رازداری کی پالیسی

This policy explains how Saudi Smart Jobs collects, uses, shares and protects personal data when you use our website and apps, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations.

1. Who is responsible for your data

The controller of personal data processed through the platform is:

Operator: [Company legal name]
Commercial registration (CR) number: [CR number]
Registered address: [Registered address in the Kingdom]
Contact email: Contact form

When you apply to a job, the employer that receives your application also becomes responsible for how it uses your data for its own recruitment.

2. Personal data we collect

Account data: full name, email address, mobile number, password (stored only as a secure hash), account type and verification status.
Job seeker profile: headline, summary, nationality, work authorization status, experience, education, skills, work history, salary expectations, preferred cities and job categories, preferred language, the CV files you upload, and an optional profile photo that only you and our admin team can see.
Applications: the job you apply to, your answers to screening questions, a copy of the CV you submit, and the status, interview details and notes added by the employer.
Employer data: company details, commercial registration and other verification documents, team members and their roles, logo and job postings.
Messages: what you send us through the contact form, and the notifications we send you.
Technical and security data: session and language cookies, an encrypted device token if you enable push notifications, the city you choose or that we estimate from your device location with your permission, and sign-in records: the date and time, your IP address and the type of device or browser used to sign in, plus the IP address of your most recent visit. We use them to keep accounts secure and to detect fraud and misuse.

We do not ask for sensitive data such as religion, health, criminal records, biometric or genetic data. Please do not include it in your profile or CV.

3. Why we use it and on what basis

To create and run your account and provide the services you request (performing our agreement with you).
To send your application and CV to the employer you choose to apply to (at your request).
To send job alerts, saved search results and push or email notifications that you switch on (your consent, which you can withdraw at any time).
To verify companies, moderate job listings and prevent fraud, abuse and fake vacancies (our legitimate interest in a safe platform).
To produce aggregated statistics that do not identify anyone, such as page view and advertising counts.
To meet legal obligations and respond to lawful requests from competent authorities.

We do not sell personal data, and we do not use it for advertising profiles. Sponsored listings on the site are served by us and are not targeted using your personal data.

4. Who we share it with

Employers: only the employers whose jobs you apply to see your application and its CV. CVs are never published on the public site.
Company team members: employer users invited by a company can see that company's applicants according to their role.
Service providers that help us run the platform, such as hosting, email, SMS and push notification providers. They process data only on our instructions and under confidentiality and security obligations.
Competent authorities, where the law requires it or to protect the rights and safety of users and the public.

External job listings are applied for on the source website. Any data you give there is handled under that website's own privacy policy.

5. Transfers outside the Kingdom

Some service providers, for example push notification services, may process data outside the Kingdom of Saudi Arabia. We transfer personal data abroad only as permitted by the PDPL and its regulations on transfers, keep it to the minimum needed, and require appropriate safeguards.

6. How long we keep it

Account and profile data: for as long as your account is active, and deleted or anonymized after you ask us to close it, unless the law requires us to keep it longer.
Applications that are finished (hired, rejected or withdrawn): deleted automatically after 730 days, together with the CV copy sent with them.
CV files: until you delete them from your dashboard or close your account.
Contact messages and security logs: only as long as needed to answer you, protect the platform and meet legal obligations.
Sign-in records with IP addresses: 365 days, then deleted.

7. Your rights

Under the PDPL you have the right to:

be informed about how your personal data is collected and used;
access your personal data and obtain a copy in a readable format;
ask us to correct, complete or update your data;
ask us to delete your data when it is no longer needed, unless we must keep it by law;
withdraw your consent at any time, without affecting processing done before.

You can edit your profile, delete CVs, withdraw applications and change notification settings from your dashboard. For any other request, contact us using the details above. We may need to confirm your identity, and we will reply within the period set by the law.

8. How we protect it

CVs and company documents are kept in private storage that is never publicly accessible, connections are encrypted, device tokens are encrypted, access by our staff is limited and logged, and passwords are never stored in readable form. No system is completely secure; if a breach affects your data, we will notify the competent authority and, where required, you, within the periods set by the law.

9. Cookies and local storage

We use only cookies that the site needs to work: to keep you signed in, protect forms against forgery and remember your language and city. The installable app may keep a copy of pages on your device so they load offline. We do not use third-party advertising or tracking cookies.

10. Children

The platform is intended for people aged 18 or over. We do not knowingly collect data from children. If you believe a child has created an account, please contact us so we can remove it.

11. Changes to this policy

We may update this policy when our services or the law change. The date at the top of the page shows the latest version. If a change is significant, we will tell registered users by email or a notice on the site.

12. Questions and complaints

Contact us first and we will try to resolve your concern. You also have the right to submit a complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority under the PDPL.

Questions about this page? ہم سے رابطہ کریں