Your information should help trade, not become the product.

• Your email address and securely protected password.
• Name, phone number, business or farm, location, market role, and crop expertise.
• Listings, QR records, quality scans, orders, and payment status.
• Basic technical information needed to secure and operate the service.

Account profiles and platform activity are stored in KarpoLink's private hosted database. Passwords are never stored as readable text. Signup profile details may also be sent to a Karpolax-controlled Google Sheet when that connection is enabled, to support onboarding and customer service.

• Create and secure your KarpoLink account.
• Personalise buyer, seller, crop, and marketplace tools.
• Attribute listings and Karpolax-issued QR records correctly.
• Process orders and confirm payment status.
• Support users, prevent misuse, and improve the platform.

KarpoLink does not sell personal information. Relevant trade information may be visible to market participants, while payment and service providers receive only what is needed to perform their services. Records are retained while your account is active and as reasonably required for security, trade records, legal obligations, and dispute handling.

You may ask to review, correct, or delete eligible personal information. You may also update your account role, crop expertise, and contact details inside KarpoLink. Some transaction records may need to be retained for legitimate business or legal reasons.

KarpoLink uses secure, HTTP-only sessions and one-way password protection. Choose a unique password and do not share it. Karpolax will never ask you to send your password, mobile-money PIN, or card PIN.

Karpolax collects your verified email, applicant profile, selected role, assessment responses, start and deadline times, submitted scores, draft rubric feedback, and recruiter decision history. Optional adjustment requests support accessibility. Do not include diagnoses or unrelated sensitive information in profile fields or answers.

Applications are stored in the private KarpoLink database hosted by Supabase, separately from marketplace profiles. Authorized recruitment administrators can review them in the Workflow recruitment tab or the administrator recruitment desk. Ordinary workflow team membership does not grant access. Recruitment records are not sent to the customer signup Google Sheet. Resend processes verification codes, submission receipts, and recruiter-confirmed outcome emails. After HR invites you to proceed, you must upload a CV, cover letter, and ID document inside your email-verified application. Files are stored in private Cloudflare object storage, with ownership and review records in the private database. Only you and authorised recruitment administrators can access your uploaded documents; HR downloads are audited. CVs and cover letters, including PDF text and page images, are sent to OpenAI for draft evidence extraction. HR must review and correct the extracted job-related evidence before it is used to prepare a role suitability report. ID documents are reserved for confidential manual identity review and are not sent for automated analysis. Do not email identity documents. These reports do not establish document authenticity or make hiring decisions.

Each role has six multiple-choice questions and four written scenarios. The standard assessment lasts 25 minutes after an explicit start. Verification and profile completion are untimed. Refreshing does not reset the deadline. At expiry, the last successfully saved answers are locked. Approved accessibility adjustments can provide additional time before the deadline.

Written answers, their role context, questions, and scoring guidance are processed through OpenAI to prepare draft evidence-based rubric scores. We do not send profile fields, email addresses, or interaction counts for grading. Avoid including personal information in written answers. The integration requests no stored response application state; provider security and retention policies still apply. After submission, applicants can see their assessment score and question-level written marks as soon as scoring finishes. Each of the ten questions contributes up to ten points, with sixty points from multiple choice and forty from written responses. Private scoring guidance and recruiter notes are not shown to applicants. Scores may be inaccurate. A human recruiter reviews the original evidence and confirms all progression decisions and outcome emails. Word count, writing style, and inferred authorship are not scoring criteria.

Question copying and context menus are discouraged. The application records limited client-reported counts of copy or context-menu attempts and pasted answers. It does not collect clipboard contents or record keystrokes. These incomplete events cannot prove outside assistance or machine authorship, are excluded from grading, and do not automatically penalize or reject anyone. Copy deterrents cannot prevent screenshots or external tools.

Documents and records are retained to administer recruitment and handle review requests, not for marketing. HR can remove uploaded documents and associated analysis while preserving a minimal audit entry and the assessment record. Contact comms@karpolax.com for access, correction, eligible deletion, an adjustment, or human review. Submitted answers are locked against self-service edits to preserve the assessment record. Recruitment information is not sold or published in the marketplace.