.
Object to processingObject to processing of your data for a specific purpose.
Lodge a complaintLodge a complaint with the Information Regulator at inforeg.org.za.

To exercise any right, go to Account Settings → My Data (POPIA) or email support@newgenjobs.co.za.

7. Advertising

NewGenJobs is free because we display advertisements. We work with third-party advertising networks to show relevant ads. These networks may use cookies and similar technologies to serve ads based on your interests. These networks may use cookies to show relevant ads based on your browsing history across other sites. They may also use web beacons, IP addresses and similar identifiers for ad delivery, measurement, frequency capping and fraud prevention. Your CV data, application history, and personal information are never shared with advertisers.

Learn more about how Google uses data when you use partner sites or apps.

Ads are never shown on:

  • · The Gmail consent screen during onboarding
  • · The application review screen (when you are reviewing what will be sent)
  • · The confirmation screen immediately after sending

8. Data retention

  • · CV files and extracted text: retained until you delete your account or upload a replacement CV.
  • · Application records: retained for 2 years or until account deletion.
  • · Gmail tokens: deleted immediately when you revoke Gmail access.
  • · Audit logs: retained for 5 years for POPIA compliance.
  • · Account data: deleted within 7 business days of a confirmed deletion request.

9. Changes to this policy

We will notify you by email if we make material changes to this policy. The date at the top of this page always reflects the most recent update.

10. Contact us

Information Officer: support@newgenjobs.co.za
Information Regulator (South Africa): inforeg.org.za