Privacy

1.In short

Almost everything we hold about you is something you typed, uploaded or did on this platform. There is no quiet collection behind that.

• We do not sell personal data, and we share none of it for anyone else's marketing.
• There is no advertising network, no third-party tracker and no profiling of you for ads anywhere on this site.
• Our own usage measurement is de-identified. Your address and browser string are used to derive an anonymous daily hash and are then discarded; neither is written down, and no page view is ever linked to your account.
• We honour Do Not Track and Global Privacy Control. If your browser sends either signal, nothing is measured at all.
• Documents you upload are private by default and reachable only by the people a project or a review makes responsible for them.
• We do not watch how you work. There are no screenshots, no keystroke or mouse capture, and no time-monitoring software.
• Deleting your account anonymises you. A small set of shared records survives because they are also the other party's record — “What deleting your account actually does” lists exactly which, and why.

2.Who and what this covers

This notice covers the WorkExp platform: the website and every feature reached through it, for Candidates, for Organizations, and for visitors who never create an account.

It covers the decisions we make about your information. It does not cover what another user does with information you chose to show them — an Organization that reads your profile is responsible for what it then does with what it read.

The legal entity that operates WorkExp, its registered address and its named data protection contact are being settled before public launch, and will appear in this section. Until then every request described under “Your rights” reaches us through Support, and we answer it.

3.What we collect

Grouped by where it comes from, because that is what determines how much choice you have over it.

4.Why we hold it, and on what basis

Every purpose below is one of the reasons anything is collected at all. There is no further use behind them.

5.Who can see what

Visibility on this platform is decided by role and by relationship, server-side, on every request — never by hiding a control in the interface.

• You always see everything of your own.
• Your profile is visible from the moment you register, so an Organization can find you — there is no separate publishing step. You can hide it at any time from your profile page, which removes it from talent search and makes the page unreachable immediately. Search engines are a separate switch and are off unless you turn them on. Your contact email address and your phone number are controlled separately again, and each stays private unless you change it.
• A project's two parties see that project's content, messages and files, and so does a Supervisor either of them invites. Nobody else does, except that an administrator handling a report or a dispute can read what it concerns — and that is written to the audit record.
• A Supervisor invited to a project follows progress and decisions, and can open the files shared in the project conversation. They never open a delivered work file, the evidence attached to an expense request, or a credential document, and they can never write anything to the project.
• Reviewers and administrators see what the decision in front of them requires, and every decision they take is written to the audit record with their identity.
• A certificate can be checked by anyone holding its number, without signing in. It shows whether it is still valid, your name and the organization's as they stood on the day it was issued, the project's title and dates, and the skills recorded then. Your name links to your profile, which opens only if your profile is visible.
• Your profile is offered to search engines only if you turned that on. It is off unless you chose it, and hiding your profile removes it from them either way.
• A private work sample is unreachable by anyone else — not the page, not the cover image, not the files behind it.
• When you open someone's profile, they may be shown that you did. Your own setting decides whether that appears as your name, as your field alone, or as an unattributed count — and the same setting, as it stood at that moment, decides how much you are shown about the people who open yours.

When you publish something, you are publishing it. Other people can read, copy and keep what you made public, and we cannot undo that for you. Publish accordingly.

6.Who else receives it

We do not sell personal data. We do not share it for anyone else's marketing. There is no advertising partner, no data broker and no analytics company in this list, because none is used.

These are the companies that run parts of the platform on our behalf. Each is bound to use what it processes only to provide its service to us.

Amazon Web Services

The server that runs the platform, and the storage that holds uploaded files. Frankfurt, Germany.

Neon

The managed PostgreSQL database that holds account, profile and project records. The connection is encrypted and bound to the server that opens it.

Resend

Delivery of the email we send you: verification, password reset, notifications. It receives your address and the message itself, and a notification message names the project, credential or decision it is about. It never receives a file, and it is told nothing else about your activity here.

Google · LinkedIn

Only if you choose to sign in with one of them. They tell us who you are; we tell them nothing about what you do on this platform afterwards.

Lemon Squeezy

Payment processing for Gold subscriptions, as merchant of record. Receives your name, email and billing details, and the card data you enter on its own checkout page — the platform never sees or stores card numbers. Sends us subscription status events so your Gold access follows what you paid for.

Malware scanning runs on our own server, in a container reachable only from the application. Your files are never sent to a scanning service.

We disclose personal data to an authority only where a law that applies to us requires it, or where it is necessary to prevent serious harm to someone. We do not volunteer it, and we do not give bulk access to anyone.

If the platform ever changes hands, the records described here move with it and remain governed by this notice, or you will be told before anything about them changes.

7.Where it is processed

The server that runs WorkExp and the storage that holds uploaded files are both in Frankfurt, Germany. The managed database and the email service run on their own providers' infrastructure.

This means personal data is processed outside the Kingdom of Saudi Arabia. We state that plainly rather than leaving it to be inferred: if that matters to you, it should matter before you upload, not afterwards.

Everything in transit is encrypted. The site is served over HTTPS and instructs browsers to refuse any downgrade for a year; the database connection requires TLS with channel binding; file links are signed and short-lived, and authorisation is re-checked each time one is used.

8.How long we keep it

While your account exists we keep your account, your profile and your project history, because that is the service.

Statutory retention periods for the historical records listed below — how long an audit entry, an agreement acceptance or a billing record must be kept — are part of the legal review that is not finished. Nothing is purged on a timer today, which is the safer default. We will not print a plausible-sounding number here. When real periods are set, they will appear in this section.

9.What deleting your account actually does

You can delete your account yourself, from the account page. Deletion here means anonymisation: the account stops authenticating, disappears from everywhere it could be found, and loses the information that identifies you.

• Your email address is replaced with an unusable placeholder, your name and picture are removed from the account, your profile name becomes “Deleted Candidate” or “Deleted Organization”, and the stored image file itself is deleted.
• Your password is removed, so signing in stops working at once. Any session already open ends on its next request rather than surviving until it expires.
• Profile fields are cleared: headline, biography, the separate parts of your name, country and city, phone number, and for an Organization its description, website, contact details and commercial registration number. Your profile is then taken out of public view, out of talent search and out of search engines.
• The credential documents you uploaded are deleted from storage.

What survives is the part that is also somebody else's record, or that someone else is entitled to rely on:

• Project history, the agreement and each side's acceptance of it — a completed project does not stop having happened because one participant later left.
• Issued certificates, in full, showing the names as they stood on the day of issue. A certificate that changed after issue would be worthless to the person holding it.
• The audit record, including the entry recording your own deletion, so that the deletion itself can be verified later.
• Billing history for any subscription, and the fact that a credential was reviewed and by whom — without the document itself.

Projects an anonymised Organization had already published stay in public discovery under the anonymised name, as project history. Its profile page becomes unreachable.

10.Your rights, and how to use them

Under the Saudi Personal Data Protection Law, and under comparable laws elsewhere, you have the right to be told what is collected and why, to see it, to receive a copy in a readable form, to have it corrected or completed, and to ask for it to be destroyed when it is no longer needed for what it was collected for.

We answer requests without charge. We may need to confirm that a request really comes from you before acting on it, and we will ask for no more than that confirmation needs.

11.How it is protected

What is actually in place, rather than a claim of general diligence:

• Passwords are stored only as one-way hashes; we could not tell you your own password if you asked.
• Every request re-checks the account's live status, so a suspended or deleted account loses its session immediately rather than at expiry.
• Every upload is checked for what it really is, size-limited, and scanned for malware before it is stored. A file that fails, or that the scanner could not judge, is never downloadable.
• Images are re-encoded, which removes embedded metadata and neutralises anything hidden in the original file.
• Storage keys are random, so files cannot be found by guessing. Download links are signed, short-lived, and re-check your authorisation every time they are used.
• Authorisation is re-derived on the server for every action. Hiding a button is never how access is restricted.
• The administrative interface writes every decision to an audit record that cannot be edited afterwards.

No system is perfectly secure, and we will not claim this one is. If a breach affects your personal data we will notify the competent authority and the people affected without undue delay, and we will tell you what actually happened rather than the least alarming version of it.

12.Cookies

The platform sets the cookies it needs to keep you signed in, to protect forms against cross-site request forgery, and to remember your language. Analytics sets two more, and only after you agree. There are no advertising or tracking cookies of any kind. Read the cookie notice

13.Children

WorkExp is for adults: holding an account requires being 18 or older, which the terms of use state. We do not ask for a date of birth and do not verify age, which means we cannot identify a child's account on our own.

If you believe a child's personal data is on this platform, tell Support and we will remove it and close the account.

14.Changes to this notice

When what we do changes, this notice changes with it — before the change takes effect where that is possible, and the review date at the top moves. If a change materially affects your information we will tell you rather than rely on you noticing.