AApplyWorkالعربية

Privacy Policy

Last updated: 2026-11-02

Initial draft — subject to legal review before public launch.

This policy explains how ApplyWork collects, uses and protects your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

1. Data controller

  • ApplyWork (applywork.online). Legal entity, commercial registration and national address will be added upon issuance.
  • Privacy contact: privacy@applywork.online

2. Data we collect

  • Account data: email, name, preferred language.
  • Professional data you provide: CV, experience, skills, certificates, job preferences.
  • Technical data: IP address, browser type, sign-in logs — for security.
  • Company data: company name, commercial registration, hiring team members.

3. Purposes and legal basis

  • Providing the service: job matching, CV tailoring and applying on your instructions — based on your consent and our contract.
  • Security, fraud prevention and record keeping — legitimate interest and legal obligation.
  • Marketing emails — only with your separate consent, which you can withdraw anytime.

4. Artificial intelligence

  • We may use AI providers (such as Anthropic and OpenAI) to process your CV — only with your explicit consent.
  • Before sending, we remove ID/Iqama numbers, photo and date of birth, and pseudonymize contact details.
  • We do not use your data to train AI models and choose zero-retention settings where available.
  • Tailored CVs only rephrase and reorder — they never add experience, skills or certificates you don't have.

5. Sharing

  • With employers you apply to or explicitly agree to share your profile with — only.
  • With service providers (hosting, email, AI, payments) under contracts that protect your data.
  • We never sell your personal data or expose your profile to employers without your consent.

6. Transfers outside KSA

  • Some processing may occur with providers outside the Kingdom under SDAIA transfer rules, including standard contractual clauses and risk assessments, with data minimized.

7. Security and retention

  • We encrypt sensitive data and keys (AES-256), always use HTTPS, and strictly isolate each user's data.
  • We keep your data while your account exists and delete it when you delete your account, except where the law requires (e.g. anonymized security logs).

8. Your rights

  • Access your data and get a copy (instant export from My account).
  • Correct and update your data.
  • Delete your account and data immediately from My account.
  • Withdraw consent to AI processing or marketing at any time.
  • Lodge a complaint with the Saudi Data & AI Authority (SDAIA).

9. Data breaches

  • If a breach occurs we notify SDAIA within 72 hours and affected users without delay where harm is likely.

10. Changes

  • We may update this policy, will notify you of material changes, and ask for renewed consent where required.