This document outlines how Siratie collects, processes, and safeguards personal data in strict compliance with the Saudi Personal Data Protection Law (PDPL).
Last Updated: October 10, 2026 | Effective Date: Immediately
Our Commitment to Data Protection & Saudi PDPL Compliance
At Siratie, we prioritize the confidentiality, integrity, and lawful processing of personal data. We operate in full compliance with the Saudi Personal Data Protection Law (PDPL) enacted under Royal Decree No. (M/19), as amended by Royal Decree No. (M/148), and its executive regulations.
The data controller and entity responsible for processing personal data for the Siratie platform and application is Digital Pass Establishment, a registered establishment in the Kingdom of Saudi Arabia under Commercial Registration (CR) No. 7051100811, based in Dammam.
This policy applies across our official website (siratie.com/en/) and mobile applications for iOS and Android, governing all core capabilities including our ATS Resume Checker, Smart CV Builder, and Curated Saudi Career Matching Engine.
Data Minimization Principle: We only gather the minimal personal data strictly necessary to fulfill declared services. We never repurpose personal information for unrelated activities.
Personal Data We Collect Across Siratie Mobile and Web Services
Depending on your interactions with our services, we process the following categories of personal information:
Identity & Account Details: Full name, verified email address, optional mobile phone number, and primary city/province within Saudi Arabia or the GCC region.
Resume Content & Career Profiles: Professional job title, career summaries, educational qualifications, degrees, institutions, graduation dates, work history, job responsibilities, technical skills, languages, and certifications provided in forms or uploaded via PDF / Word files.
Technical & Telemetry Data: IP address, operating system and version (iOS / Android), device token for transactional push alerts (FCM Token), and diagnostic crash telemetry.
Subscription & Purchase Data: Digital entitlements and subscription statuses managed via RevenueCat. We do not store, process, or have access to your payment card credentials or bank account details; all billing transactions are handled exclusively by Apple App Store and Google Play.
Purposes of Data Processing and Legal Basis
We process personal data lawfully on the basis of user consent and contractual necessity to fulfill our service commitments:
Auditing resumes against Applicant Tracking System (ATS) algorithms to provide compatibility scoring, layout diagnostics, and keyword gap analysis.
Generating, structuring, and formatting print-ready PDF/A-3 resumes in English and Arabic with native bidirectional (BiDi) typesetting.
Matching your verified career background with relevant Saudi public and private sector job opportunities and delivering opted-in job notifications.
Zero Data Selling Guarantee: We strictly do not sell, rent, lease, or monetize your personal data or resume content to advertisers, data brokers, or marketing networks.
Authorized Third-Party Sub-Processors and Data Safeguards
To deliver enterprise-grade performance and security, we partner with vetted infrastructure providers bound by contractual data protection agreements:
OpenAI / DeepInfra (AI Analysis Engine)
Processes resume text improvements and keyword suggestions over encrypted TLS channels. Protected by strict zero-retention agreements prohibiting the use of customer data for public AI model training.
RevenueCat (Subscription Management)
Validates in-app purchase receipts and entitlement state across the Apple App Store and Google Play Store without accessing banking credentials.
Firebase / Google Cloud (Push & Infrastructure)
Delivers real-time transactional push notifications for new matching jobs and hosts encrypted cloud storage and database instances.
Sentry (Application Performance Monitoring)
Captures real-time crash logs and runtime exceptions with automatic scrubbing of personally identifiable information (PII) and resume texts.
Data Retention Policies and Permanent Account Deletion
Our retention schedules enforce strict lifecycle limits to ensure data is retained only as long as needed:
Guest Resume Scans: Unauthenticated CV audits conducted on the landing website are retained temporarily for a maximum of 24 hours to enable result viewing, after which they are permanently and automatically purged.
Registered Accounts: Resumes and profile records are retained for as long as your account remains active, ensuring you can revisit, edit, and export your documents at any time.
Immediate & Irreversible Account Deletion: You can permanently delete your entire account and all associated resumes at any time directly through the mobile app (Settings → Account → Delete Account). This invokes the automated endpoint DELETE /api/auth/account, permanently wiping all profiles, files, and records from our databases.
Your Rights Under Saudi PDPL & How to Contact Our Privacy Officer
Under the Saudi Personal Data Protection Law (PDPL), you have the following guaranteed legal rights:
Right to Know: The right to be informed about the legal justification, collection sources, and processing purposes for your data.
Right of Access: The right to request and receive a readable copy of your personal data held in our systems.
Right of Rectification: The right to correct inaccurate data or complete outdated details directly in the app.
Right of Erasure / Destruction: The right to request the permanent destruction of your personal data when the processing purpose is fulfilled.
Right to Withdraw Consent: The right to revoke consent for processing or disable push alerts at any time.
For more information regarding terms of service and acceptable platform use, please refer to our Terms of Service.
Data Controller: Digital Pass Establishment (CR No. 7051100811)
National Address: 4392 Sheikh Mohammed Bin Othaimeen St, Taibah District, Dammam 32273, Additional No. 7676, Kingdom of Saudi Arabia