Privacy Policy

This policy explains what personal data SAQR collects, why, who it is shared with, and the choices you have. SANAD Technology is the controller of personal data processed through SAQR. We process personal data in line with Qatar's Law No. 13 of 2016 on Personal Data Privacy Protection and other applicable law.

1. Data we collect

• Account data: name, email, phone, password (stored only as a secure hash) and account role.
• Candidate profile: CV file and the text read from it, job title, headline, summary, skills, certifications, experience, education, years of experience, notice period, expected salary, languages, city, country of residence, nationality and Qatar residency (QID) status.
• Employer data: company details, job posts, notes, pipeline stages, interview kits and shortlist feedback.
• Usage and security data: sign-ins, IP address, browser type, and an audit log of sensitive actions.
• Payment data: plan and payment status. Card details are handled by our payment provider; SAQR never stores them.

2. How we use it

• to provide SAQR: profiles, applications, job matching, talent search and client shortlists;
• to fill in your profile from your CV when you ask us to;
• to send service emails (account confirmation, password reset, application updates and job alerts you set up);
• to keep SAQR secure, prevent fraud and abuse, and meet legal obligations;
• to improve SAQR using aggregated statistics.

We process your data to perform our agreement with you, on your consent (for example optional profile fields and talent-search visibility), for our legitimate interest in running a secure service, and where the law requires it. We do not sell personal data and do not use it for third-party advertising.

3. Who can see your data

• Employers you apply to see your full profile and CV. Clients of SANAD see the candidates included in a shortlist link they receive; contact details are not shown on shortlists.
• Registered employers see a limited summary of visible profiles in talent search, without contact details, unless they unlock the profile under their plan.
• Service providers that run SAQR for us, under contract and only on our instructions: hosting (Namecheap), email delivery (Zoho Mail), payments (Stripe, when paid plans are enabled) and AI processing (Anthropic, when advanced AI is enabled — CV text and job details are sent for processing and are not used to train their models).
• Authorities, when the law requires it.

Some providers process data outside Qatar. Where that happens we use providers with appropriate safeguards, as required by Qatari law.

4. Nationality and residency

Nationality and Qatar residency are optional. Residency (whether you hold a Qatar ID) is used because it decides whether an employer can hire you locally or needs a new work visa. Nationality is shown to employers for information only and is never used to calculate match scores or rank candidates.

5. Automated scoring

SAQR calculates a match score that explains which skills and requirements you meet and what is missing. The score helps people review applications; it does not make the hiring decision. You can ask us to explain how a score was calculated or ask a person to review it.

6. How long we keep data

• Account and profile data: while your account is open. If you close it, we delete or anonymise it within 90 days.
• Applications: kept for 24 months after the job closes so employers can meet their record-keeping needs, then deleted.
• Security and audit logs: up to 12 months. Payment records: as long as tax law requires.

7. Security

Passwords are stored with strong one-way hashing, sessions are protected, connections use HTTPS, sensitive actions are logged, and CV files are only available to the people allowed to see them. No system is perfectly secure; if a breach affects your data we will notify you and the authorities as the law requires.

8. Your rights

• access the personal data we hold about you and receive a copy;
• correct it (most of it you can edit yourself in Profile & CV and Account);
• delete it or close your account;
• withdraw consent or object to processing, for example by hiding your profile from talent search;
• complain to the competent authority in Qatar if you believe your data has been mishandled.

To use these rights, email us from the address on your account. We may need to confirm your identity first.

9. Cookies

SAQR uses only essential cookies: to keep you signed in, protect forms (CSRF), and show one-time messages. We do not use advertising or third-party tracking cookies.

10. Children

SAQR is for people aged 18 and over. We do not knowingly collect data from children.

11. Changes to this policy

We will post any changes on this page and update the effective date. If a change is significant we will tell you by email or in SAQR before it takes effect.