Privacy Policy

1. Who we are

Naqwa ("we", "us", "our") provides an AI-assisted recruitment screening platform for employers in Qatar and the wider GCC. This policy explains how we handle personal data when you use naqwa.app, portal.naqwa.app, and related services.

Contact: hello@naqwa.app

2. Data we collect

Recruiter accounts: name, email, company name, billing details (processed by Stripe), and usage logs.

Candidate data submitted through interview links: name, phone, email (if required), CV files, interview responses (text and audio), ID/visa preferences where configured, and AI-generated scores, including a score and reason for each answer.

Interview integrity signals, recorded with the time and question they occurred on: tab or window switches, blocked copy/paste and screenshot attempts, page reloads, connection drops, periods of inactivity, webcam face-presence events (when the employer requires a webcam), the audio level and length of voice answers (used to detect silent recordings), and typing metrics for text answers (number of key presses, typing speed, and whether text appeared without being typed). We do not log the individual keys you press; we only keep these counts and timings and the answer you submit. Unsent drafts are kept only in your own browser.

Technical data: IP address, browser/device information, cookies for session and language preferences.

3. How we use data

We use personal data to operate the service, authenticate users, run AI screening interviews, deliver results to authorized recruiters, process subscriptions, prevent abuse, and improve platform reliability.

Candidate data is processed on behalf of the recruiting company that shared the interview link. Recruiters are responsible for informing candidates and obtaining any required consents under applicable law.

4. Third-party processors

We use trusted subprocessors including: OpenAI (AI interview and transcription), Stripe (payments), email delivery providers, and cloud hosting. Candidate CVs, messages, and audio may be transmitted to OpenAI for processing.

We do not sell personal data. Subprocessors are engaged under appropriate contractual safeguards.

5. International transfers

Data may be processed on servers outside your country, including the United States where some AI providers operate. Employers requiring specific data residency should contact us before enterprise deployment.

6. Retention

We retain account and candidate records while your subscription is active and for a reasonable period afterward for backups, billing, and legal compliance. Recruiters may export or request deletion subject to their own HR policies and local law.

7. Your rights

Depending on applicable law (including Qatar Law No. 13 of 2016 on Personal Data Privacy), you may request access, correction, or deletion of your personal data. Contact us at the email above. Candidates should also contact the employer who invited them.

8. Security

We use encryption in transit (HTTPS), access controls, and industry-standard hosting practices. No system is completely secure; please use strong passwords and limit team access appropriately.

9. Changes

We may update this policy from time to time. Material changes will be posted on this page with an updated date.