Your information on Karpolink

• Your email address, verification status, and protected sign-in records.
• Name, phone number, business or farm, location, market role, and crop expertise.
• Listings, QR records, quality scans, orders, and payment status.
• Basic technical information needed to secure and operate the service.

Account profiles and platform activity are stored in KarpoLink's private hosted database. Verification codes are stored as one-way hashes, not readable codes. Resend processes your email address and verification email to deliver sign-in codes. Existing protected password records may remain for legacy accounts, but customer sign-in no longer accepts passwords. Signup profile details may also be sent to a Karpolax-controlled Google Sheet when that connection is enabled, to support onboarding and customer service.

• Create and secure your KarpoLink account.
• Personalise buyer, seller, crop, and marketplace tools.
• Attribute listings and Karpolax-issued QR records correctly.
• Process orders and confirm payment status.
• Support users, prevent misuse, and improve the platform.

KarpoLink does not sell personal information. Relevant trade information may be visible to market participants, while payment and service providers receive only what is needed to perform their services. Records are retained while your account is active and as reasonably required for security, trade records, legal obligations, and dispute handling.

Checkout collects your name, email, delivery phone number and address, including when you order without an account. You enter your delivery place and select a country. Uganda deliveries also include your selected district. These details are stored with your order for delivery and customer support. Checkout no longer sends your address to a map or location-search service.

Stripe collects card details on its secure checkout page. KarpoLink does not store your card number or security code. Verified payment records, prices, delivery charges and customer contact details are held in our private database for fulfilment and support. Resend delivers your receipt and an order notification to the authorised Karpolink administrator, including the items, delivery address and contact details needed to fulfil your order. Your phone number is used for delivery contact, not automated text confirmations or marketing. A necessary, protected browser cookie allows guest buyers to access their own checkout and receipt for up to 30 days. Your browser keeps your basket's products and quantities so you can continue shopping, plus an opaque checkout reference so an interrupted payment can be recovered without creating a duplicate. Guest orders are not linked to an existing account just because the email addresses match.

You may ask to review, correct, or delete eligible personal information. You may also update your account role, crop expertise, and contact details inside KarpoLink. Some transaction records may need to be retained for legitimate business or legal reasons.

Customer and administrator sign-in use six-digit codes sent to your email. Codes expire after ten minutes, can be used only once, and have limited verification attempts. Administrator access also requires an approved email and an active administrator record. KarpoLink uses secure, HTTP-only session cookies and limits repeated code requests. Protect access to your email account and never share your code. Karpolax support will never ask you to send a sign-in code, mobile-money PIN, or card PIN.

Karpolax collects your verified email, applicant profile, selected role, assessment responses, start and deadline times, submitted scores, draft rubric feedback, and recruiter decision history. Optional adjustment requests support accessibility. Do not include diagnoses or unrelated sensitive information in profile fields or answers.

Applications are stored in the private KarpoLink database hosted by Supabase, separately from marketplace profiles. Authorized recruitment administrators can review them in the Workflow recruitment tab or the administrator recruitment desk. Ordinary workflow team membership does not grant access. Recruitment records are not sent to the customer signup Google Sheet. Resend processes verification codes, submission receipts, and recruiter-confirmed outcome emails. After HR invites you to proceed, you must upload a CV, cover letter, and ID document inside your email-verified application. Files are stored in private Cloudflare object storage, with ownership and review records in the private database. Only you and authorised recruitment administrators can access your uploaded documents; HR downloads are audited. CVs and cover letters, including PDF text and page images, are sent to OpenAI for draft evidence extraction. HR must review and correct the extracted job-related evidence before it is used to prepare a role suitability report. ID documents are reserved for confidential manual identity review and are not sent for automated analysis. Do not email identity documents. These reports do not establish document authenticity or make hiring decisions.

Each role has six multiple-choice questions and four written scenarios. The standard assessment lasts 25 minutes after an explicit start. Verification and profile completion are untimed. Refreshing does not reset the deadline. At expiry, the last successfully saved answers are locked. Approved accessibility adjustments can provide additional time before the deadline.

Written answers, their role context, questions, and scoring guidance are processed through OpenAI to prepare draft evidence-based rubric scores. We do not send profile fields, email addresses, or interaction counts for grading. Avoid including personal information in written answers. The integration requests no stored response application state; provider security and retention policies still apply. After submission, applicants can see their assessment score and question-level written marks as soon as scoring finishes. Each of the ten questions contributes up to ten points, with sixty points from multiple choice and forty from written responses. Private scoring guidance and recruiter notes are not shown to applicants. Scores may be inaccurate. A human recruiter reviews the original evidence and confirms all progression decisions and outcome emails. Word count, writing style, and inferred authorship are not scoring criteria.

Question copying and context menus are discouraged. The application records limited client-reported counts of copy or context-menu attempts and pasted answers. It does not collect clipboard contents or record keystrokes. These incomplete events cannot prove outside assistance or machine authorship, are excluded from grading, and do not automatically penalize or reject anyone. Copy deterrents cannot prevent screenshots or external tools.

Documents and records are retained to administer recruitment and handle review requests, not for marketing. HR can remove uploaded documents and associated analysis while preserving a minimal audit entry and the assessment record. Contact comms@karpolax.com for access, correction, eligible deletion, an adjustment, or human review. Submitted answers are locked against self-service edits to preserve the assessment record. Recruitment information is not sold or published in the marketplace.

Resolve stores buyer claims, shipment details, linked batch records, uploaded evidence, corrections, review versions, response drafts and outcomes in your private account. Records and extracted content are held in the private KarpoLink database; original files are held in private Cloudflare object storage. Public QR verification does not reveal these reviews or their attachments.

When you process evidence or request a review, relevant documents, images and case details are sent to OpenAI for extraction and evidence-based analysis. The integration requests no stored response application state; provider security and retention policies still apply. Upload only information you are authorised to share and omit unrelated personal or commercial information. Check extracted content and findings against the originals. Resolve does not verify document authenticity, decide liability, send messages or accept settlements for you.

Earlier analysis versions are retained so you can inspect the evidence used at the time. Closing a review does not delete its records. Contact comms@karpolax.com for access, corrections or eligible deletion. Report downloads can contain buyer identities, amounts and source excerpts; preview them and share only with intended recipients.