Skip to content
Job Central

Privacy Policy

Last updated 14 October 2026Version 2026-10

1.Who we are

Job Central is operated by Rexta Technologies ("Job Central", "we", "us"). We run a hiring platform where candidates build profiles and apply to roles, and organizations post roles and review applicants.

For personal data that we collect to run accounts and the platform, we are the data controller. When an organization receives an application from you, that organization decides how it uses the application, and it is responsible for its own handling of that data. You can reach us at hello@jobcentral.com.

2.The data we collect

We collect only what we need to run the service. The main groups are:

GroupExamples
AccountEmail address, name or company name, how you sign in (password or Google), a salted hash of your password, the dates you accepted our terms, your time zone.
Candidate profileHeadline, summary, location, phone number, photo, work history, education, certifications, achievements, skills, tools, links (LinkedIn, portfolio, GitHub), work and salary preferences, visibility choices.
ResumesThe PDF or DOCX file you upload, and the details we read from it (for example contact details, work history, education, and skills). You review parsed details before they are saved.
OrganizationCompany name, industry, team size, location, website, LinkedIn page, logo, description, and the roles you post.
ApplicationsYour answers, your resume, a snapshot of your profile at the time you apply, the status history, interview details, and any message the organization sends with a decision.
Billing (organizations only)Your plan, billing currency, invoices and payment history, and for each saved card: the card brand, last four digits, expiry month and year, issuing bank, and a Paystack reference used to charge renewals. Full card numbers and security codes go straight to Paystack and never reach us.
Messages to usWhat you send through the contact form: name, email, phone number if you add one, topic, subject, and message.
Chats with ZoeWhat you type to Zoe, the site assistant, and her replies, with your name and email if you share them. Signed in, the chat is saved with your account so you can continue it. As a visitor, it is saved only if you allow functional cookies; otherwise it lives only in the open page.
Technical dataIP address, the country your connection comes from (used only to show prices in NGN or USD), browser and device type, pages requested, and security logs. We keep a hashed form of your IP address when we record consent or contact messages.
CookiesSmall files that keep you signed in and remember choices. See the Cookie Policy for the full list.

We do not ask for government identity numbers or health information. Card payments are processed by Paystack: Job Central never receives or stores full card numbers or security codes (CVV). Please do not put any of these in your profile or resume.

3.Where your data comes from

Most data comes from you: when you sign up, complete your profile, upload a resume, apply, or write to us. If you choose Google sign-in, Google gives us your email address, your name, and a Google account identifier. We never receive your Google password.

4.Why we use your data and our legal bases

PurposeLegal basis
Create and run your account, sign you in, and keep it secureContract (providing the service you asked for) and legitimate interests (security).
Build and show your profile, handle applications, schedule interviews, and send the emails that go with themContract.
Parse resumes, suggest matches, and rank applicants to help organizations read applications fasterContract and legitimate interests. See automated processing below.
Send service messages such as verification codes, password changes, and status updatesContract and legitimate interests.
Take payment for paid plans, renew them, send receipts and billing notices, and keep invoicesContract and legal obligation (tax and accounting records).
Answer messages you send usLegitimate interests, and consent where you give it through the contact form.
Answer questions through Zoe and keep your chat so you can continue itLegitimate interests, and consent for visitors who allow functional cookies.
Show prices in your likely currencyLegitimate interests. We read only the country of your connection and keep nothing beyond the currency choice in a cookie.
Remember optional preferences through functional cookiesConsent.
Detect abuse, prevent fraud, and enforce our termsLegitimate interests and legal obligation.
Meet legal duties, such as responding to lawful requestsLegal obligation.

Where we rely on consent you can withdraw it at any time. Withdrawing does not affect what we did before.

5.Automated processing: matching and shortlisting

Job Central reads resumes to fill in profile fields, scores how well a profile fits a role, and ranks applicants for an organization. These scores are advisory. They never make a hiring decision on their own, and an organization always reviews applicants and decides.

  • Scoring does not use your name, photo, age, gender, nationality, or the prestige of a school.
  • Every score comes with plain reasons, such as how many required skills matched.
  • Text inside a resume is treated as data, never as instructions.
  • You can ask for a person to review any automated result, and you can object to it. Write to us using the details below.

6.People listed on a company page

An organization can list people, such as founders and recruiters, on its public company page. The organization enters their name, role, and an optional photo. Those people do not have accounts and cannot sign in through that listing.

The organization is responsible for having each listed person's agreement before it lists them. We ask the organization to confirm this each time. If you are listed and do not want to be, ask the organization to remove you, or write to us through the contact page and we will help remove the listing.

7.Who sees what

  • Your profile is private until you publish it, and you can only publish once it is complete.
  • A published profile is visible to anyone who has its link. It asks search engines not to index it. You choose whether to show your phone number, email address, salary expectation, and links. They are hidden by default.
  • When you apply to a role, the organization that posted it sees your answers, your resume, and a copy of your profile as it was when you applied. Other organizations do not see your application.
  • Organizations are visible to everyone through their public company page once published.
  • Our staff access personal data only when needed to run the service or help you, and only as far as their role requires.

8.Service providers

We use providers to run Job Central. They process data on our instructions and only to provide their service.

Provider typeWhat they do
Database and file storageStore account data, profiles, applications, and uploaded files. Resumes are kept in private storage.
Hosting and deliveryServe the website and the application programming interface.
Email deliverySend verification codes, notices, and application emails.
Google sign-inLets you sign in with your Google account, if you choose to.
Paystack (card payments)Processes card payments for organizations on paid plans. Paystack receives the card details you enter on its payment page, the account email address, the amount and currency, and a reference that links the payment to your organization. It returns the card brand, last four digits, expiry, bank, and a reusable authorization reference.
Intelligence serviceReads resumes, scores matches, and ranks applicants. It runs as a separate service that receives only the data it needs.
Language model provider (when switched on)May receive the text of a Zoe conversation to help write a reply. It does not receive your account, profile, resume, or files.

We do not sell personal data. We do not use it for advertising.

9.International transfers

Our providers may process data in countries other than your own, including outside Nigeria, the European Economic Area, and the United Kingdom. Where we transfer personal data internationally, we use safeguards recognized by the Nigeria Data Protection Act 2023 and, for users in the EEA and the UK, by the GDPR and UK GDPR, such as contractual protections with each provider.

10.How long we keep data

DataHow long
Account, profile, and filesUntil you delete your account.
After you delete your accountYour personal data and uploaded files are erased. Applications you sent are kept in anonymized form as records labelled as a deleted candidate, so the hiring history and counts of organizations stay accurate.
Verification codes and sign-in tokensCodes expire after 10 minutes. Sign-in tokens expire as shown in the Cookie Policy.
Cookie consent recordsUp to 6 months in your browser. For signed-in users, the record is kept with the account.
Messages sent through the contact form24 months, then deleted.
Saved cards and invoices (organizations)A saved card is removed when you remove it or delete your account, and Paystack is told to stop accepting its reference. Invoices and payment history are kept with the account and erased when the account is deleted, unless the law requires us to keep them for longer.
Chats with ZoeDeleted after 90 days without use, or straight away when you clear the chat.
NotificationsRead notifications after 90 days. All notifications after 180 days.
After an account is deletedA one-way hash of the email address for 14 days, so the same address cannot open a new account straight away. Nothing else about the account is kept.
Security logsA limited period needed to protect the service, and never including passwords, codes, or tokens.

We may keep data for longer when the law requires it or when we need it to resolve a dispute.

11.How we protect data

We protect data with measures that fit the risk. Passwords are stored as salted hashes. One-time codes are stored only as keyed hashes, expire quickly, and can be tried a limited number of times. Sessions use secure cookies. Resumes are stored privately and opened only through short-lived links for authorized people. Requests are validated and rate limited. See the Security page for more.

No online service is perfectly secure. If a breach puts your rights at risk, we will tell you and the relevant authority within the time the law requires.

12.Your rights

Under the Nigeria Data Protection Act 2023, and under the GDPR and UK GDPR if you are in the EEA or the UK, you have the right to:

  • Access the personal data we hold about you and get a copy.
  • Correct data that is wrong or incomplete. Most of it you can edit yourself in your profile.
  • Delete your data. You can delete your account in settings.
  • Restrict or object to certain processing, including automated processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Complain to the Nigeria Data Protection Commission (NDPC), or to your local data protection authority.

The Data Protection page explains how to make a request and what to expect. We aim to answer within 30 days.

13.Children

Job Central is for people aged 18 and over. We do not knowingly collect data from anyone under 18. If you think a child has given us data, contact us and we will delete it.

14.Changes to this policy

We will update this policy when our practices change. The date and version at the top show the latest update. If a change is significant, we will tell you in the product or by email before it applies.

15.Contact

Questions or requests: hello@jobcentral.com, or use the contact form. Please say that your message is a data and privacy request so we can route it correctly.

Questions about this page?

We are happy to explain anything here in plain words.

Contact us
Back to top