Privacy Policy

The Wasli app and website are operated by Wasli, United Arab Emirates. For any question about this policy or your data, email support@wasli.ae. For anything else, email contact@wasli.ae.

We collect only what the service needs:

• Account details: your email address and password (stored only as a secure hash), your name, mobile number and nationality.
• Your CV and career profile: the CV files you upload and the profile Wasli builds from them, such as job titles, employers, dates, qualifications, skills and certifications, plus anything you add or correct yourself.
• How you use Wasli: the career goal you choose, your milestones and achievements, the opportunities you save or dismiss, the tailored CVs you create, and your plan and subscription status.
• Your choices: a record of each consent you give or withdraw, with its date and version.
• Technical and security data: limited logs of requests to our servers, used to keep the service secure and working. If you allow notifications, a device token so we can send them.
• Website visits: www.wasli.ae uses cookieless, aggregate analytics. It does not set advertising or tracking cookies and does not identify you.

We do not sell your personal data and we do not use it for advertising.

• To create and secure your account and let you sign in.
• To read your CV and build your career profile, and to propose career goals from it. This needs your consent (“Process my CV”).
• To find UAE job opportunities that may suit you and estimate how well each one matches. This needs your consent.
• To write tailored CVs when you ask for one (Premium). This needs your consent, which we ask for the first time you create one.
• To show your journey, milestones and progress, and to provide The Edge daily brief on Premium.
• To manage your plan, respond to support requests and send you account emails.
• To keep Wasli secure, prevent abuse and meet our legal obligations.

You can withdraw any consent at any time in the app. Processing for that purpose then stops. Withdrawing does not affect processing that already took place.

Match scores and proposed goals are estimates to help you decide. They are not a promise of an interview or a job, and Wasli does not make decisions about you that have legal or similarly significant effects.

Your account, CV files and career data are stored in the UAE, on Microsoft Azure in the UAE North region.

We use the service providers below. Some of them process limited data outside the UAE; each one is described with exactly what it receives. Where data leaves the UAE, we limit it to what the task needs and remove personal details first wherever the task allows.

• Microsoft Azure (hosting, database and file storage, UAE North).
• Azure OpenAI, operated by Microsoft (reading your CV): receives only job titles, employers and dates, qualifications, institutions and years, skills and certifications. Your name, contact details and other personal details are never sent. This processing may take place outside the UAE.
• Anthropic (tailored CVs, Premium): receives job titles with dates, skills, qualifications and certifications with every employer name replaced by a placeholder, and your work bullet points with any identifying word replaced by a placeholder. Your name, contact details and personal details are never sent. This processing takes place outside the UAE. Anthropic may keep what it receives for up to 30 days and does not use it to train its models. The Edge daily brief also uses Anthropic, but sends no personal data: only role, seniority, emirate, industry and skills from Wasli’s fixed lists.
• Brave Search (finding job openings): receives short search queries containing only a job title, an emirate and up to two skills, never your name, contact details or CV text. It may be outside the UAE.
• Resend (sending account emails such as sign-up confirmation and password reset): receives your email address and the message.
• Google Firebase Cloud Messaging (push notifications, only if you allow them): receives a device token and the notification.
• Vercel (hosting the website www.wasli.ae) and Plausible (cookieless website analytics). The website holds no account data.

Our providers may process data only to provide their service to us, under their own security and data protection terms.

• Account and career data: for as long as you have a Wasli account.
• Tailored CVs: 7 days, then deleted whether or not you downloaded them. You can delete one earlier at any time.
• When you delete your account, your career data, including your CVs, is erased and your sign-in account is then deleted. See Delete your account.
• Encrypted database backups are kept for a limited period (up to 35 days) for recovery and then overwritten.
• We may keep a minimal record that a deletion or consent took place where the law requires it.

Under the UAE Personal Data Protection Law you can ask us to:

• give you access to, or a copy of, your personal data;
• correct data that is inaccurate or incomplete;
• delete your data (you can also do this yourself in the app);
• stop or restrict processing, or withdraw a consent you gave.

Email support@wasli.ae from the address on your account. We may ask you to confirm your identity. You also have the right to complain to the UAE Data Office.

We encrypt data in transit, restrict access to the people and systems that need it, scan uploaded files for malware, and remove personal details before CV content is sent to an AI model. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Wasli is for people aged 18 and over. We do not knowingly collect data from anyone younger.

If we change this policy, we will update the date at the top. If a change affects how we use data you have already given us, we will tell you in the app and ask for your consent again where needed.