Privacy Notice

1. Who we are

Yalliq ("Yalliq", "we", "us") is a bilingual AI copilot for job seekers across the MENA region. Yalliq is the data controller for personal data processed through the service. You can reach us at support@yalliq.com.

2. Personal data we collect

• Account data — name, email address, password hash, language preference, region.
• Profile and CV data — resumes, work history, education, skills, target roles, and any content you upload or generate.
• Job application data — job descriptions you submit, saved jobs, generated cover letters, fit scores, and application tracking entries.
• Usage and device data — pages visited, features used, timestamps, IP address, browser and device identifiers, error logs.
• Support communications — messages you send to us.

Payment card data is collected and processed directly by Paddle (see Section 5); Yalliq does not store full card numbers.

3. Why we use it and our legal basis

• Provide the service (account creation, AI features, CV tailoring, application tracking) — performance of our contract with you.
• Security and fraud prevention — legitimate interests in keeping the service secure.
• Product improvement and analytics — legitimate interests in understanding how features are used; aggregated where possible.
• Customer support — performance of our contract and legitimate interests in helping users.
• Marketing emails — consent, which you can withdraw at any time.
• Legal and tax compliance — legal obligation.

4. AI processing

To power CV tailoring, cover letters, and fit scoring, we send your CV content and the relevant job description to third-party AI providers via the Lovable AI Gateway. These providers process the data only to generate a response for you and, under our contractual arrangements, do not use it to train their models.

5. Sharing your data

We share personal data only with the categories of recipients below:

• Service providers / subprocessors — hosting, database, email delivery, analytics, error monitoring, and AI model providers, acting on our instructions.
• Merchant of Record — Paddle — for sale of paid plans, subscription management, payments, tax compliance, invoicing, and refund handling.
• Professional advisers — legal, accounting, and similar advisers, when needed.
• Authorities — where required by law or to protect our rights, users, or the public.

We do not sell your personal data.

6. International transfers

Some of our service providers operate outside your country of residence. Where personal data is transferred internationally we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions where required by law.

7. Retention

We keep personal data only as long as needed for the purposes above — typically for the lifetime of your account, plus a limited period required for legal, tax, or dispute-resolution purposes. You can delete your account at any time; we will then delete or anonymise associated personal data, except where we are required to keep it.

8. Your rights

Subject to local law, you have the right to access, correct, delete, restrict or object to the processing of your personal data, to data portability, and to withdraw consent. You also have the right to complain to your local data protection authority. To exercise these rights, contact support@yalliq.com. We will respond within the time required by applicable law (and within one month for users in the UK or EEA).

9. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls, and least-privilege database policies. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.

10. Cookies

We use cookies and similar technologies that are strictly necessary to run the service (session, authentication, security). If we add analytics or marketing cookies, we will request your consent first and provide controls to manage your preferences.

11. Changes

We may update this notice from time to time. Material changes will be communicated in-app or by email.