Privacy Policy
Last updated: May 2026
Plain English version. No legal jargon. If something's unclear, email justingroom98@gmail.com.
Who we are
Groco (groco.co.za) is a South African government job board. We parse the DPSA weekly vacancy circular and make it searchable. We are not affiliated with the Department of Public Service and Administration or any government body.
Groco is built and run by Justin Groom, based in East London, Eastern Cape. Contact: justingroom98@gmail.com
What we collect
- Your email address — when you create an account. If you sign in with Google, we receive your name and email from Google.
- Profile information — name, ID number, date of birth, qualifications, work history — only if you choose to complete your profile for Z83 pre-fill. This is entirely optional.
- Certified documents — scans or photos you upload to the Certification Vault (ID, qualifications, professional registrations). See the Vault section below.
- Saved jobs and application status — the jobs you save and mark as applied.
- Usage data — pages visited and search queries — used only to improve search relevance. Not linked to you personally.
How we use it
- Job search — to show you relevant vacancies and filter results.
- Z83 pre-fill — your profile data is used to populate the Z83 form when you apply for a job.
- Email alerts — weekly job alerts matched to your preferences, and expiry reminders for documents in your Vault. Every email has an unsubscribe link.
- Account security — login confirmation emails and password resets.
- Service improvement — aggregate, anonymised usage patterns to understand which features are useful.
What we never do
- ✓We never sell your data. Not to anyone, ever.
- ✓We never share your information with employers, government departments, or recruitment agencies.
- ✓We never share personal profile data (name, ID number, qualifications) with ad networks.
- ✓We never read your certified documents. They are encrypted and only accessible by you.
- ✓We never send you emails unrelated to your Groco account or the job alerts you opted into.
Certification Vault
The Vault lets you upload certified copies of your documents — ID, qualifications, professional registrations — so they're ready when you're shortlisted.
Your documents are stored in a private, encrypted storage bucket. Access is controlled by Row Level Security: only your account can access your files. Groco staff cannot view or download your documents. Files are never shared with any third party.
Groco tracks the certification date of each document and sends you a reminder when a document is expiring soon (within 30 days). You can delete any document from the Vault at any time — this permanently removes both the file and its record.
Email communications
If you create an account, you may receive:
- Weekly job alerts — sent every Saturday if you have email alerts enabled in your profile. You can disable these in your dashboard at any time.
- Document expiry reminders — sent when a certified document in your Vault is expiring within 30 or 7 days.
- Account emails — login confirmation, password reset. These cannot be disabled as they are required for account security.
Every marketing or alert email includes an unsubscribe link. You can also manage preferences in your dashboard under Profile settings.
Data storage
Groco uses Supabase to store your data. Supabase servers are hosted on AWS in the EU (Ireland region). All data is encrypted in transit (HTTPS) and at rest. Passwords are hashed — we cannot see your password. Row Level Security ensures that only your account can read or modify your personal data.
Your rights (POPIA)
Under the Protection of Personal Information Act (POPIA), you have the right to:
- Access — request a copy of the personal information we hold about you.
- Correction — ask us to correct inaccurate information.
- Deletion — request deletion of your account and all associated data.
- Withdraw consent — opt out of non-essential data processing at any time.
To exercise any of these rights, email justingroom98@gmail.com. We'll respond within 5 business days.
Tracking and analytics
Groco uses Meta Pixel and TikTok Pixel to measure the effectiveness of our advertising campaigns. These services use cookies to track visits to groco.co.za and may share anonymised data with Meta Platforms (Facebook/Instagram) and TikTok.
We do not share personal information — such as your name, ID number, or qualifications — with these services. Where email addresses are shared (for example, to measure whether an ad led to a sign-up), they are hashed using SHA-256 before transmission so that the raw address is never sent.
You can opt out of interest-based advertising by adjusting your settings on Facebook and TikTok, or by disabling cookies in your browser settings.
Cookies
Groco uses session cookies set by Supabase Auth to keep you logged in. These expire when you sign out or close your browser.
We also use cookies set by Meta Pixel and TikTok Pixel for advertising measurement. See the "Tracking and analytics" section above for details and opt-out options.
Changes to this policy
If we make significant changes to how we handle your data, we'll notify registered users by email before the changes take effect. Minor updates (wording, clarifications) will be reflected on this page with an updated date.