Privacy Notice

Who we are

Satal Scout is a candidate-sourcing service for recruiters. The responsible party under the Protection of Personal Information Act 4 of 2013 (POPIA) is Satal Scout, based in South Africa and contactable at the address below.

For any privacy question, objection or deletion request, contact privacy@satal.co.za. This is the fastest route and it reaches the person responsible.

If you are a candidate

You may be here because you found us in a search, or because a recruiter mentioned us. We want to be direct about what happens.

What we collect. We collect information from public professional profiles — your name, the area you are based in, your headline, your current and previous roles, your education, your listed skills, and where it is published, a work email address. We collect it from LinkedIn public profile data through a third-party search provider. We did not get it from you directly.

What we do with it. We compare it against a job description a recruiter has given us and produce a match score with written reasons, so the recruiter can decide whether to approach you. A person, not software, decides whether you are contacted.

Why we are allowed to. We rely on the legitimate interests ground in section 11(1)(f) of POPIA — the recruiter's interest in filling a role and, we would argue, your interest in being considered for work you are suited to. We have written down that assessment and will share our reasoning if you ask.

How long we keep it. Ninety days after the search you appeared in is completed, then it is deleted automatically. If a recruiter shortlists you for a role they are actively working, we keep it for ninety days after the last time they acted on your record — and never longer than twelve months from that search, whatever happens.

What you can ask us to do. You can ask what we hold about you, including the match score and the written reasons our system produced. You can ask us to correct it. And you can object to us processing your information at all — if you do, we delete what we hold and record that you objected, so a later search does not pick you up again. That last part matters: without it, deleting you would only last until the next search.

Email privacy@satal.co.za with the link to your profile. We do not charge for this and we will not ask you to justify the request.

If you are a recruiter using Satal Scout

We collect your name, email address, and the job descriptions you submit, in order to run your account and searches. We process this to perform our contract with you (section 11(1)(b)). We keep it while your account is open. Deleting your account removes your account and its searches and results.

You are responsible for how you use candidate information you obtain through this service, including how you contact people.

Who we share it with

We use third-party operators to run the service, and they process information on our instruction only:

• Apify — public profile search (United States / European Union)
• OpenAI — match scoring (United States)
• Supabase — database hosting (Germany)
• Cloudflare — encrypted backups (European Union)
• Resend — transactional email (European Union)
• Rackzar — server hosting (South Africa)

We do not sell personal information, and we do not share candidate information with anyone other than the recruiter whose search produced it.

Information sent outside South Africa

Some of those operators are outside South Africa, so your information is transferred abroad. We rely on section 72(1)(a) of POPIA: those providers are bound by agreements and by laws giving protection substantially similar to POPIA. Backups are encrypted before they leave our systems.

Automated scoring

We use an AI model to produce a match score and written reasons. That output is a recommendation, not a decision. A recruiter reviews the search before it runs and decides who to approach. If you would like a human to look again at how you were scored, ask us and we will.

Security, and complaints

Access is restricted, data is separated per recruiter account, and backups are encrypted. If personal information is ever accessed by someone unauthorised, we will notify the Information Regulator and the people affected, as section 22 requires.

If we have not dealt with you properly, you can complain to the Information Regulator (South Africa) at inforegulator.org.za. We would rather you told us first, but that is your right either way.