Last updated: 21 April 2026 · ITSAGO (Pty) Ltd · POPIA Compliant
ITSAGO (Pty) Ltd is an AI-powered recruitment screening platform registered in South Africa (CIPC). We help recruiters screen job applicants using AI CV scoring and structured video interviews. Registered address: Etwatwa, East Rand, Gauteng, South Africa. Contact: hello@itsago.app · +27 62 526 4769.
Recruiters: full name, email address, company name, job title, job descriptions, and billing information processed by PayFast. Candidates: full name, email address, phone number (optional), CV documents (PDF, Word, or image), video recordings of interview answers, and AI-generated transcriptions and scores. We collect only what is necessary to provide the screening service.
Candidate data is used solely to provide the screening service to the recruiter who invited them. CV documents are read by Claude AI (Anthropic) to generate match scores. Video recordings are transcribed by OpenAI Whisper and scored by Claude AI. We do not sell, share, or use candidate data for any other purpose. Recruiter data is used to operate their account, process billing, and communicate service updates.
We process personal information under the following lawful bases as defined by POPIA: (a) Consent — candidates consent to screening when they submit their application. (b) Contractual necessity — recruiter data is processed to fulfil our service agreement. (c) Legitimate interest — service improvement and fraud prevention.
Candidate video recordings and transcripts are automatically deleted 90 days after the screening is completed or abandoned. CV documents are deleted 90 days after upload. Recruiter account data is retained for the duration of the account and deleted within 30 days of account closure upon request. Billing records are retained for 5 years as required by SARS.
ITSAGO complies with the Protection of Personal Information Act (POPIA) Act 4 of 2013. Our Information Officer is Banele Mgwevu (banele.mgwevu@itsago.app). Candidates have the right to: access their personal information, correct inaccurate information, object to processing, and request deletion. Recruiters using ITSAGO as a Responsible Party are responsible for ensuring they have a lawful basis for collecting and processing candidate information and must inform candidates that their data will be processed by ITSAGO.
By using ITSAGO, recruiters (as Responsible Parties under POPIA) appoint ITSAGO (Pty) Ltd as an Operator for the purposes of processing candidate personal information. ITSAGO processes candidate data only on documented instructions from the recruiter. ITSAGO implements appropriate technical and organisational security measures. ITSAGO does not engage sub-processors without prior authorisation. ITSAGO assists recruiters in responding to data subject requests. ITSAGO notifies recruiters of any data breaches without undue delay. This DPA is incorporated into the ITSAGO Terms of Service.
We use the following sub-processors: Anthropic (Claude AI) — CV scoring and video answer scoring, located in the United States. OpenAI (Whisper) — audio transcription, located in the United States. Supabase — database and file storage, located in the United States (AWS us-east-1). Vercel — application hosting, located in the United States. Resend — transactional email, located in the United States. PayFast — payment processing, located in South Africa. All processors are bound by data processing agreements.
Some of our sub-processors are located outside South Africa. Where personal information is transferred outside South Africa, we ensure adequate protection through contractual safeguards including Standard Contractual Clauses or equivalent mechanisms as permitted under POPIA.
All data is stored in Supabase with AES-256 encryption at rest and TLS 1.2+ encryption in transit. CV files and video recordings are stored in private buckets accessible only via time-limited signed URLs. We implement row-level security, rate limiting, input sanitisation, and regular security reviews. We will notify affected parties within 72 hours of becoming aware of a data breach.
We use essential session cookies for authentication only. These cookies are strictly necessary for the service to function and do not require consent under POPIA. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.
Under POPIA you have the right to: (a) be notified that your information is being collected, (b) access your personal information, (c) request correction or deletion of your information, (d) object to processing, (e) lodge a complaint with the Information Regulator of South Africa (inforeg.org.za). To exercise any right, email hello@itsago.app or use the deletion form below. We will respond within 30 days.
Information Officer: Banele Mgwevu. Email: hello@itsago.app. Phone: +27 62 526 4769. Address: Etwatwa, East Rand, Gauteng, South Africa. Information Regulator of South Africa: inforeg.org.za · Tel: 012 406 4818.
Under POPIA you have the right to access all personal data we hold about you. Download a complete export of your account data.
Submit your details and we will delete all your personal data within 30 days as required by POPIA.