Privacy Policy — Profilio

Last updated: March 2026

1. Who We Are

Profilio is a service operated by Arabian HR Company for Human Resources (CR: 1010566841), Riyadh, Saudi Arabia. Contact: privacy@profilio.sa

2. Data We Collect

• Full name (Arabic and English)
• Email address and mobile number
• CV and professional qualifications (PDF or Word)
• National ID or Iqama number (encrypted — for verification only)
• Usage data and session information

3. How We Use Your Data

• Deliver the Profilio service and AI-enhance your CV
• Verify identity in accordance with Saudi labour regulations
• Send service-related notifications
• Comply with Saudi regulations (PDPL, CITC)

4. Data Sharing

We do not sell your data. We may share it with sub-processors (Supabase, Vercel, Hetzner) who have signed binding Data Processing Agreements. Your data is never shared with employers without your explicit consent.

5. Data Storage and Security

Data is stored in the Middle East region. National ID and salary data are encrypted with pgcrypto and accessible only server-side via a secure encryption key. All connections use HTTPS and Cloudflare WAF protection.

6. Your Rights

Under PDPL you have the right to:

• Access and correct your data
• Request deletion of your data
• Object to processing of your data
• Lodge a complaint with SDAIA

Contact: privacy@profilio.sa

7. Cookies

We use only strictly necessary cookies for session management. We do not use tracking or advertising cookies.

8. Changes to This Policy

We will notify you of material changes by email at least 30 days before they take effect.