Service operator: Afrolink platform operator (“Afrolink”, “we”, “us”). For privacy questions, contact privacy@afrolink.co.
Information we use
Depending on how you use the app, Afrolink may process:
- Account details: name, email address, account role (job seeker, employer or administrator), country/region, city and the password verifier used to authenticate your account. Administrator access is assigned by the operator and is not available through public self-registration. Passwords are stored as bcrypt hashes, not plain text.
- Profile information: biography and resume/CV link for job seekers; company or agency name and website for employers.
- Application information: cover letters, resume links, the role applied for, application status and employer notes. An application is shared with the employer responsible for that job.
- Platform activity: jobs viewed, jobs saved, application and subscription status, in-app notifications and basic job-view events associated with a user and job where available.
- Subscription/payment records: method/product, order or transfer reference, amount and currency, status and start/expiry dates when an available payment method is used. Google Play checkout is disabled in the current mobile app, so it does not currently receive a Play purchase token. If Play checkout is enabled in a future release, a purchase token will be sent to the Afrolink server for verification and only its SHA-256 hash will be retained. Afrolink does not receive or store your card number or Google payment credentials.
- Notification device token: the backend can store a push token and platform if a device registers for push notifications. The current mobile app does not request push permission or register that token.
- Security data: a hashed session token, session expiry/revocation data and hashed rate-limit buckets used to protect account access and reduce automated abuse.
How we use information
- Create and secure accounts, authenticate sign-ins and apply role-specific permissions.
- Display job opportunities, saved roles and application history; deliver application and subscription status notifications.
- Share an application and the information it contains with the employer responsible for that job so they can review the application and contact the applicant.
- Check subscription status and prevent duplicate or fraudulent entitlements. Google Play purchases will be verified only if the Play checkout feature is enabled; that feature is currently disabled. An administrator may review bank-transfer requests when that method is enabled.
- Operate, maintain and protect the service; measure basic product activity such as job views; investigate abuse, support requests and disputes.
When information is shared
- Employers: when you apply, the employer receives your application, account name/contact details and the resume/profile details included with that application. Do not include information you do not want that employer to review.
- Service providers: the managed API/database host processes information to run Afrolink. Google Play will process Android subscription purchase-verification requests only if checkout is enabled; it is currently disabled. Expo's push service would receive notification delivery data only if push delivery is enabled and a device is registered.
- Platform administrators: authorized administrators can access account/profile, job and payment/subscription records, view aggregate application counts, and perform restricted application-status or moderation operations. Employers can review applications for their own jobs.
- Legal and safety reasons: information may be disclosed where required by law or reasonably necessary to protect users, the platform or another person.
Afrolink does not sell personal information. Job posts and employer-supplied descriptions are shown to app users when approved; they are not a government endorsement or a guarantee of employment.
Security and retention
Accounts use bcrypt password hashing, revocable bearer sessions whose hashes are stored server-side, role/ownership checks and rate limiting. API traffic is served over HTTPS. No technical system is completely risk-free, so protect your password and report suspected account misuse.
We retain account and application information while needed to operate the service and for reasonable security, dispute-resolution and legal purposes. Payment and employment records may need to be retained where applicable law requires it. The operator should define and apply a more specific retention schedule before public launch.
Your choices and account deletion
You can edit certain profile details in the app and sign out to end the current session. The current app does not yet provide a self-service in-app account deletion action. You can submit a deletion request through our account deletion page or write to privacy@afrolink.co. Requests are handled manually; we may verify account ownership and explain any records that must be retained by law or for a legitimate security purpose. The web form is not an automatic deletion action.
Children
Afrolink is a professional job and recruitment service intended for adults. The current registration form does not collect date of birth or verify age, and the service is not designed for children. The publisher must set the Play Console target audience based on the actual launch policy.
Public website and cookies
This informational website does not include advertising or third-party analytics scripts. Only the PHP support and deletion-request pages start a first-party session with a Secure, HttpOnly, SameSite=Lax cookie, used for CSRF protection and a short per-session resubmission cooldown; other informational pages do not start a session. Website forms send requests to the configured mailbox and are not saved in a website database. The hosting provider may keep ordinary server logs, including network/request metadata, under its own retention and security practices.
Changes and contact
We may update this notice when the service or its data practices change. The “Last updated” date will change when a revised policy is published. For privacy questions or a deletion request, email privacy@afrolink.co.
This page is an operational disclosure draft, not legal advice. The operator should review it for the countries where Afrolink is offered.