Privacy Policy

Sirah | سيرة ("Sirah", "we", "us") is a career-services platform operated by Fahad Al Muaibid, a Talent Acquisition Specialist based in Saudi Arabia. We provide CV writing, LinkedIn optimisation, mock interview coaching, and recruiter consultation services through this website (sirah.store).

This policy explains what personal data we collect when you use Sirah, why we collect it, who we share it with, and the rights you have over it.

Account information: full name, email address, and password (stored securely as a one-way hash — we never see or store your plain-text password) when you register. If you sign in with Google, we receive your name and email from Google.

Profile details you choose to share at signup: gender, age range, and your career goal. These are optional and used only to help Fahad tailor his advice to you.

Guest sessions: if you continue as a guest instead of creating an account, we collect only your name and phone number so Fahad can reach you about your request, and no email or password is required.

CV and career information: anything you submit through the CV intake form — nationality, education history, work experience, skills, achievements, certifications, languages, and a summary about you — plus any files you upload (CV, certificates, portfolio, or other documents).

Payment confirmation: a photo of your bank transfer receipt, uploaded so Fahad can confirm your payment. We do not collect or store any card numbers or online payment details — Sirah does not process online payments at all (see Section 6).

Messages and chat content: text messages, images, voice notes, and documents you exchange with Fahad through the in-app chat, including a fixed 6-digit verification code sent to your email during signup.

Feedback: any star rating and written review you submit after a service is completed.

Technical data: standard information collected automatically by our hosting provider, such as your browser type and IP address, used only for security and reliability — we do not run advertising or analytics trackers on this site.

To create and manage your account or guest session.

To deliver the service you requested — writing your CV, preparing your LinkedIn profile, running your mock interview, or holding your consultation.

To communicate with you: chat messages, order and payment status updates, and email notifications (sent via our email provider, Resend) for sign-in alerts, status changes, and verification codes.

To verify your identity during signup via the 6-digit email code, and to detect and prevent fraud or abuse.

To improve the service and fix problems.

Fahad Al Muaibid, as the sole service provider, can see the information tied to your own requests and messages — this is necessary for him to do the work you've asked for. Fahad cannot see other clients' data, and other clients cannot see yours: every account is isolated by database-level access rules (Row Level Security).

We do not sell your personal data, and we do not share it with advertisers or data brokers.

To operate Sirah, we rely on a small number of trusted infrastructure providers who process data on our behalf, under their own security and privacy commitments:

• Supabase — our database, authentication, and file storage provider. Your account data, messages, and uploaded files are stored on Supabase's infrastructure.

• Render — hosts the website itself.

• Resend — delivers our transactional emails (verification codes, notifications).

• GIPHY — powers the GIF search inside chat; a search you type is sent to GIPHY to return results, the same as using GIPHY directly.

None of these providers are permitted to use your data for their own purposes.

Sirah does not process online payments and does not collect or store card numbers, bank login credentials, or any online payment details. Payment is made entirely outside the platform, via bank transfer to Fahad's Al Rajhi Bank account (IBAN shared in chat after you place a request). You then upload a photo of your transfer receipt in the chat so Fahad can confirm payment before starting your work.

Your data is stored on Supabase's cloud infrastructure and transmitted over encrypted (HTTPS) connections. Passwords are hashed, never stored or transmitted in plain text. Access to every table in our database is restricted by Row Level Security policies, so you can only ever read or write your own data (and Fahad can access what he needs to serve you).

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security, but we take reasonable, industry-standard measures to protect your information.

We keep your account, request, and chat data for as long as your account is active, so you can track past requests and Fahad can reference your history if you order again. You can ask us to delete your account and associated data at any time (see Section 9) — deleting an account permanently removes your requests, chat messages, planner items, notifications, and CV intake forms.

Under Saudi Arabia's Personal Data Protection Law (PDPL), you have the right to:

• Know what personal data we hold about you and how it's used.

• Access a copy of your data.

• Request correction of inaccurate data — you can update your name, email, and password anytime in Account Settings.

• Request deletion of your account and data.

• Withdraw any consent you've given, at any time.

• Lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.

To exercise any of these rights, email us at hr44recruiter@gmail.com — we'll respond as quickly as we can.

We use only essential cookies required to keep you signed in securely (managed by Supabase Auth) and to remember your language preference. We do not use advertising, tracking, or third-party analytics cookies.

Sirah provides career and job-search services intended for adults entering or advancing in the workforce. We do not knowingly collect data from children.

We may update this policy from time to time as the service evolves. We'll update the "last updated" date at the top of this page when we do. Continued use of Sirah after a change means you accept the updated policy.

For any question about this policy or your data, email Fahad directly at hr44recruiter@gmail.com.