Privacy Policy

Longa is a pre-launch job and freelance marketplace for the SADC region, operated from Namibia. For anything in this policy, including deletion requests, write to privacy@longa.work.

• Your first name and surname, so the invitation can be addressed to you.
• Your email address, which is the only channel we use to contact you before launch.
• Your country, so we can open countries in the order people are waiting for them.
• The page you signed up from (for example landing) and the time you joined.

We do not ask for a CV, ID number, phone number or date of birth on the waitlist, and we do not buy contact lists from third parties.

One purpose only: to tell you when Longa opens in your country. We use your country to order the rollout. We do not use waitlist details for advertising, profiling or automated decision-making.

Waitlist entries are stored in a managed PostgreSQL database hosted by our infrastructure provider, Railway, in its US-East region in the United States, and a copy may be mirrored into a private spreadsheet that only the founding team can open. Access is limited to the people who run the waitlist. We use HTTPS for all traffic between your browser and our servers.

Because our servers are in the United States, using Longa from a SADC country means your information is transferred to and stored outside your country. If you are in South Africa, this is a transfer of personal information across the border under POPIA; you can ask us at any time what we hold about you and have it deleted.

Until launch plus twelve months, or until you ask us to delete it — whichever comes first. After that, rows are deleted rather than archived.

We do not sell, rent or trade personal data. We share it only with the processors that host the service (our database and email providers), and only to the extent needed to run it. If we are ever required to disclose data by a lawful order, we will tell you unless we are legally barred from doing so.

• Ask for a copy of what we hold about you.
• Ask us to correct a name or email address that is wrong.
• Ask us to delete your entry — it removes you from the invitation queue.
• Unsubscribe from any email with the one-click link in its footer.

Email privacy@longa.work from the address you signed up with and we will action it within 30 days.

• Your sign-in details: email address and a one-way hash of your password (never the password itself).
• Your profile: name, city and country, headline, skills, the pay and work you are looking for, and photos if you add them.
• Your gender and year of birth, only if you choose to add them (both are optional).
• Documents you upload — CV, ID, certificates. Each file is checked before it can be opened, and only files that pass are served.
• Your applications, your answers to screening questions, and the messages you exchange.
• What you do in the feed (jobs shown, opened, saved or skipped), which is how the feed learns what to show next.

When you apply, the employer sees your profile, your skills, your answers, the documents you chose to attach, and whether your ID is verified on Longa. You can withdraw an application at any point before you are hired, and you can delete your account from Settings.

Employers never see your gender or year of birth. On paid plans they see only totals across everyone who applied to a job (for example, how many applicants are 25–34), and only when at least five people applied, so no one person's answer can be picked out.

On the Enterprise plan an employer can run a trust check on an applicant. It uses only what is on Longa (whether your ID is verified and how complete your profile is). It does not search the internet, social media or any outside records.

The match score on a job is calculated by our own code: it compares the skills the employer listed as required with the skills on your profile, and takes your location and pay expectations into account. A job with no required skills listed says so instead of showing a score. Employers see applicants sorted by the same score.

Some features send a limited amount of text to Google's Gemini API:

• Checking new job and gig posts for scams and abuse (the text of the post).
• A short summary of an applicant for the employer (the job's required skills, the applicant's skill names and match score — not the CV).
• The Enterprise trust check (the applicant's first name, skill names and whether their ID is verified).
• Draft emails an employer can edit before sending (the applicant's name, the job title and the company name).
• The in-app assistant on plans that include it (your message, and your first name, city, skills and plan).

CVs, ID documents and private messages are never sent to an AI provider. Google processes these requests under its API terms; while Longa is in preview it uses Google's free API tier, under which Google may use the submitted text to improve its products. We will move to the paid tier, which does not, before launch. Without an AI provider the features fall back to simple built-in rules.

An employer on the Business plan can choose to decline, automatically, applications that are missing a skill the job lists as required. If that happens you are told the application was declined, and your other applications are not affected. No other decision about you is made without a person.

The demo accounts on /sandbox are shared by everyone who opens them and are reset every hour. Do not type personal information into them.

Account data lives in the same managed PostgreSQL database (Railway, United States); uploaded files are stored with Cloudflare R2, which may keep them in data centres outside your country. When you delete your account it is closed at once and permanently erased after a 30-day grace period, during which signing in again restores it.

The waitlist page sets no advertising cookies and loads no third-party trackers. It uses only what the site needs to work and to count waitlist sign-ups in aggregate. Once you sign in, the app keeps a short-lived session token in your browser and a sign-in cookie that scripts cannot read, so you do not have to log in on every visit. Signing out removes both.

Longa is for people aged 16 and over. If you believe someone under 16 has joined the waitlist, write to us and we will remove the entry.

If this policy changes in a way that affects you, we will email the address on the waitlist before the change takes effect. The date at the top always shows the current version.