1. Who we are
AfriHire operates a workforce verification and hiring platform for the African professional driving and logistics sector. In this policy, “AfriHire”, “we”, “us” and “our” refer to the AfriHire platform operator; “you” refers to any driver, employer representative, referee or visitor who uses the platform.
We act as the data controller for account, verification and marketplace data processed through the platform. Where an employer processes candidate data inside their own systems after a hire, that employer is a separate controller for those activities.
2. Information we collect
- Account data: name, email address, phone number, password hash, preferred language and account role (driver, employer, vetting agent, administrator).
- Driver profile data: years of experience, licence classes, vehicle experience, skills and certifications, home city and country, availability status and salary expectations.
- Identity verification data: government identity document images, a facial capture (selfie), and the verification outcome, document number and expiry returned by our verification provider.
- Employment history data: employers, roles, dates, vehicle types and route corridors you declare, plus referee names, job titles, employers, email addresses and phone numbers you supply for verification.
- Employer data: company name, registration number, tax identifier, sector, address, contact details and uploaded compliance documents.
- Marketplace activity: job posts, applications, invitations, shortlists, interview records and messages exchanged on the platform.
- Technical data: IP address, device and browser information, timestamps, and security and rate-limiting logs.
3. Why we process your information
- To create and operate your account and authenticate you securely.
- To verify your identity, licences and employment history, and to issue the AfriHire Employment Passport and its verification badges.
- To match drivers with jobs and allow verified employers to search verified talent.
- To contact previous employers and referees you name, strictly for the purpose of confirming the employment record you submitted.
- To send transactional communications: verification requests and reminders, application updates, interview invitations, and security notices.
- To detect, investigate and prevent fraud, credential falsification, abuse and unauthorised access.
- To comply with legal obligations and to establish, exercise or defend legal claims.
4. Legal bases
We rely on: performance of our contract with you (operating your account, passport and marketplace features); your consent (identity verification using biometric facial comparison, optional marketing messages, and publishing a public passport link); our legitimate interests (platform security, fraud prevention, service improvement); and compliance with legal obligations.
Where we rely on consent, you may withdraw it at any time. Withdrawing consent for identity verification means we can no longer maintain your verified badges.
5. Identity verification and biometrics
Identity verification is performed through a specialist verification processor acting on our instructions. Your identity document image and facial capture are transmitted to that processor over an encrypted channel, compared, and the result is returned to AfriHire.
AfriHire stores the verification outcome, the document type, the masked document reference and expiry, and the audit trail of the check. Raw identity images are held in a private, access-controlled store and are only retrievable by you, by authorised AfriHire vetting staff and administrators for review purposes.
6. Who we share information with
We do not sell your personal data and we do not use it for third-party advertising.
- Verified employers: they see your professional profile, verification badges and employment history. Direct contact details are masked until you apply to a role or accept an invitation.
- Previous employers and referees you name: they receive only the specific employment record they are asked to confirm, plus your name, and never your identity documents or other applications.
- Anyone holding your public passport link, if you choose to publish one: that page shows a limited summary — name, badges, headline experience — and no contact details or documents.
- Service providers: identity verification, email delivery, cloud database and storage hosting, and error monitoring. All are bound by contract to process data only on our instructions.
- Authorities or legal counsel: where required by law or to protect rights, safety or platform integrity.
7. International transfers
Our infrastructure and some processors operate outside the country where you live. Where personal data leaves your jurisdiction we rely on recognised transfer safeguards, including standard contractual clauses and processor commitments on security and confidentiality.
8. How long we keep information
- Account and profile data: for the life of your account, then up to 12 months after closure to resolve disputes and meet legal duties.
- Identity verification records: up to 5 years from the check, as anti-fraud and audit evidence.
- Employment verification correspondence and audit trails: up to 5 years.
- Messages, applications and interview records: 3 years after the hiring decision.
- Security and rate-limiting logs: up to 12 months.
9. Your rights
Subject to local law, you may request access to your data, correction of inaccurate data, deletion, restriction of or objection to processing, a portable copy of the data you provided, and withdrawal of consent. You may also ask us not to include your profile in employer talent searches.
You can exercise most of these directly in Settings. For anything else, contact us using the details in section 12. We respond within 30 days and will tell you if we need to verify your identity first.
10. Security
Data is encrypted in transit and at rest. Access to personal data is governed by role-based database policies, so drivers reach only their own records, employers reach only candidates and jobs they are entitled to see, and identity documents are held in private storage requiring short-lived signed links.
Uploads are restricted by file type and size, sensitive endpoints are rate limited, and privileged actions are recorded in an audit trail. No system is perfectly secure — please use a strong, unique password and tell us immediately if you suspect unauthorised access.
11. Children
The platform is for people of legal working and licensing age in their country and is not intended for anyone under 18. We delete accounts we learn belong to minors.
12. Contact and changes
For privacy questions or to exercise your rights, contact privacy@afrihire.africa. If you are not satisfied with our response you may complain to your national data protection authority.
We may update this policy as the platform evolves. Material changes will be announced in the product and by email before they take effect, and the effective date above will be revised.
