NEXORAFind jobs →
Privacy information: This page describes the intended data-handling principles for NEXORA. It is a product notice, not a substitute for a legally reviewed privacy policy. Confirm the final policy, data controller details and applicable Kenyan data-protection requirements before public launch.

Privacy & candidate data

NEXORA connects candidates, employers and recruitment consultancies. Candidate information should be collected for clear purposes, kept secure and shared only under appropriate access rules.

Candidate profiles

Provide only information needed for your job search. Account profile information is distinct from uploaded CVs, certificates and other supporting documents. Profile visibility and consultancy-discovery preferences should be clearly explained and changeable.

CVs and supporting documents

Candidate documents should be stored in private storage, not exposed through public file URLs. Downloads should require authentication and an authorization check. Any temporary download link should expire quickly.

Consultancy access and consent

A participating consultancy may discover only candidate profiles that have actively opted in. A consultancy requesting access to supporting documents must wait for the candidate's explicit approval. Candidates should be able to decline or revoke sharing. Revocation should stop future access, subject to any lawful record-retention requirements.

Job applications

When you apply for a vacancy, relevant application details are made available to the employer responsible for that vacancy and to authorized personnel who support the recruitment process. Application status should be visible in your candidate account.

Security and access

Your choices and requests

Use the candidate portal to update your profile and manage consultancy sharing where those controls are available. For privacy questions, correction requests or account-related concerns, contact the NEXORA team through the contact page.

Before production launch

NEXORA must publish a complete, reviewed policy identifying the data controller, lawful purposes, retention periods, user rights, complaint route, contact details and any third-party processors or international transfers that apply. Do not treat this interim notice as proof of regulatory compliance.