Privacy Policy

TrueSouth is a career-coaching platform operated by Neostrat (Pty) Ltd, a company registered in South Africa (“TrueSouth”, “we”, “us”). We are the responsible party (data controller) for the personal information processed through truesouth.io. This policy explains what we collect, why, and the rights you have under South Africa’s Protection of Personal Information Act (POPIA).

Questions or requests: privacy@truesouth.io.

• Account details — your name, email address, and password (stored only as a one-way hash).
• Career profile — your career state, dream-job responses, CV content, and LinkedIn profile details that you choose to provide.
• Usage data — basic technical logs (IP address, browser type, timestamps) needed to run the service securely.

We practise data minimisation: we ask only for what a feature genuinely needs, and we do not require proof documents for any discount.

The sensitive career information you share lives in a personal vault. Vault fields are encrypted at rest using AES-256-GCM. No TrueSouth team member can read a vault record without an explicit, per-record access grant from you, and every access is written to an audit log. This is a deliberate design choice, not a setting you have to turn on.

We use your information to provide the coaching features you ask for (CV editing, LinkedIn scoring, and related tools), to operate and secure your account, and to communicate with you about the service. AI-assisted features may process the content you submit to generate suggestions, which you always review and approve before anything is applied. We do not sell your personal information, and we do not use it for third-party advertising.

Some features send the text you submit to a third-party AI provider (Anthropic) solely to generate the suggestion you requested. That content is processed to return a result and is not used to train external models. You can use most of the platform without invoking AI features.

We keep your information for as long as your account is active. If you close your account, we delete or irreversibly anonymise your personal information within a reasonable period, except where we are legally required to retain certain records. You can request deletion at any time (see your rights below).

You have the right to access the personal information we hold about you, to ask us to correct it, to object to processing, and to request deletion (“right to be forgotten”). To exercise any of these, email privacy@truesouth.io and we will respond within the timeframes POPIA requires. You also have the right to lodge a complaint with the Information Regulator of South Africa.

TrueSouth’s v1 service is offered to residents of South Africa and the United Arab Emirates only. It is not offered to, or intended for, residents of the European Union or the wider EEA. If we become aware that an account belongs to an EU/EEA resident, we will close it and delete the associated data. See our Terms of Service for the full territorial scope.

We protect your information with encryption in transit and at rest, hashed passwords, access auditing, and a documented breach-response process. No system is perfectly secure, but we treat your career data as genuinely sensitive and design accordingly.

We may update this policy as the product evolves. When we make material changes we will update the date above and, where appropriate, notify you directly.