1. Identity, scope and current processing
Mohamed Haredy (محمد هريدي), an individual based in Egypt operating MH Job Assistant, is the contact for privacy requests: mohamedharedy25@gmail.com. Today only public website requests and voluntary email inquiries are processed. Website privacy explains Cloudflare delivery/security and Gmail correspondence. The service data described below is prospective and is not collected through this site.
2. Individual service information
If Individual SaaS is activated, service information may include account and contact details, reviewed CV material and career history, confirmed skills/profile revisions, saved job advertisements and source links, matching evidence, prepared application materials, outcomes, approved documents and usage/access history. You choose what to submit and must review extracted suggestions. We do not invent missing career facts or submit applications automatically.
3. Business candidate information and responsibilities
If Business SaaS is activated, the workspace may process organisation/member details, role permissions, vacancies, candidate names/contact details and CVs, reviewed evidence, evaluations and human decisions. The organisation normally determines recruitment purposes and the lawful basis for candidate data; it must provide required candidate notices and respond to recruitment-related rights requests. The hosted operator processes candidate information under the customer’s lawful documented instructions and data agreement, while determining its own necessary account, security and billing administration. Actual legal roles depend on the processing, not a label alone.
4. Purposes and lawful processing
Service data is used to provide requested software functions, authenticate authorised access, apply permissions/usage limits, support users, maintain security and reliable records, and meet applicable legal duties. Processing must have the applicable basis, such as performing the accepted service, lawful security/operational interests or legal requirements. Where consent is required for a particular optional use, it must be obtained separately and withdrawal explained. Service information is not sold or used to train an external AI service as a default product function.
5. Recipients and optional integrations
Only authorised workspace users and necessary authorised operational/support recipients should access the relevant records. Before activation, the service will disclose its actual hosting, backup, email and other subprocessors and their locations. Permitted job-source requests may disclose submitted search terms; they do not require sending a whole CV by default. Optional external AI must be identified, separately enabled and disclosed before any approved data transfer. No external AI processing is active on this public site.
6. Payments and Paddle
No payment details are collected here. For a future Paddle-sold purchase, Paddle independently handles the purchase, billing and required fraud/tax processing under its own privacy notice. The software supplier may receive the necessary transaction reference, status, amount/currency, period and customer/billing contact information for access and support; it does not need a full payment-card number or security code. This conditional description does not claim merchant approval or a live Paddle integration.
7. Retention, expiry and deletion
Subscription cancellation, expiry or a refund is separate from data deletion. Individual saved career/application information is retained for the active account and legitimate service/record needs, subject to assessed deletion requests and lawful exceptions. Business service-end retention is an agreed owner-selected 0, 6 or 12 months after the verified end; this choice is not a promise that deletion bypasses legal holds or occurs instantly. The confirmed agreement must specify actual deletion, export and backup expiry. Temporary search/usage records have separate limited lifecycles. No universal retention period or instant removal from every copy is promised.
8. Rights and candidate requests
Contact mohamedharedy25@gmail.com to request access, correction, export, deletion, restriction or other applicable privacy rights, or to raise a concern. We verify authority proportionately and explain the result and any lawful limits. A candidate whose information is held in a Business workspace should contact the recruiting organisation as the usual decision-maker; we can help route a request and assist under the data agreement. You may use any complaint or supervisory-authority rights available under applicable law. There is no need to send passwords, full identity documents or sensitive CVs in an initial email.
9. Security, international processing and launch disclosures
Access controls, organisation separation and reviewed information are part of the product design. No independent security certification or universal legal compliance is claimed. Hosting or service providers may process data outside your country. Before live SaaS use, actual locations, transfer safeguards, data-processing terms, retention and backup responsibilities must be confirmed; no live customer data will be accepted through this informational website. The eventual service notice must reflect the actual deployment rather than assume a demonstration environment is production.
10. Updates
This notice is dated 22 October 2026. Before collecting live SaaS data, we will provide the applicable operational notice and required agreements. Any material new purpose or optional recipient requires appropriate notice and authority. The current Website privacy notice continues to describe today’s browsing and inquiry processing.
Related purchase references
Paddle references apply only to purchases actually sold by Paddle; they do not state that MH Job Assistant has been approved.