Privacy Policy

Your privacy matters to us, and we’re dedicated to keeping your personal data safe and secure.

1. Who We Are

Last updated: 1 March 2026

This Privacy Policy explains how Recruitera ("Recruitera", "we", "us", or "our") collects, uses, shares, stores, and protects personal data when you use our Applicant Tracking System and related services (the "Platform"). It is issued in compliance with the Egyptian Personal Data Protection Law No. 151 of 2020 (the "PDPL") and its Executive Regulations issued under Prime Ministerial Decree No. 816 of 2025 (the "Executive Regulations").

Recruitera is operated by Basharsoft Group, the technology group behind Wuzzuf, Forasna, and iCareer. For the purposes of the PDPL:

We act as the data controller for personal data we collect directly from our Subscribers (employers and their team members), website visitors, and candidates who create accounts on our public career sites.

We act as a data processor for personal data that our Subscribers upload, import, or capture into the Platform regarding their own candidates and employees. In that case, the Subscriber is the data controller, and our processing is governed by the Data Processing Agreement entered into with the Subscriber.

2. How to Contact Us About Privacy

If you have any questions, requests, or complaints regarding this Policy or your personal data, please contact us:

Email: [email protected]

You also have the right to lodge a complaint directly with the Personal Data Protection Center (PDPC), the supervisory authority established under the PDPL.

3. Personal Data We Collect

Data we collect from Subscribers (employers and their team members):

Identity data: name, job title, profile picture (if provided).

Contact data: work email, phone number, employer name and address.

Account data: username, encrypted password, role and permissions, login history.

Billing data: billing contact, tax ID, payment instrument details (processed by our payment provider — we do not store full card numbers).

Communications data: messages you send to support, feedback, survey responses.

Data we collect or receive about candidates:

Identity and contact data: name, national ID or passport number (where provided), nationality, date of birth, email, phone, address.

Professional data: CV/resume content, work history, education, certifications, skills, references, salary expectations, links to professional profiles.

Application data: jobs applied to, application stage, evaluation scores, interview notes recorded by Subscribers, offer letters.

Communications data: emails, WhatsApp messages, scheduling correspondence between candidate and Subscriber sent through the Platform.

Sensitive personal data: in limited circumstances, the Platform may process sensitive data (such as health information for accessibility accommodation, or information regarding criminal background checks for regulated industries). Such processing is performed only on the explicit, written consent of the candidate, or as otherwise permitted under Article 12 of the PDPL.

Data we collect automatically:

Technical data: IP address, device identifiers, browser type and version, operating system.

Usage data: pages visited, features used, timestamps, referring URLs, click events.

Cookies and similar technologies: see our Cookie Policy for full details and how to manage your preferences.

4. How We Use Personal Data and Our Lawful Basis

We process personal data only where we have a lawful basis under the PDPL.

Performance of a contract: providing the Platform to Subscribers (account creation, job posting, candidate management, pipeline tracking, reporting).

Subscriber's documented instructions: processing candidate data on behalf of Subscribers (CV parsing, scoring, communications, scheduling). The Subscriber is responsible for the lawful basis (typically candidate consent).

Consent of the candidate: creating and managing candidate accounts on Recruitera-hosted career sites.

Performance of a contract and legal obligation: sending product updates, security notices, and account-related communications.

Consent (you may withdraw at any time): sending marketing communications.

Legitimate interest, balanced against your rights: improving the Platform, troubleshooting, security monitoring, and fraud prevention.

Legal obligation: compliance with Egyptian tax, labor, and accounting law.

Legitimate interest and legal obligation: establishing, exercising, or defending legal claims.

5. AI-Assisted Features and Automated Processing

The Platform includes AI-assisted features such as CV parsing, candidate scoring, semantic search, salary estimation, and interview summarisation. These features are designed as decision-support tools: they assist human recruiters but do not, on their own, make final hiring decisions.

If you are a candidate and a Subscriber has used Recruitera's AI features in evaluating your application, you have the right to:

Be informed that AI-assisted processing is taking place and understand the general logic involved.

Request human review of any decision that significantly affects you.

Express your point of view and contest the outcome.

Requests under this section should be addressed first to the Subscriber (the employer) as the data controller, or to us at [email protected] if you cannot reach them.

6. Who We Share Personal Data With

We do not sell or rent personal data. We share personal data only with the following categories of recipients, and only to the extent necessary:

Subscribers: employers receive the personal data of candidates who apply to their jobs or whom they upload to the Platform.

Other members of your Subscriber's team: within the scope of role-based permissions configured by the Subscriber.

Basharsoft Group affiliates (Wuzzuf, Forasna, iCareer) where data sharing is needed for integrated job-board distribution and only on the lawful basis declared at the point of collection.

Public authorities where disclosure is required by Egyptian law, court order, or a binding request from a competent regulator.

Acquirers, investors, or successors in the event of a merger, acquisition, financing, or sale of assets, subject to confidentiality obligations.

Our current sub-processors include:

Bubble.io — application platform and database hosting.

Amazon Web Services (AWS) — cloud infrastructure and storage.

OpenAI — AI services for selected generative features.

Google (Workspace, Gmail API, Google Analytics) — productivity, email integration, and analytics.

Infobip — WhatsApp Business API and messaging.

Intercom — customer support, in-app messaging, email, and Help Center.

n8n — workflow automation and data synchronisation.

Canny — Managing feedback and user requests.

Webflow — hosting and management of our marketing website.

7. International Data Transfers

Some of our sub-processors are located outside Egypt, which means your personal data may be transferred to, stored in, or processed in countries other than Egypt (including the United States and member states of the European Union).

Such transfers are conducted only:

Pursuant to any licence or approval required by the PDPC under the PDPL.

Where the destination country provides a level of protection no lower than that provided under the PDPL, or where appropriate safeguards (such as contractual clauses with the recipient) are in place.

Subject to a Transfer Impact Assessment that we maintain on file and make available to the PDPC on request.

You may request information about the safeguards in place by contacting [email protected].

8. Data Retention

We retain personal data only for as long as necessary for the purposes set out in this Policy and to comply with our legal obligations.

Subscriber account data: for the duration of the subscription, plus 120 days after termination for export, then deletion.

Candidate data uploaded by Subscribers: per Subscriber instructions; default 24 months from last activity unless Subscriber specifies otherwise.

Security and audit logs: 3 months.

Support communications: 24 months from last interaction.

After the applicable retention period, we will securely delete or anonymise the data, unless a longer retention period is required by law or for the establishment, exercise, or defence of legal claims.

9. How We Protect Personal Data

We implement technical and organisational measures appropriate to the risk of processing, including:

Encryption of personal data in transit (TLS 1.2 or higher) and at rest.

Role-based access controls and least-privilege principles for our personnel.

Audit logging of access to sensitive data.

Regular vulnerability scanning and security testing.

Documented incident response and breach notification procedures.

No system is perfectly secure. While we work hard to protect your personal data, we cannot guarantee absolute security, and any transmission of personal data is at your own risk.

10. Your Rights

Subject to the conditions set out in the PDPL, you have the following rights regarding your personal data:

Right to be informed about how we process your data — fulfilled, in part, by this Policy.

Right of access to a copy of the personal data we hold about you.

Right of rectification of inaccurate or incomplete data.

Right of erasure ("right to be forgotten") in defined circumstances.

Right to withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object to processing based on our legitimate interests, including for direct marketing.

Right to data portability — to receive your data in a structured, commonly used, machine-readable format.

Right to lodge a complaint with the PDPC.

To exercise any of these rights, contact [email protected]. We will respond within 30 days. We may need to verify your identity before acting on your request. Where your request relates to candidate data uploaded by a Subscriber, we will route the request to the relevant Subscriber as the data controller.

11. Children's Data

The Platform is not directed to individuals under the age of 15, and we do not knowingly collect personal data from children under that age. Where individuals between 15 and 18 use the Platform (for example, to apply for entry-level or internship roles), we process their data only with verifiable consent from a parent or legal guardian, in accordance with the Executive Regulations.

If you believe we have inadvertently collected data from a child under 15, please contact [email protected] and we will delete it.

12. Cookies and Tracking Technologies

Recruitera uses cookies and similar technologies to:

Remember login sessions and preferences.

Analyse site traffic and usage patterns.

Enhance overall user experience.

Deliver relevant marketing (with your consent).

You can manage or disable cookies in your browser settings, though some features may not function properly.

13. Direct Marketing

Where we send you electronic marketing, we do so only with your prior, affirmative consent, in accordance with the Executive Regulations and the PDPC's guidelines on electronic direct marketing. Each marketing email includes an unsubscribe link, and you may opt out at any time at no cost.

14. Third-Party Links

The Platform may contain links to third-party websites or services. This Policy does not apply to those third parties, and we are not responsible for their privacy practices. We encourage you to read their privacy policies before sharing personal data with them.

15. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices, technologies, or legal requirements. Where changes are material, we will notify you by email and by posting a prominent notice on the Platform at least 30 days before the changes take effect. Your continued use of the Platform after the effective date constitutes acceptance of the updated Policy.

The "Last updated" date at the top of this Policy reflects the most recent version.

16. Governing Law

This Policy is governed by the laws of the Arab Republic of Egypt, including the PDPL and its Executive Regulations. Any dispute arising from this Policy shall be subject to the exclusive jurisdiction of the competent Egyptian courts.

Integrations That Fit Your Workflow

Recruitera plugs right into your hiring stack, from Google Jobs, Outlook, LinkedIn, WUZZUF, to Forasna and more. Plus, we build custom integrations tailored to your needs, so your tools, data, and hiring flows stay perfectly connected.

Get Started For Free