Effective Date: April, 2026
This Privacy Policy describes how MITA Labs, Inc. ("MITA Labs", "Ajiri", "we", "us", "our") handles personal information collected through Ajiri.ai and related digital properties, services, and marketing activities (collectively, the "Services").
Ajiri.ai is a product of MITA Labs, Inc., a company incorporated in the State of Delaware, United States, with operational offices at Jahazi Building, 154 James Gichuru Road, Nairobi, Kenya, P.O. Box 22494 - 00505.
This Privacy Policy applies to personal information collected from hiring teams, employers, and organisations that use Ajiri ("Users"). It does not apply to personal information collected about job applicants and candidates, which is covered by our separate Candidate Privacy Policy.
1. Personal Information We Collect
Information You Provide
When you register for or use the Services, you may provide:
- Contact data: your name, professional title, company name, email address, and phone number.
- Account data: the username and password you create to access Ajiri, and any profile information you add.
- Job and role data: job titles, role requirements, and hiring criteria you enter when using Ajiri to generate job descriptions or screen candidates.
- Communications: messages or feedback you send us through the platform, email, or social media.
- Marketing preferences: your choices regarding receiving communications from us.
Information From Third-Party Authentication
Ajiri allows you to sign in using Google or Microsoft Outlook OAuth. When you authenticate through these services, we receive:
- Your name and email address as registered with that service.
- A unique identifier associated with your third-party account.
- Basic profile information made available based on your account settings with that service.
We do not receive access to your emails, calendar, contacts, or other personal data beyond what is necessary to authenticate your identity and create your Ajiri account.
Information Collected Automatically
When you use the Services, we and our service providers may automatically collect:
- Device and browser data: operating system, browser type, screen resolution, IP address, language settings, and general location (city or region).
- Usage data: pages visited, time spent on pages, navigation paths, access times, and whether you have opened our emails or clicked links within them.
- Cookies and similar technologies: see Section 5 below for details.
2. How We Use Your Personal Information
We use the personal information we collect for the following purposes:
Service Delivery
- To create and manage your Ajiri account.
- To operate, maintain, and improve the platform and its features.
- To process job descriptions, distribute roles, and generate candidate shortlists using AI screening.
- To send you service-related communications, security alerts, and support messages.
- To personalise your experience based on your usage and preferences.
AI-Powered Features
Ajiri uses artificial intelligence to screen candidate CVs, rank applicants by role fit, and generate job descriptions. When you submit a role and receive a shortlist, our AI systems process candidate data on your behalf. You are the data controller for candidate personal data; Ajiri acts as the data processor.
Ajiri uses third-party AI providers to power these features. We require all AI providers to:
- Process data only for the purpose of delivering the Services.
- Not use your data or candidate data to train their own AI models.
- Comply with applicable data protection laws.
Research and Development
We may use aggregated, de-identified data derived from usage of the Services to analyse platform performance and improve our product. This data cannot be used to identify individual users or candidates.
Marketing and Communications
With your consent or where permitted by law, we may send you product updates, news, and promotional communications. You may opt out at any time as described in Section 7.
Compliance and Legal Obligations
- To comply with applicable laws and regulations, including the Kenya Data Protection Act, 2019 and applicable laws in other African markets where we operate.
- To respond to lawful requests from government authorities or regulators.
- To enforce our Terms of Service and protect the rights, safety, and property of MITA Labs, our users, and third parties.
- To prevent fraud, misuse, and unauthorised access to the Services.
3. How We Share Your Personal Information
We do not sell your personal information. We may share it in the following circumstances:
- Service providers: third-party companies that help us operate the Services, including cloud hosting, infrastructure, analytics, email delivery, and payment processing. These providers are contractually bound to process data only on our instructions.
- AI providers: third-party AI services used to power screening and generation features. Data shared is limited to what is necessary to deliver the relevant feature.
- Authentication providers: Google and Microsoft, when you use OAuth sign-in. Their use of data shared during authentication is governed by their own privacy policies.
- Professional advisors: lawyers, accountants, and insurers where necessary in the course of their professional services to MITA Labs.
- Regulatory and legal authorities: where required by law, court order, or to protect legal rights.
- Business transfers: in the event of a merger, acquisition, or sale of assets, your information may be transferred to the relevant successor entity, with notice provided to you.
4. Candidate Data and Your Obligations as Data Controller
When you use Ajiri to screen job applicants, you upload or receive candidate personal data (including CVs, names, contact details, and work history). In this context:
- You are the data controller responsible for ensuring that candidates have been informed that their applications may be processed by an AI screening tool.
- Ajiri is the data processor acting on your instructions.
- A Data Processing Agreement (DPA) governing the handling of candidate data is incorporated into your agreement with Ajiri.
Candidates who apply through roles posted via Ajiri are notified at the point of application that AI screening will be used to evaluate their application. If you collect CVs through your own channels and upload them to Ajiri, you are responsible for ensuring candidates have been informed accordingly.
5. Cookies and Tracking Technologies
We use cookies and similar technologies to operate and improve the Services. These include:
- Session cookies: temporary cookies deleted when you close your browser, used to maintain your login session.
- Persistent cookies: cookies that remain on your device for a set period to remember your preferences and settings.
- Analytics cookies: used to understand how users interact with the Services, including which pages are visited most.
You can control cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Services.
6. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Services. We also retain data as necessary to comply with legal obligations, resolve disputes, and enforce our agreements.
Candidate data processed through AI screening is retained for the duration of the relevant hiring process and deleted thereafter, unless you instruct otherwise or legal requirements apply.
You may request deletion of your account and associated data at any time by contacting us at the details in Section 10.
7. Your Rights and Choices
Depending on your location, you may have the following rights regarding your personal information:
- Access: request a copy of the personal information we hold about you.
- Correction: request correction of inaccurate or incomplete data.
- Deletion: request deletion of your personal information, subject to legal obligations.
- Objection: object to processing of your data for marketing purposes.
- Portability: request your data in a structured, machine-readable format.
- Withdrawal of consent: where processing is based on consent, withdraw it at any time without affecting prior processing.
To exercise any of these rights, contact us at privacy@ajiri.ai. We will respond within the timeframes required by applicable law.
To opt out of marketing communications, click the unsubscribe link in any marketing email or contact us directly. You will continue to receive service-related communications.
8. Data Protection - Kenya and African Markets
MITA Labs is committed to compliance with the Kenya Data Protection Act, 2019 (DPA 2019) and applicable data protection legislation across the African markets in which Ajiri operates. In accordance with these obligations:
- We have registered with the Office of the Data Protection Commissioner (ODPC) in Kenya as required.
- We process personal data lawfully, fairly, and transparently.
- We collect only the minimum data necessary for the stated purpose.
- We implement appropriate technical and organisational measures to protect personal data.
- We do not transfer personal data outside Kenya or other applicable jurisdictions without ensuring adequate safeguards are in place.
9. Security
We implement technical, organisational, and physical safeguards designed to protect your personal information against unauthorised access, loss, and misuse. These include encrypted data transmission, access controls, and regular security reviews.
However, no method of transmission over the internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security.
10. Children
The Services are not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by updating the effective date at the top of this policy and, where appropriate, by sending you a direct notification. Your continued use of the Services after the effective date of any update constitutes your acceptance of the revised policy.
12. How to Contact Us
If you have any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact us:
MITA Labs, Inc. - Ajiri.ai
Jahazi Building, 154 James Gichuru Road
Nairobi, Kenya - P.O. Box 22494 - 00505
Email: support@ajiri.ai
Website: www.ajiri.ai
For data protection matters specifically, you may also contact the Office of the Data Protection Commissioner (ODPC) in Kenya at www.odpc.go.ke.