What we collect.
What we don't.

Knock ("we", "us") is a South African graduate talent network connecting final-year and recent STEM graduates with companies hiring for their profile. We are the responsible party under POPIA for the personal information described in this notice.

If you have any concern about how your information is handled, contact the Information Officer first. If you remain unsatisfied, you have the right to complain to the Information Regulator of South Africa (inforeg@justice.gov.za).

We only collect what we need to run the matching service and report engagement to the companies posting opportunities.

We do not collect: your exact GPA or transcript, financial or banking details, ID or passport numbers, your physical address, or any special personal information (race, health, religion, political views, biometric data).

You're added to a university- and field-specific WhatsApp group based on the details you give us. You receive a starter pack of opportunities on joining, then a handful of new drops most weeks, matched to your profile.

Each opportunity link is a tracked link — when you click it, we record that the click happened, at group level. Roughly weekly, we ask whether you applied to anything from the previous week; your answer is recorded against your profile to improve matching.

None of this is used to make any automated decision about you that has a legal or similarly significant effect — it's used purely for matching and reporting.

Companies who pay for a talent drop receive an aggregated, group-level engagement report — how many students in a group clicked, self-reported application activity, and a cost-per-engaged-candidate figure. This kind of reporting is genuinely non-identifying at the group level, so it doesn't require your individual sign-off the way sharing your actual name and contact details would.

We only ever share information that could identify you individually — your contact details — with a specific company, for a specific role, after you've been asked directly and said yes. Here's exactly how that works: if a company wants to reach you specifically, we message you on WhatsApp naming that company and role. You have 72 hours to respond. If you say yes, we transfer your name and contact details to that company for that role only — nothing more, nowhere else. If you say no, or don't respond, nothing is shared and nothing changes for you. Every request like this is independent — saying yes once doesn't carry over to the next one. We do not sell your information to anyone, for any purpose.

We use the following third parties to run Knock. Each only processes your information on our instruction, for the purposes described in this notice:

• WhatsApp Business (Meta) — to deliver group messages and opportunity drops. Processed outside South Africa.
• PostHog — to record link clicks and engagement analytics. PostHog assigns your device a unique identifier that can be linked across your visits (not a one-time, per-visit code) — this lets us measure engagement over time, but PostHog is not given your name, phone number, or email. Processed outside South Africa (PostHog's EU region).
• Google Sheets — to store and organise pilot data internally, access restricted to the Knock team.

Where a provider processes information outside South Africa, we take reasonable steps consistent with Section 72 of POPIA to keep it protected to a comparable standard.

Access to identifying information (your phone number and university email) is restricted to the Knock team, kept separate from your matching profile, and linked only by an internal reference — companies never see your identity without your consent. In the event of a security compromise, we'll notify the Information Regulator and affected students without undue delay, as required under Section 22 of POPIA.

During the pilot, your information is kept to run the matching service. After the pilot ends, we delete your personal information within 30 days unless you opt in to remain on Knock for future cohorts — if you do, we'll confirm that with you directly and this notice keeps applying. Retention differs slightly by category:

We don't currently make any automated decision about you with a legal or similarly significant effect. If we introduce features like automated match scoring in future, we'll tell you plainly what factors go into it, show you your own score, give you a way to ask for human review, and ask for your consent again before it applies to you.

This notice applies to Knock's pilot phase. When Knock's web platform launches, a revised notice will cover new features and you'll be asked to review and re-confirm consent at that point. The current version of this notice always lives at knocktalent.co.za/privacy.