Privacy Policy

Tarshih is currently operated by an individual entrepreneur based in Jeddah, Kingdom of Saudi Arabia, who acts as the data controller for the personal data described in this policy. You can reach us at support@tarshih.com for any privacy question or request.

Account data: your name, email address, password (stored in hashed form by our authentication provider), preferred language, and selected subscription tier.

Content data: the CVs, job descriptions, cover letter drafts, and any other material you upload, paste, or generate through the Service, including resulting tailored documents, ATS/match scores, gap analyses, and job-match results.

Billing data: subscription tier, credit balance and usage history, and transaction records. Full payment card details are collected and processed directly by our third-party payment provider and are not stored on our servers.

Usage and device data: log data such as IP address, browser type, device information, pages viewed, and timestamps, collected automatically to operate and secure the Service.

To provide the Service: parsing your CV, analyzing job descriptions, generating tailored CVs and cover letters, calculating ATS and job-match scores, identifying gaps, and surfacing similar job postings.

To operate your account: authentication, credit tracking, billing, customer support, and service-related communications (for example, confirming a plan change or responding to a support request).

To maintain and improve the Service: monitoring performance, diagnosing and fixing errors, and understanding aggregate usage patterns, using data that is anonymized or aggregated where feasible.

To meet legal obligations, prevent fraud or abuse, and enforce our Terms & Conditions.

We do not use Your Content to train our own foundational AI models. Content sent to third-party AI providers (currently OpenAI and Google Gemini) is processed under those providers' API terms in order to generate your requested output; we do not authorize those providers to use it to train models serving other customers, to the extent their own commercial API terms allow us to make that election.

We share personal data only with service providers who process it on our behalf to deliver the Service ("sub-processors"), and only to the extent necessary for the purpose each one serves:

• AI model providers (currently OpenAI and Google Gemini) and search providers, to parse your CV and job description, tailor your resume and cover letter, calculate scores, and find similar jobs. Relevant content from Your Content is sent to these providers solely to generate the output you requested.

• Our authentication, database, and hosting provider, to store your account, content, and application data securely.

• Our third-party payment provider, to process card payments for subscriptions and pay-as-you-go purchases and to handle related billing operations such as refunds and disputed charges. The payment details you enter at checkout go directly to that provider, which processes them under its own privacy policy; we receive only the transaction record needed to credit your account.

We do not sell your personal data, and we do not share it with third parties for their own independent marketing purposes.

We may disclose data if required to comply with a valid legal process, to protect the rights, property, or safety of Tarshih, our users, or others, or in connection with a merger, acquisition, or sale of assets, subject to this policy continuing to apply to previously collected data.

Some of our service providers may process data on servers located outside the Kingdom of Saudi Arabia. Where this occurs, we take reasonable steps to use providers that maintain appropriate safeguards for the data, consistent with the requirements of the PDPL for transferring personal data outside the Kingdom.

We retain your account and content data for as long as your account remains active, so that your resume history, generated documents, and settings stay available to you. If you delete your account, we will delete or anonymize your personal data within a reasonable period, except where we are required to retain certain records (such as billing records) for legal, tax, or accounting purposes, or to resolve disputes.

You can request deletion of specific uploaded content or your entire account at any time from your dashboard or by emailing support@tarshih.com.

We use encryption in transit and at rest, access controls limiting who can reach production data, and industry-standard authentication practices. No system is completely secure, and we cannot guarantee absolute security, but we work to apply reasonable and appropriate technical and organizational measures. See our Security page for more detail.

Subject to applicable law, including the PDPL, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data; withdraw consent where processing is based on consent, without affecting processing carried out before withdrawal; object to certain processing; and request a copy of your data in a portable format.

To exercise any of these rights, email support@tarshih.com. We may need to verify your identity before acting on a request, and may decline requests that are manifestly unfounded, excessive, or where an exemption applies under law.

We use essential cookies and local storage to keep you signed in and to remember your language preference. These are required for the Service to function and are not subject to consent.

With your consent, given through the cookie banner shown when you first visit, we use Google Analytics to understand in aggregate how the Service is used, for example which pages are visited and how the CV-tailoring flow is used, so we can improve it. If you decline, or later withdraw consent, Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time from the cookie preferences link in the site footer.

We do not use advertising trackers or sell data derived from cookies to advertisers.

The Service is intended for adults seeking employment and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will take appropriate steps to delete it.

We may update this Privacy Policy from time to time. We will post the updated version with a new "Last updated" date and, for material changes, provide additional notice where required by law.

For any privacy question, request, or complaint, email support@tarshih.com.