1. Who We Are
GenixHR is an AI-powered recruitment and HR platform built for small and medium-sized businesses in Nigeria and across Africa. GenixHR is operated by Tolani Aborisade, an HR professional based in Bradford, United Kingdom.
If you have any questions about this policy, contact us at: hello@genixhr.com
2. What This Policy Covers
This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights as a user. It applies to all users of the GenixHR platform at genixhr.com.
3. What Data We Collect
From Business Owners (Platform Users)
When you sign up and use GenixHR, we may collect:
- Your name and email address
- Your company name and business details
- Job descriptions and recruitment preferences you create on the platform
- Documents you generate (e.g. offer letters, job descriptions)
- Google account information (when you connect via Google OAuth)
From Job Candidates
When candidates apply for jobs through GenixHR, we may collect:
- Full name and contact details
- CV / résumé and application documents
- Responses to application questions
- Interview scheduling information
Automatically Collected Data
We may also collect:
- Usage data (pages visited, features used)
- Device and browser information
- IP address and approximate location
4. How We Use Your Data
We use your data to:
- Provide and operate the GenixHR platform
- Generate AI-powered job descriptions and offer letters using the Anthropic Claude API
- Store and organise your recruitment documents in your connected Google Drive
- Send interview invitations and notifications via Gmail
- Improve and maintain the platform
- Communicate important service updates with you
We do not sell your personal data to third parties.
5. How Your Data Is Stored
GenixHR is built with your data security in mind:
- Google Drive — All recruitment documents (job descriptions, candidate CVs, offer letters) are stored directly in your own Google Drive account. GenixHR does not hold copies of these documents on our servers. You remain in full control of your data at all times.
- Upstash Redis — Session and application data is temporarily stored in our database, hosted in the Cape Town, South Africa region.
- Anthropic Claude API — Job descriptions and offer letters are generated using Anthropic's AI. Data sent to the API is processed in accordance with Anthropic's Privacy Policy.
- ZeptoMail (Zoho) — Transactional emails (welcome, payment receipts, interview invites, offer letters, application digests) are sent through ZeptoMail. Recipient email addresses and the email content are processed by Zoho for delivery only.
- Paystack — Subscription payments are processed by Paystack. GenixHR does not store your card or bank details — Paystack handles payment collection directly and shares back only the transaction status and reference.
Google API Services User Data Policy
GenixHR's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data accessed through Google OAuth (Drive, Calendar, Gmail) is used solely to provide the recruitment features described in this policy — job description storage, interview scheduling, and email notifications — and is never used for advertising, sold to third parties, or read by humans except where necessary for security, legal compliance, or with your explicit consent.
Meta / WhatsApp Business Platform
Where a business owner connects a WhatsApp number, GenixHR's handling of that data complies with Meta's Platform Terms and the WhatsApp Business Messaging Policy. Messages and phone numbers processed through this integration are used only to deliver the job-posting assistant feature you enabled and are not used for any other purpose.
6. Legal Basis for Processing
We process your personal data based on:
- Contract — To provide the services you have signed up for
- Legitimate interests — To operate, improve, and secure the platform
- Consent — Where you have given explicit permission (e.g. Google OAuth connection)
7. Compliance
GenixHR is committed to compliance with applicable data protection laws, including:
- NDPR — Nigeria Data Protection Regulation (NITDA)
- GDPR — UK General Data Protection Regulation (for UK users)
As our user base expands to other African markets, we will update this policy accordingly.
8. Sharing Your Data
We only share your data with:
| Third Party | Purpose |
|---|---|
| Google (OAuth, Drive, Gmail) | Authentication, document storage, email notifications |
| Anthropic | AI generation of job descriptions and offer letters |
| Vercel | Platform hosting and deployment |
| Upstash | Session and application data storage |
| Zoho (ZeptoMail) | Sending transactional emails on our behalf (receipts, invites, notifications) |
| Paystack | Payment processing for subscription billing |
| Meta (WhatsApp Business Platform) | WhatsApp messaging for the job-posting assistant, where a business owner links a WhatsApp number |
All third-party providers are bound by their own privacy policies and data protection obligations.
9. Data Retention
- Business account data is retained for as long as your account is active
- Candidate data is retained for the duration of the recruitment process, unless you choose to delete it
- You can request deletion of your data at any time by contacting hello@genixhr.com
10. Data Deletion Instructions
You can request deletion of any data GenixHR holds about you — including account data, candidate records, and any data received via Google APIs or the WhatsApp Business Platform — at any time. To do so:
- Email hello@genixhr.com with the subject line "Data Deletion Request," from the email address associated with your account (or the WhatsApp number connected, if applicable)
- We will verify your request and delete the associated data from our systems within 30 days
- We will send you written confirmation once deletion is complete
Note: documents already stored in your own Google Drive are not affected — since GenixHR never holds a copy, you control deletion of those directly from your Drive. Disconnecting your Google account (via your Google Account permissions page) immediately revokes GenixHR's access to your Google data.
11. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data
- Object to or restrict how we process your data
- Withdraw consent at any time (e.g. disconnect your Google account)
To exercise any of these rights, contact us at hello@genixhr.com.
12. Cookies
GenixHR uses minimal cookies to keep you logged in and remember your preferences. We do not use advertising or tracking cookies.
13. Children's Privacy
GenixHR is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.
14. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of GenixHR after changes are made constitutes your acceptance of the updated policy.
15. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:
GenixHR — Built for African SMEs