1. What we collect
We collect what you give us and what we need to run the service safely:
- Account: your name, email address, password (stored only as a one-way hash), account type, language and the country you signed up from.
- Profile and CVs (job seekers): phone number, photo, experience, education, skills, CV files and the answers you save when practising interviews.
- Applications: the jobs you apply to, what you send with them and how each application moves through the employer's stages.
- Hiring (recruiters and companies): company details, verification documents (commercial registration, tax card), job posts, notes, interview schedules and team members.
- Payments: invoices, plan, amounts and the payment provider's reference. For a saved card we keep only the provider's token, the card brand and its last 4 digits.
- Technical: IP address, browser and device, sign-in sessions and security logs.
- Usage: pages visited and actions in the app, through Google Analytics.
2. How we use it
- To run your account and the features you use: profiles, CVs, applications, job posts and hiring stages.
- To send you sign-in codes, receipts, renewal notices and notifications about your applications, jobs and team.
- To take payments, issue tax invoices and handle refunds.
- To verify companies and keep Nagm safe: preventing fraud, abuse and unauthorised access.
- To understand how Nagm is used and improve it.
- To meet legal and tax obligations.
3. AI processing
When you use an AI feature (CV analysis, matching a profile to a job, drafting a job post, interview practice), we send the text that feature needs to an AI provider: Anthropic's Claude through Amazon Bedrock, or DeepSeek. We send only what the feature needs, and we use the result only to give it back to you or to the employer you applied to.
5. Where your data is stored
Our providers may store and process data outside your country, for example in the United States. We use providers with recognised security standards and share only what each one needs.
6. How long we keep it
- Your account and profile: for as long as the account exists.
- When you delete your account, your profile, CVs and files are deleted. If you have applications or job posts, write to support so we can close the account properly with the companies involved.
- Invoices and payment records: for as long as tax law requires.
- Security logs: only as long as they are needed to protect accounts.
7. Your rights
Under the data protection laws that apply to you (such as Egypt's Personal Data Protection Law and Saudi Arabia's Personal Data Protection Law), you can:
- see and correct your information, most of it directly in your profile;
- delete your account from your account settings;
- ask us (at support@nagm.io) for a copy of your data, or object to or limit how we use it;
- complain to your country's data protection authority.
9. Security
Passwords are stored as one-way hashes, sign-in codes expire within minutes and lock after repeated wrong attempts, traffic is encrypted, and staff access is limited by role. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.
10. Children
Nagm is for people aged 18 and over. We do not knowingly collect information from anyone younger.
11. Changes and contact
We will update this policy when our practices change, and tell you in the app or by email when a change matters.
Questions or requests about your data: support@nagm.io.