Privacy and your data

Plain answers about what Masar keeps, why, for how long, and how you remove it.

Draft for legal review. This page describes how Masar works today, checked against our code. It is not yet a final legal agreement.

Privacy first

Your CV is personal. We treat it that way.

Every promise below is built into how Masar works, not just written in a policy.

Identity removed before AI

Your name, email, phone, ID numbers and LinkedIn link are replaced with placeholders before any text reaches our AI provider. Your real details are put back only in your own documents.

Never sold, never shared

We never sell your data and never send your CV to employers or recruiters. It is used only for your own applications.

Delete any time

Settings → Delete account removes your profile, CVs, photo and packages straight away. You can download a copy first.

Inactive accounts deleted

If you do not use Masar for 12 months, we delete your account automatically. We email you 30 days before, and signing in keeps it.

Payment records are kept only as long as the law requires.

Our promise

We never sell your CV or personal data.
We do not send your CV to employers or recruiters. You decide where to apply.
Your CV is used only to prepare your own applications.
You can download or delete your data yourself, at any time.

What we store and for how long

WhatWhyHow long

Free fit check: your CV and job textTo calculate the scoreNot saved. Read once, then discarded

Free fit check: score, decision, goal, sector and ad sourceTo run and improve the service30 days, then deleted automatically

Account: name, email, profile, CVs, job posts, photo if you add one, and your finished documentsTo prepare and deliver your applicationsUntil you delete your account, or 12 months after your last activity (we email you 30 days before)

Temporary AI working copiesTo avoid repeat processingUp to 30 days, then deleted automatically

Security log: sign-ins and account actions, email partly hiddenTo protect your account180 days

Payment recordsRequired for accountingOnly as long as accounting and tax law requires, also after account deletion. They hold the amount, date, plan and reference, never your CV.

Who else handles your data

To write your documents, parts of your CV and the job post are sent to an AI model provider. Before anything is sent, we replace your name (the one on your account and the one at the top of your CV), email addresses, phone numbers, 10-digit ID numbers and LinkedIn links with placeholders. The provider sees your skills and work history, not who you are. Your real details are restored only in the documents we give back to you.

Sign-in codes and delivery emails are sent through an email delivery provider.

The final list of providers and where data is hosted will be published here before launch.

Download or delete

In your account, open Settings. "Download my data" gives you a copy of your account data. "Delete account" removes your profile, CV data, photo, jobs and finished documents, linked channels and sign-in sessions straight away.

If you stop using Masar, your account is deleted automatically after 12 months without activity. We email you 30 days before; signing in again keeps your account. After any deletion, only payment records (as the law requires), the security log (until its 180 days end) and any AI working copies (until their 30 days end, without your name) remain.

We aim to follow Saudi Arabia's Personal Data Protection Law (PDPL). You can also ask us by email to access, correct or delete your data.

Signing in

We use one-time email codes, so there is no password to store or leak. A sign-in lasts 24 hours.

Last updated: 29 October 2026 · Contact: [support email to be confirmed] · Website: [domain to be confirmed]