Data Protection

POPIA Compliance.

Our commitment to the Protection of Personal Information Act of South Africa.

Last Updated: April 19, 2026

Markt Online (Pty) Ltd, trading as Craflo ("Company," "we," "us," or "our"), is fully committed to compliance with the Protection of Personal Information Act 4 of 2013 ("POPIA"). We respect your right to privacy and ensure that all personal information collected regarding your career, education, and identity is processed lawfully, transparently, and securely.

1. PURPOSE OF DATA PROCESSING

We collect and process your personal information strictly for the following purposes:

  • To provide our core service: parsing, structuring, and AI-generating improved Curriculum Vitae (CVs) and Cover Letters.
  • To manage your user account, dashboard access, and document storage.
  • To process secure payments for our digital services (e.g., via PayFast).
  • To communicate with you regarding service updates, technical support, or account security.

We apply the principle of minimality—we only request the data absolutely necessary to provide you with a revamped professional document.

Cross-Border Data Transfer (Section 72 of POPIA)
Because Craflo utilizes advanced third-party Artificial Intelligence engines (OpenAI and Google Gemini) to process and format your CV, your text data is temporarily transmitted to secure servers outside of South Africa. By using our service, you explicitly consent to this cross-border transfer. Please note: We operate under enterprise API agreements ensuring these third parties are legally bound to strict confidentiality and are strictly prohibited from using your personal data to train their public AI models.

2. SECURITY SAFEGUARDS

In accordance with Section 19 of POPIA, we secure the integrity and confidentiality of your personal information in our possession by taking appropriate, reasonable technical and organizational measures to prevent:

  • Loss of, damage to, or unauthorized destruction of personal information.
  • Unlawful access to or processing of personal information.

Our databases employ modern encryption standards, secure socket layer (SSL) technology, and strict internal access controls to protect your uploaded PDFs, images, and text.

3. DATA RETENTION

We retain your personal information and generated CVs in your secure dashboard to allow you ongoing access to your professional documents. You have the ability to delete specific documents or your entire account at any time. Once an account is deleted by the user, all associated personal data is permanently purged from our active databases in compliance with POPIA retention protocols, except where required by law (e.g., financial transaction records).

4. DATA SUBJECT RIGHTS

As a data subject, POPIA grants you specific rights regarding your personal information. You have the right to:

  • Access: Request confirmation of whether we hold personal information about you and request a copy of that information.
  • Correction: Request the correction or deletion of personal information that is inaccurate, irrelevant, excessive, out of date, incomplete, or misleading (which you can manage directly via your Craflo Dashboard).
  • Objection: Object, on reasonable grounds, to the processing of your personal information.
  • Erasure (Right to be Forgotten): Request the permanent deletion of your account and personal data.

5. INFORMATION OFFICER CONTACT DETAILS

If you have any questions about this POPIA statement, wish to exercise your rights as a data subject, or wish to report a suspected data breach, please contact our appointed Information Officer:

Entity: Markt Online (Pty) Ltd
Email: info@craflo.co.za
Subject Line: POPIA Compliance / Information Officer

You also have the right to lodge a complaint with the Information Regulator of South Africa if you believe we are interfering with the protection of your personal information.