Privacy notice

Who we are

Masar is an AI assistant for people applying for jobs in Saudi Arabia, the UAE and Qatar. The operator's legal name and a contact address for privacy requests will be added here before the public launch.

What we hold

• Your account: your email address (and your name if you sign in with Google), your language, your country and your consent choices.
• Your resume files and the facts Masar reads from them, which you confirm, edit or reject.
• The jobs you target: the job description you paste, and the briefings, gap answers, tailored resumes and exported files made for them.
• Mock interviews: your answers, the interviewer's questions and the feedback.
• Usage counts for your plan's limits, and technical records that hold ids, never content.

We do not ask for, and do not keep, ID numbers, religion, marital status, health, nationality, date of birth, photos or visa status. If your resume contains them, they are dropped when it is read.

Why

To write resumes only from facts you confirmed, research the companies you target, run interview practice, keep your account secure and keep costs under control. We never sell your data or use it for advertising.

Where your data goes

Your data is stored in the European Union. These providers process part of it for us:

• Our server and database: a hosting provider in the EU (named here before the public launch).
• Cloudflare R2, EU jurisdiction: your files and our backups, encrypted before they leave our server.
• Cloudflare: network protection and the sign-up check (it sees your IP address and browser signals).
• Resend: sends your sign-in codes (it sees your email address).
• Sentry, EU region: error reports, which carry no personal data.
• Anthropic (Claude), United States: reads your confirmed facts, job descriptions and interview answers to write for you. It may not train on them and keeps requests for up to 30 days.
• Tavily (search) and TypeSafe (checks on public web pages), United States: they only see a company name, a job title and public web pages, never your data.

Sending data to providers in the United States needs your consent, which you gave when you joined.

How long we keep it

• Your account and profile: until you delete them. Deleting accounts after 12 months without activity, with warning emails first, is planned but not active yet.
• Exported resume files: 30 days, then made again when you ask.
• Interview transcripts and per-answer feedback: 90 days after the interview's last activity. The session's score and summary stay with your account.
• Database backups: 14 days, encrypted with a key that is kept offline.
• AI providers: up to 30 days on their side.
• Cost records (13 months) and the security log (24 months), which hold no content.

Your choices

• See and correct the facts Masar holds about you on your profile page.
• Delete an uploaded file, a target job or an interview transcript at any time.
• A self-serve download of all your data is not built yet. You can ask for a copy, and we answer within 30 days.
• Delete your whole account in Settings.

When you delete your account

• You are signed out everywhere and the account is locked at once.
• Within 24 hours everything is deleted from our database, your files are deleted and their encryption key is destroyed.
• Encrypted backups age out within 14 days, so your data is gone from them by then.
• AI providers may keep requests for up to 30 days. Cost records and the security log keep their entries without your identity.

Security

Connections are encrypted. Your files are encrypted with a key of your own before they are stored, and backups with a key kept offline. Every admin view is logged.

We will tell you about important changes to this notice before they apply.