Privacy Policy

Who is responsible

GulfHire ("we", "us"), based in Ottawa, Ontario, Canada, is responsible for the personal information it collects to run gulfhire.com and its services.

When an employer uses its GulfHire workspace to onboard, train or collect policy signatures from its own people, the employer decides how that information is used, and we process it on the employer's behalf under the Employer Agreement. Questions about a workspace's information should go to that employer first; we will help them answer.

Questions about this policy or your information: [email protected].

What we collect

Everyone with an account

• Name, email address, password (stored only as a secure hash), preferred language, and the date you created your account and last signed in.

Candidates

• Your profile: headline, city and country, visa or work status, notice period, salary expectation, languages, skills, target roles and cities, work history and education.
• Your CV, if you upload one, and the text we read from it to suggest profile details.
• Your applications: the facts you confirm, your answers to screening questions, your note to the employer, and the employer's stage, notes about you visible to its team, interview times, offers and the reason given if you are not chosen.
• Screen work, if a job uses it: your task submission, interview answers, timing and paste events during the task, and the scores and evidence produced in grading.
• Optional: your phone number, and your ID document if you choose to verify your identity. You can cover the photo before uploading. You can also choose not to share an ID.
• Radar: your matches, which you saved or dismissed, and your feedback on them.

Employers and their teams

• Company name, website, logo, country and city, billing name, address, email and tax number, team members and their roles, job posts, the company page you publish, and documents we ask for to verify a business.
• Payments are handled by our payment provider on its own page. We receive the result and the last details needed for receipts and refunds, never full card numbers.

People in a company's workspace

• Name, email, job title and department added by the employer; the courses and policies assigned to you; your progress, answers, scores, certificates; and policy signatures, which record the version you signed, the statement, the name you typed and the time.

Messages and technical information

• Messages you send through our contact form or to our email addresses.
• Your IP address and basic request records (time, page, result) to limit abuse and keep accounts safe. Visits to company pages are counted with a daily one-way code made from the address and browser; the address itself is not stored.
• The small set of cookies described in our Cookie Notice. We use no advertising or cross-site tracking, and we don't track whether you open our emails.

How we use it, and why

Our system and automated processing

We use automated processing, including AI models provided by OpenAI and Anthropic, to summarise and classify job postings, read CVs to suggest profile details, match candidates and jobs and explain why, draft job posts and Screen tasks, grade Screen work, and rank applicants and draft shortlists and rejection reasons.

• Screen work is graded in two independent passes against clear criteria. When the passes disagree or confidence is low, a person reviews it.
• Shortlists and rankings are recommendations. Every application stays visible to the employer, and the employer makes every hiring decision.
• Every candidate the employer decides not to continue with receives a reason, which the employer has seen and can edit.
• Our providers process this text only to return results to us. Under their business terms they do not use it to train their models.

You can ask a person at GulfHire to review anything our system produced about you: write to [email protected].

Who can see it

• Employers, when you apply. The employer you apply to sees your profile, CV, answers, Screen work, whether your identity is verified (never the document), your phone and email, and the history of your application.
• Employers, before you apply. If you match a job an employer paid for, it may see a masked card: your initials, headline, city, proof badges and why you match, and it may invite you to apply. Nobody can search or browse candidates. You can turn this off in your Radar settings.
• A company's workspace. The employer that invited you sees your progress, scores, certificates and signatures in its workspace.
• Our team, as far as their work needs: support, reviewing identity documents and Screen work, and safety. Support staff may, with an audit record, view the service as a user sees it to fix a problem; they cannot see passwords or change payments.
• Service providers who run parts of GulfHire for us, bound by contract to use the information only for that service (below).
• Authorities, when the law requires it, and others where needed to protect people's safety or our rights.
• A successor, if GulfHire is reorganised or sold, under this policy.

We never sell personal information or share it for advertising.

Service providers

We may add or change providers. This list is kept up to date, and the version date at the top changes when it does.

International transfers

GulfHire serves people across the Gulf from Canada, with servers in Germany and providers in other countries. Your information may therefore be processed outside your country, including in countries whose laws differ from yours. We use providers that protect it under contract, with security comparable to ours, and we transfer only what each service needs. By using GulfHire you understand that this transfer is needed to provide the service.

How long we keep it

When you delete your account, your personal details are removed, and your applications are anonymised in the employers' records.

Your choices and rights

• See and correct your profile at any time, and download a copy of your information from your account settings.
• Delete your account from your settings.
• Withdraw an application, turn Radar matching off, pause or stop the weekly Brief, and unsubscribe from any email that isn't essential to your account.
• Withdraw consent you gave, for example to identity verification, without affecting what was done before.
• Ask us to access, correct, delete or move your information, to restrict or object to a use, or to have a person review an automated result.

These rights apply under Canada's PIPEDA and are respected for people in Saudi Arabia, the UAE, Qatar and the wider Gulf in line with their data protection laws. Write to [email protected]. We reply within 30 days and may ask you to confirm your identity first.

If you are not satisfied, you can complain to your data protection authority, for example the Office of the Privacy Commissioner of Canada, the Saudi Data and AI Authority (SDAIA) or the UAE Data Office.

How we protect it

Connections to GulfHire are encrypted. ID documents, CVs, offer letters and other private files are encrypted when stored and are served only to the people allowed to see them. Our staff sign in with a password and a second factor and open personal information only when their work needs it, and sensitive actions are recorded. No system is perfectly secure; if a breach affects you, we will tell you and the authorities as the law requires.

Age

GulfHire is for people aged 18 or over. We do not knowingly collect information about anyone younger. If you think we have, write to [email protected] and we will delete it.

Changes to this policy

We may update this policy. The version and date at the top show which text applies. When a change matters to you, we email account holders before it takes effect.