Your career data is important personal data (CV, expected income, performance, and sometimes voice recordings) that we handle carefully, even though not all of it falls under the "sensitive data" category as specifically defined by Item (11) of Article One of Saudi Arabia's Personal Data Protection Law. We apply that law at every step.
What we collect
Your email, name, and phone from your Zayenha Hub account, plus whatever you upload yourself: your CV, test answers, and recorded defenses — with your explicit consent. If you consent from the cookie banner, page views and technical performance metrics (detailed in our Cookie Policy). The free resume-check tool never stores your resume or posting text — it is processed in memory only for the check itself. We log two technical fingerprints (hashes) that cannot be reversed into the original text — one for your resume, one for the posting — along with the numeric match score and the count of matched/missing terms, plus a technical fingerprint of your device address (IP) to limit abuse. If you happen to be signed in while using the tool, the scan is linked to your account.
Your rights
Access to your data, full export in an open format any time, and the right to request deletion — completed within 30 days of your request.
Voice recordings
A recorded defense needs a separate, explicit consent. You control whether it appears on a public verification page, and it is deleted immediately on request, and automatically 30 days after recording regardless. After the recording is deleted, the verification credential (status and score) stays visible and valid to an employer until it expires (12 months) — the deletion removes the audio file only, not the test result.
Who sees your profile
We never show your profile to employers unless you explicitly ask us to, and you can withdraw that visibility at any time.
Who we share your data with
Your account is unified with Zayenha Hub — it manages your identity, billing, and subscription. AI tool processing runs through specialized technical providers, who only ever receive your CV text, your answers, and the job posting text you enter to carry out your specific request — never your core account data. If you subscribe to our newsletter, your email and phone reach Zayenha Hub solely for marketing communication. We never sell your data to any third party, and we never use it for advertising beyond what you've explicitly agreed to.
How long we keep your data
We keep your account and CV data as long as your account stays active, and delete it within 30 days of your request. Usage logs (including page views, if you consented to them) are automatically deleted after 7 days for anonymous visitors and free accounts, and 90 days for subscribers. Recorded defenses are automatically deleted after 30 days; the transcribed text remains only as long as your account stays active, then is deleted with it within the same 30-day window. Billing, subscription, and newsletter data are managed by Zayenha Hub under its own policy — we don’t store a copy of them here.
The legal basis for our processing
We process your core account data (email, name, phone) to fulfil our service agreement with you. Any additional data — your CV, answers, recordings, or newsletter subscription — is processed only with your explicit consent, which you withdraw yourself at any time (the unsubscribe link in every newsletter email, deleting your CV/recordings from within the platform, or emailing us at z@zayenha.com for any other case).
Contact us about your privacy
For any request, question, or complaint about your personal data, email us at z@zayenha.com. Data controller: Zayenha Hub for Apps (Commercial Registration 7042574579).
Where your data is hosted
Your data is stored and processed on Cloudflare’s global network — meaning it may be processed on servers outside Saudi Arabia within that provider’s network. The basis for this transfer is technical necessity for running the platform itself (there is no local alternative without this network), and we apply the same contractual and technical protection guarantees regardless of processing location.
Automated decisions in our tools
Some of our tools compute a result automatically with no human review (a resume match score, a STAR-answer evaluation, a professional-verification test result). These are guidance results that show you the source and reasoning, not a final decision made about you — and we never share them with any employer unless you explicitly ask us to.
Technical security
Your connection to the platform is fully encrypted (HTTPS), access to your data is limited by account permissions, and passwords and secrets are never stored as readable text.
Backups
Our database’s point-in-time recovery system (Cloudflare D1) keeps a technical copy of your data recoverable for up to 30 days after a deletion request, solely for disaster-recovery purposes — it carries the same protection as your live data and drops out of that system’s window automatically after that period. This cap is specific to that system, not a promise that every technical trace is erased from every system we may use.
Right to correction
If you find your data inaccurate or incomplete, correct it yourself from your Zayenha Hub account settings (email, name, phone), or from within the platform for your CV and answers, or email us and we will correct it within 30 days.
Mandatory vs. optional data
Your email, name, and phone from Zayenha Hub are mandatory to use the platform — there is no account without them. Everything else (your CV, your answers, your recorded defenses) is entirely optional, uploaded by you with your explicit consent, and our tools do not work without it.
Your right to complain to the regulator
If you're not satisfied with how we handled your complaint, you have the right to file one with the Saudi Data and AI Authority (SDAIA), the competent authority for enforcing Saudi Arabia's Personal Data Protection Law.