Privacy Policy

Mifzza (mifzza.com) is a smart job-application platform. This policy explains what data we collect, why we collect it, and how we protect it, in line with the Saudi Personal Data Protection Law (PDPL).

1. Data we collect

• Account data: your name, email address, and phone number.
• Career data: the CV file you upload (PDF/Word) and its parsed content, your professional field, and your application preferences.
• Usage data: applications submitted through the platform, quota usage, invoices, and technical logs needed to operate the service.

2. How we use your data

• Uploading your CV to employer portals and job boards on your behalf.
• Tailoring your CV and generating cover letters per job using automated analysis.
• Sending your applications from a dedicated professional email address assigned to you.
• Tracking employer replies and producing your application reports.
• Billing, subscription management, and fraud prevention.

3. Lawful basis and consent

Processing is based on your explicit consent when you register and agree to the Terms and this Privacy Policy. Your agreement covers processing of your data with AI technologies for job matching, CV tailoring, and generating drafts, and we record the time and means of your consent (the checkbox on the registration page). You may withdraw consent at any time by deleting your account; copies already submitted to employers cannot be recalled.

4. Sharing

Your CV and application data are shared only with the employers you apply to through the platform. We do not sell your data to third parties. Data is hosted on secured servers and access is restricted to the platform administrators.

5. Retention

• Account, CV, and application data: kept while your account is active. When you delete your account from the Settings page the data is destroyed immediately if you have no active subscription, or after your paid period ends so you keep what you paid for (execution never exceeds 30 days from when it falls due), and we register and acknowledge your request at once.
• Invoices: a minimal accounting record (invoice number, amount, date, payment status, plan) with no data identifying you is kept for 5 years per Saudi financial and regulatory requirements.
• Processing activity records: kept for 5 years from the end of the activity per the PDPL Implementing Regulation.

6. Your rights and how to exercise them

• Access and copy: all your data is visible in your Settings page and dashboard; download a full copy of your data yourself at any time with the "Download my data" button in Settings, or request it by email below.
• Correction: edit your name, phone, and data directly from the Settings page, or email us for anything else.
• Deletion: the "Delete my account" button in the Settings page performs the full deletion yourself, with no intervention from us · immediately, or after your paid subscription ends, as you choose.
• Withdraw consent: deleting your account is a full withdrawal and stops all processing of your data. You can also pause AI auto-apply at any time from Settings without deleting.
• AI auto-apply consent: enabling the AI auto-apply feature in Settings counts as your consent for the platform to apply on your behalf, and the moment of activation is recorded in your account log. When we apply on your behalf, your data and CV are sent to the employer announcing the job through its official channels (its hiring systems or email), and that employer becomes responsible for your data under its own policies, which we advise you to review. Deleting your account removes all your data from our platform but does not cover external employers' systems; that requires contacting the employer directly.
• Complaint: file a complaint with us or with the Saudi Data & AI Authority (SDAIA).

We respond to any request within 30 days of receiving it at [email protected].

7. Sensitive data and children

The only sensitive data we collect is People of Determination data (disability type), and it is entirely optional. Your explicit consent is given by selecting "I am a Person of Determination" and filling in the disability type. It is used solely to match you with jobs and programs supporting People of Determination, and it is destroyed when you delete your account or upon your request. We do not collect any other sensitive data (health, biometric, ethnic origin, or criminal records); if present in your CV we advise removing it before upload. The platform is not intended for anyone under 18.

8. Security

Data is transmitted over encrypted connections (HTTPS), stored with access controls, and backed up regularly. No system is perfectly secure; if a breach affects your data, we will notify you through the platform or your registered email.

9. Contact

For any privacy or data-protection request, email us at [email protected].