1. Who we are
Hirely Agency operates a recruitment platform that connects Kenyan job seekers with agency-managed blue-collar opportunities. This policy explains how we handle personal data when you use our website and services.
2. Information we collect
We collect the following categories of personal information:
- Account information — your name, email address, password (stored securely by our authentication provider, never by us in plain text), phone number, and date of birth.
- Identity documents — a National ID number and a National ID document image, used to verify your identity.
- Professional documents — your CV/resume and, where required for a specific job, academic certificates and good-conduct certificates.
- Profile information — your county, town, gender, education level, years of experience, bio, and an optional profile photo.
- Payment information — a payment screenshot and transaction code submitted as proof of an account verification payment. We do not store your M-Pesa PIN or full payment card details.
3. How we store your information
We use Firebase, Google's backend platform, to operate our service:
- Firebase Authentication — manages your sign-in credentials and session securely.
- Firestore — stores your profile, applications, payments, notifications and administrative records in a secure cloud database.
- Firebase Storage — stores your private documents (National ID, CV, certificates, payment screenshots). These files are private by default: only you and our authorised administrative staff can access them. They are never exposed on public pages.
- Cloud Functions — processes privileged operations such as payment review, account verification and application submission.
- Optional public media (Cloudinary) — we may use Cloudinary to host public, non-sensitive marketing images, job banners and employer logos. We never use Cloudinary public delivery for National IDs, CVs, certificates or payment screenshots.
4. Why we collect this information
We use your information to:
- create and manage your account;
- verify your identity and that you are at least 18 years old;
- process your account verification payment;
- allow you to apply for jobs and allow administrators to review applications;
- send you notifications about your account, payments and applications;
- maintain platform security and prevent fraud;
- comply with applicable legal obligations.
5. Who can access your documents
Your private documents (National ID, CV, certificates and payment screenshots) are visible only to:
- you, when signed in to your own account; and
- authorised Hirely Agency administrative staff, for the purpose of verifying your identity, qualifications and payment.
These documents are never included in public pages, search engine metadata, sitemaps, logs, or exported spreadsheets.
6. Retention
We retain personal information for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and fraud-prevention obligations. We delete or anonymise information on request where we are not legally required to keep it. If you close your account, we will process a request to delete your data in line with applicable law.
7. Your rights
You have the right to:
- access and review the personal information we hold about you;
- correct inaccurate information through your profile;
- request deletion of your account and personal data;
- withdraw consent for processing where processing relies on consent;
- contact us about how your data is handled.
To exercise these rights, contact us using the details on our contact page.
8. Security
We use access controls, authentication, security rules and encryption provided by our hosting platform to protect your information. No method of electronic storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password and device secure.
9. Deletion requests
To request deletion of your account and associated data, contact our support team with the email address registered on your account. We will verify your identity before processing the request. Where we are legally required to retain certain records (for example, financial transaction records), we will retain only what is necessary.
10. Changes to this policy
We may update this policy from time to time. We will notify you of material changes by updating the "last updated" date above and, where appropriate, by notifying you through the platform.
11. Contact
If you have questions about this policy or your personal data, please contact us via the details on our contact page.