Privacy Policy

Sawalef operates the Service from Riyadh, Kingdom of Saudi Arabia. For questions about privacy or data requests, contact hello@sawalef.ai.

Account and identity data: name, email address, and authentication identifiers when you sign in with email codes, magic links, or Google.

Candidate profile data: first and last name, title, phone, LinkedIn URL, location and country, experience, education, skills, summaries, and preferences (matching enabled, public profile, blocked companies).

Documents and media: CV files; interview video and audio; transcripts; timed highlight segments; related processing status.

Matching data: structured skills/seniority/domains/languages, nationality or Saudization-related signals where provided or inferred for filtering, search text, and embedding vectors used for retrieval.

Employer and company data: company name, domain, locale, team members, culture/role criteria, job descriptions, salary ranges for roles, refine-chat messages, and terms-acceptance records.

Introductions and hiring: introduction status and notes; interviewing timestamps; candidate check-in responses; hire/start details and salary figures reported by employers or candidates for fee and verification purposes; placement/invoice records in SAR.

Marketing and operations: demo request forms (name, email, company, hiring needs, phone, locale); product feature and engagement events; hashed IP addresses used for abuse prevention and rate limiting.

Technical data: cookies or local storage needed for sessions, locale, and security; device/browser information typically provided with web requests.

Directly from you (forms, interview, settings, check-ins, demo requests).

From files or links you provide (CV upload; LinkedIn URL enrichment via our enrichment provider).

Automatically from use of the Service (logs, feature signals, engagement events, hashed IP).

From employers when they create roles, request intros, or record hires.

From authentication providers (for example Google) when you choose that sign-in method.

To create and operate profiles, interviews, matching, introductions, pipelines, and notifications.

To personalize the AI interview and generate summaries, highlights, and match narratives in English and Arabic.

To let employers evaluate shortlisted candidates and, after you accept an introduction and the employer accepts Employer Terms, to unlock contact details, CV, and full interview video for that hiring process.

To send transactional emails (intro requests, reminders, check-ins, invites) and founder/ops notices for demo requests.

To calculate and verify success fees, run hire check-ins, and support admin review of unconfirmed or inconsistent hire reports.

To secure the Service, prevent abuse, debug issues, and improve product quality.

To comply with law and enforce our Terms.

Matched employers typically see limited candidate information before introduction acceptance (for example first name, title, location, and highlight clips) — not full contact details, CV, or full video.

After a candidate accepts an introduction and the company has accepted Employer Terms, that company can access unlocked contact information, CV, and full interview video for the hiring process.

Candidates see company and role context related to introductions they receive.

If you enable a public profile, information on that public page may be viewable by anyone with the link.

Admins operating the platform may access workspace data as needed for support, safety, matching operations, and hire verification.

We do not sell personal data.

We use trusted service providers to run the Service, including: cloud hosting; database and file storage; authentication; email delivery; LinkedIn profile enrichment; conversational AI / speech providers for interviews; and large-language-model providers for parsing, summaries, highlights, embeddings, and matching assistance.

These providers may process data outside Saudi Arabia (including in the United States, Europe, or other regions where they operate). Where we transfer personal data internationally, we take steps appropriate to the nature of the Service and applicable Saudi data-protection requirements, including contractual and technical safeguards with providers.

Current categories of providers include Supabase (auth, database, storage), Vercel (hosting), Resend (email), EnrichLayer (LinkedIn enrichment), ElevenLabs (interview voice AI), OpenAI (AI processing), and Google (optional OAuth / fonts).

We keep personal data for as long as needed to provide the Service, maintain accounts, complete introductions and fee/guarantee periods, resolve disputes, and meet legal or security requirements.

Interview media, transcripts, and profiles are retained while your account/session remains active for matching or hiring history, unless deleted earlier through available product controls or a validated deletion request.

Hashed IP addresses and telemetry are kept as needed for abuse prevention and operations.

We use industry-standard measures appropriate to a hiring platform, including encrypted transport (HTTPS), access-controlled private storage for CVs and interview videos, signed short-lived media URLs, hashed intro/check-in tokens, and hashed IPs for rate limiting.

No method of transmission or storage is completely secure. Please use a strong unique email account and protect devices you use for interviews.

Depending on your role and applicable law (including the Saudi Personal Data Protection Law where it applies), you may request access, correction, or deletion of personal data, object to or restrict certain processing, or withdraw consent where processing is consent-based.

In product, candidates can adjust matching and public-profile settings, block companies, and use available controls to delete or retake interview sessions. You may sign out at any time.

To exercise privacy rights, email hello@sawalef.ai with enough detail to verify your request. We may need to retain certain records (for example fee, security, or legal records) where required.

You may unsubscribe from non-essential marketing emails where offered; transactional hiring emails may still be necessary to operate introductions you are part of.

We use essential cookies and local storage for authentication sessions, interview session continuity, locale, and security. We do not currently use third-party advertising pixels. Disabling essential cookies may prevent sign-in or interview flows from working.

The Service is directed at professionals participating in hiring. It is not intended for children. If you believe we have collected data from a child, contact us and we will take appropriate steps.

We may update this Privacy Policy. We will revise the “Last updated” date and, for material changes, provide additional notice where appropriate.

Privacy requests and questions: hello@sawalef.ai.