Last Update: January 26, 2026

Welcome to TalentaHire (“the Platform”), a recruitment solution operated by Wezesha Marketing Ltd (“we,” “us,” or “our”). This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website and/or our AI-powered SaaS recruitment platform.

We are committed to protecting the privacy of your data in accordance with the Data Protection Act, 2019 (Kenya) and, where applicable, the General Data Protection Regulation (GDPR) given our European server hosting.

Important Note on Our Structure: TalentaHire is a product of Wezesha Marketing Ltd. For the purposes of data protection laws, Wezesha Marketing Ltd is the Data Controller responsible for your personal data.

This Policy applies to:

• Visitors to our website and users of any tools we may host on our website.
• Recruiters and Hiring Managers using our SaaS platform.
• Candidates who create profiles on our platform and/or upload CVs when applying for jobs on our website.

If you have questions about this policy or wish to exercise your data rights, please contact us:

• Data Controller: Wezesha Marketing Ltd (operating as TalentaHire)
• Email: [email protected]

We collect data to provide our AI-driven recruitment services.

• Account Data: Name, email address, phone number, employer/company name, and password credentials.
• Candidate Profile Data: CVs/Resumes, education history, skills, certifications, and contact details uploaded by candidates.
• Communications: Content of emails or support messages you send us.
• Billing Data: M-Pesa transaction codes, bank transfer references, and billing contact details.

• Technical Usage Data: We use privacy-centric analytics to understand website traffic without tracking you across the web. (See our Cookie Policy for details).
• System Logs: IP addresses, browser type, and timestamps used for security and fraud prevention.

• Integrations: Data from third-party services you choose to connect (e.g., email providers).

TalentaHire utilizes Artificial Intelligence (powered by processors such as OpenAI) to assist recruiters. Transparency is our priority.

• AI Functionality: Our AI analyzes candidate profiles and CVs against job descriptions (or natural language search prompts) to provide a relevance score and a reasoning summary for that score.
• Human Decision Making: The AI is a support tool, not a decision-maker. We do not use fully automated decision-making to accept or reject candidates. All hiring and rejection decisions are made by human recruiters who review the AI’s suggestions and the full candidate profile.
• Your Rights: Under Section 35 of the Data Protection Act (Kenya), candidates have the right not to be subject to a decision based solely on automated processing. Since our system requires human review for hiring decisions, we comply with this safeguard.

Purpose	Legal Basis (Kenya DPA & GDPR)
Service Provision: Creating accounts, matching candidates, storing CVs.	Performance of Contract
AI Scoring & Recommendations: Analyzing profiles to assist recruitment.	Legitimate Interest (Efficiency for recruiters)
Billing & Payments: Processing M-Pesa or bank payments.	Performance of Contract
Security & Fraud Prevention: Protecting the platform from abuse.	Legitimate Interest
Legal Compliance: Tax records, responding to court orders.	Legal Obligation
Marketing & Analytics: sending newsletters, updates.	Consent

We do not sell your personal data. We share data only with trusted third-party service providers and data processors in the following categories:

• Cloud Hosting Providers: To securely host our servers and database.
• AI Service Providers: To generate relevance scores and summaries. Data sent to AI providers is strictly for processing and is not used to train their public models.
• Communication Providers: To deliver system emails and notifications.
• Payment Providers: Mobile money operators and banks to verify transactions.
• Legal Authorities: If required by Kenyan law or a valid court order.

Our servers are located in Europe. By using TalentaHire, you acknowledge that your data may be transferred to and processed in jurisdictions outside of Kenya. We ensure these transfers are protected by appropriate safeguards, such as the EU’s strict data protection laws (GDPR), which are recognized as adequate.

We retain personal data only as long as necessary:

• Inactive Accounts: Accounts that have been inactive for 3 years may be permanently deleted.
• Candidate Data: Retained as long as the user account is active, or until a deletion request is received.
• Recruitment & Activity Records: We retain records of hiring activities (including relevance scores and hiring outcomes) for 3 years to allow recruiters to track their hiring history and to resolve any disputes regarding the recruitment process.
• Financial Records: Transaction data is retained for 7 years to comply with relevant Kenyan laws.
• Deletion Requests: Upon receiving a valid deletion request, we will verify your identity and permanently delete or anonymize your data within 30 days, unless a legal obligation requires us to keep it.

Subject to the Data Protection Act, you have the right to:

1. Access: You can ask whether we hold your personal data and get a copy.
2. Rectify: You can ask us to correct incomplete or wrong personal data.
3. Erase: You can ask us to delete your data in certain cases (e.g., we no longer need it, you withdraw consent, or it was processed unlawfully). Some legal or public-interest reasons may prevent deletion.
4. Object: You can object to our processing (including for direct marketing). We will stop unless we have a strong legal reason to continue.
5. Restrict processing: You can ask us to suspend processing in specific situations (e.g., while we verify accuracy or if processing is unlawful but you don’t want deletion).
6. Data portability: You can get personal data you provided to us, in a structured, commonly used format, when processing is based on your consent or a contract. This covers data you gave us directly, not inferred or derived information.

To exercise these rights, email [email protected]. We may request proof of identity before processing your request.

We use appropriate technical and organizational measures to protect your data (including encryption in transit and at rest, secure authentication, and strict access controls). While we follow industry best practices, no internet transmission is completely secure and we cannot guarantee absolute security.

We may update this policy as our platform evolves. When changes occur, we’ll update this page. For material changes that affect your rights or how we handle personal data, we’ll also notify you by email (if provided) or by a prominent notice on the platform.

If you believe we have infringed your rights, please contact us first. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) in Kenya.