Privacy Policy

Who we are

mafeshsho8l is operated by Bonyad Tech in Egypt. Contact us at[email protected]for any privacy-related question.

Information we collect

• Account data: email, Egyptian mobile number, hashed password, optional display name.
• CV content: PDF or text you upload, plus the parsed structured data (skills, experience, education) and our AI's scoring of it.
• Portfolio data: anything you publish on your public portfolio slug.
• Usage data: pages visited, features used, error reports — used to improve the Service.
• Payment data: collected by Paymob (our payment processor). We never see your full card number; we only store the last 4 digits and the transaction id.
• Push notification tokens: FCM (Android, iOS via Firebase) or Web Push subscription endpoints, so we can deliver in-app alerts you opted in to.
• Calendar access (iOS only, opt-in): read-only access to your iOS calendar so the app can detect upcoming interviews/job fairs. We never write to your calendar and we never upload calendar events to our servers.

How we use your information

• Provide the Service: analyse your CV, publish your portfolio, match jobs, send notifications.
• Generate AI-powered career recommendations using third-party LLMs (see "Third-party services").
• Process subscription payments via Paymob.
• Send email about your account, password resets, and (optionally) marketing — you can unsubscribe at any time.
• Detect abuse and prevent fraud.

How we share your information

We do not sell your data. We share limited data with the following sub-processors, only as needed to operate the Service:

• OpenAI — your CV text + job descriptions are sent for analysis. OpenAI does not train on this data per their API policy.
• Upstash — vector storage for CV recommendations.
• Paymob — payment processing.
• Google Firebase Cloud Messaging — push notification delivery for Android and iOS.
• SMTP provider — transactional email (password reset, magic links).

We may also disclose data when required by law, or to protect the rights, property, or safety of mafeshsho8l, our users, or others.

Data retention

We keep your data for as long as your account is active. You can request deletion at any time by emailing[email protected]; we will erase all your personal data within 30 days unless we are legally required to keep it (e.g. tax records of subscription payments).

Your rights

You have the right to access, correct, export, or delete your personal data. Most of these are self-service inside the app:

• Account → edit profile to update name / email / phone.
• Settings → export your data (CV PDF, portfolio HTML) via the Build CV PDF feature.
• Email [email protected] to request deletion.

Children

The Service is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has provided us data, contact us and we will delete it.

Security

Passwords are hashed with bcrypt. Production traffic is served over HTTPS. Push notification credentials and payment secrets are stored in encrypted environment variables on our server. No system is 100% secure — if we discover a breach affecting your data, we will notify you within 72 hours.

Changes to this policy

If we change this policy materially, we will update the "Last updated" date at the top and notify active users by email and in-app notification.

Contact

[email protected]