Privacy Policy

Who Controls Your Data

Seirah is the data controller for the personal data described in this policy — it decides why and how that data is processed. You can reach us about anything in this policy at the address in "Contact Us" below.

Legal Basis & Your Rights Under the PDPL

Seirah processes personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations. We rely on the following legal bases: performing the contract between us, when we process the data needed to create, store, render and share your resume or profile; your consent, for non-essential cookies, marketing communications and any optional publishing of your CV or profile, which you may withdraw at any time; our legitimate interests, for securing the platform, preventing abuse and understanding aggregate usage; and compliance with a legal obligation, where a law requires us to keep or disclose data. Under the PDPL you have the right to be informed, to access your data, to request a copy of it in a readable format, to have inaccurate data corrected, to request destruction of your data, and to withdraw consent. Write to us to exercise any of these; we answer within thirty (30) days. If you are not satisfied with our response you may complain to the Saudi Data & AI Authority (SDAIA).

Data We Collect

We collect basic account information such as your name, email and password, the content you add or upload to build your resume (your professional and education details and any resume files you upload), and general technical usage and device data that helps us run and improve the service.

How We Use Your Data

We use your data to provide, operate and improve Seirah's services, including processing your resume content through AI tools to build, translate or improve it at your request, to process payments, and to contact you about your account or service updates.

Sharing Data With Third Parties

We do not sell your personal data to anyone. We may share your data, only to the extent necessary, with trusted service providers who help us operate the platform, including: AI service providers (such as Google Gemini) to process your resume content when you use AI tools, PDF and image rendering providers (such as Cloudflare) to convert your CV into a downloadable file, payment service providers to handle payments, and providers of sign-in, usage analytics and technical error monitoring services such as Google Analytics, Google Tag Manager, Microsoft Clarity and PostHog, and, where you have consented to marketing cookies, Meta and TikTok for advertising measurement. All of these providers are required to protect your data and may not use it for any other purpose.

Where Your Data Is Stored & Transferred

Your data is hosted on infrastructure operated by our providers, and some of them process it outside the Kingdom of Saudi Arabia — in particular Amazon Web Services and Cloudflare for storage and rendering, Google for AI processing, and PostHog on its European Union infrastructure for product analytics. Where data leaves the Kingdom we transfer it only on the bases the PDPL permits, and only under contracts that require the recipient to apply a level of protection at least equivalent to ours and to use the data solely for the service they provide to us.

Data Retention & Deletion

We keep your data while your account is active. You can request full deletion of your account and data at any time by contacting us at [email protected], and we will delete your data from our systems and ask our third-party providers to delete their copies, within a reasonable time and in line with applicable laws.

CVs Uploaded Without an Account

Rate my CV and Roast my CV accept a file from a visitor who is not signed in. We process that file only to produce the analysis you asked for: it is sent to our AI provider, the result is returned to you, and the stored file is deleted from our servers as soon as the analysis finishes, whether it succeeded or failed. We keep no copy of the document, and the analysis result itself is held only long enough to show you the result page. The legal basis is your request for the service; by uploading a file you ask us to process it for that single purpose. Do not upload a CV containing information you are not willing to have processed by an AI provider.

Data Security

We apply appropriate technical and organizational measures to protect your data from unauthorized access or use.

Children's Privacy

Our services are intended for adults and are not directed at children under 13. We do not have an age-verification process, so we rely on you confirming this when you create an account, and we do not knowingly collect data from children under that age. If we learn we have collected a child's data without parental consent, we will delete it promptly. Contact us at [email protected] if you believe this has happened.

Your Rights

You have the right to access, correct or request deletion of your data. Contact us and we will help as soon as possible.

Changes to This Policy

We may update this policy from time to time, and any changes will be posted on this page.

Cookies & Similar Technologies

Seirah and our service providers use cookies and similar technologies to keep the service working (such as keeping you signed in), remember your preferences, measure how the site is used and attribute marketing campaigns. We currently use Google Analytics, Google Tag Manager, Microsoft Clarity and PostHog to understand usage and improve the experience, and, only if you accept marketing cookies, Meta Pixel and TikTok Pixel to measure the performance of our ad campaigns. You can accept or decline non-essential cookies from the cookie notice shown on the site, and you can control or delete cookies at any time through your browser settings; disabling essential cookies may affect how the service works.

The Cookies We Set

Essential: a session cookie and a CSRF token cookie, which keep you signed in and protect forms against forged requests — these expire when your session ends or within two weeks, and the service cannot work without them; and a language cookie that remembers whether you chose Arabic or English, kept for one year. Preference: a record of your cookie choice, kept in your browser for one year so we do not ask again. Analytics and marketing: cookies set by Google Analytics, Google Tag Manager, Microsoft Clarity and PostHog to measure usage, and by Meta and TikTok to measure ad campaigns — these are set only after you accept them, and typically expire between one day and two years depending on the provider. You can change your choice at any time from the "Cookie settings" control in the footer, and delete any cookie from your browser settings.

Advertising

We may show ads or run advertising campaigns with partners such as Google. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to our site and/or other sites on the Internet. You can opt out of personalized advertising by visiting Google Ads Settings (https://www.google.com/settings/ads) or www.aboutads.info/choices.

Contact Us

For any privacy questions, email us at [email protected].