Your data,
your call.
A short, plain-English note on what Pulse Hiring collects, why we collect it, who we share it with, and what you can do about it. We're a UAE-based hiring platform — this notice is aligned with UAE PDPL, the EU/UK GDPR, and the Saudi Personal Data Protection Law (PDPL) for roles located in Saudi Arabia.
01In one paragraph
Pulse Hiring helps you get hired in F&B, hospitality, and retail across the UAE by replacing the CV with a short video. To do that, we collect a small amount of profile information, the video you record, and basic usage data so the app works. We share your profile and video only with paying recruiters using Pulse — never sold, never used to train third-party AI models. You can change the details you entered at any time, and you can ask us for a copy of everything we hold about you, or ask us to delete it.
02What we collect
- Account. Phone number, name, language, and the WhatsApp/SMS one-time code we use to sign you in. Email is optional.
- Profile. Sector, role, specialisation, years of experience, current city, availability, languages, salary expectation, nationality, work status, and your education and employment history. Prior employer is optional.
- Eligibility answers. Where a role has a legal eligibility requirement, the answer you give at the door — for example work status, and in specific markets military-service status (Egypt) or Saudi-national status (Saudi Arabia). These decide eligibility only. They are never part of any score.
- Files and photos you choose to add. A CV, if you upload one, and a photo of yourself if you set one. Both are optional, both are stored privately, and neither is required to apply.
- Your video. The short introduction you record, plus retakes. Up to three takes per question, per hour.
- AI-generated. Machine transcripts of your video, and an assessment of your answer. For answers assessed before 14 August 2026 this is a score out of 100 with five sub-scores (presence, communication, situational judgment, service instinct, attitude). Answers assessed after that date carry no presence sub-score, and no video frames are read. Answers assessed from 1 September 2026 also carry no number derived from how you sound. Newer answers carry a reading of how well the answer addressed what the role asks for, on four levels. Recruiter-facing only.
- Usage. Device type, app version, IP address, anonymous events ("started recording", "completed flow") so we can fix what breaks.
What we don't collect. We never ask for your Emirates ID, passport number, or salary history. We don't collect your race, ethnicity, religion, gender, date of birth, political views, or any data classified as special category under GDPR — those fields do not exist in our system. We don't track you across other apps or websites. A CV is optional, never required, and you can apply without one.
Nationality, and what it is used for. We do collect your nationality, because employers need it for work-eligibility context. It is shown to recruiters, and it is never an input to your score — the scoring system cannot read it.
03Why we collect it
Three reasons, in order of importance: (1) to put your profile and video in front of recruiters who match your role and location; (2) to let those recruiters reach you when there's a fit; (3) to keep the app working — authentication, security, fraud prevention, and debugging.
Our legal bases under UAE PDPL, Saudi PDPL, and GDPR are: performance of contract for running the Service, legitimate interests for security and product improvement, your consent for video recording and discoverability, and legal obligation when we have to respond to lawful requests. You can withdraw consent at any time.
We do not use your data for advertising. We do not sell it. We do not share it with anyone outside Pulse Hiring, except the service providers listed in section 5 and recruiters in scope.
04Your video & the AI
Your video is the centre of Pulse. We store it encrypted, transmit it over HTTPS, and only show it to recruiters who match the role you're applying for or who match your discoverable profile. You can re-record it or hide it yourself, and you can ask us to delete it.
When you submit a video, our system automatically transcribes the audio, assesses what you said against what the role asks for, and produces a structured result for the recruiter. What is measured has changed over time. Assessments made before 14 August 2026 scored five dimensions, including how you came across on camera. We no longer read video frames and we no longer assess presence. From 1 September 2026 we no longer derive any number from how you sound. The score is produced for the recruiter and is not shown to you in the app — but it is information about you, and you can ask us for it. The AI does not make hiring decisions and does not perform facial recognition to identify you. The recruiter is always the decision-maker; the score is one input among several they consider.
Your right to human review (GDPR Art. 22). Because the AI is decision-support and not solely-automated decision-making, this processing sits outside Article 22's prohibition. No decision about you is made by software alone: a person makes every hiring decision, and the record of who decided what, and when, is kept. If you believe the score has been misapplied in a decision affecting you, email hello@pulsehiring.ai and we will act on it.
05Who sees it
- Paying recruiters on Pulse. Operators in F&B, hospitality, and retail across the UAE. They see your discoverable profile if you've consented to be discoverable, and your role-application video if you've applied to their role. Phone and WhatsApp are gated behind a contact-unlock the recruiter has to spend; we log every reveal.
- Pulse Hiring staff. Only when you ask for support, or when we have to investigate abuse.
- Service providers (sub-processors). The companies in section 6 below — each is bound by contract to process your data only on our instructions.
That's the entire list. We do not share with recruitment agencies (unless you've explicitly opted in to a recruiter-facing marketplace), data brokers, ad networks, or AI training datasets.
06Where it lives
We host your data in the EU and the UAE where possible. We work with a small set of vetted service providers across the categories below to actually run Pulse. Some of them process data in the United States; for those transfers we rely on PDPL Article 22 cross-border mechanisms and, where applicable, EU Standard Contractual Clauses with supplementary safeguards (encryption in transit and at rest; minimum-necessary disclosure). For candidates applying to roles located in Saudi Arabia, cross-border transfers rely on the Saudi PDPL transfer regulations: your consent at intake plus contractual safeguards with our processors.
- Database, authentication & file storage — EU (Frankfurt).
- Video upload, encoding & streaming — primary processing in the United States with EU edge delivery.
- AI transcription & scoring — United States.
- One-time-code delivery (WhatsApp / SMS) — EU-routed where possible, SMS fallback per carrier.
- Transactional email — Asia-Pacific region.
- Web hosting & global edge — United States / global edge nodes.
- Payments processing — recruiter side only; candidates never enter payment data on Pulse.
- Product analytics & error monitoring — EU-hosted, configured to operate without third-party cookies.
We give 30 days' notice before adding a sub-processor in a category not listed above. A full named list of the specific service providers in each category — along with the contractual safeguards we have in place with each — is available on request by emailing hello@pulsehiring.ai.
07How long we keep it
This section is in two parts: what happens today, and what we have committed to. We have set retention periods and are building them now. They are not running yet, so we have kept them separate from what is actually true rather than describe them as if they were already in force.
What happens today
- Your account and what is in it. Kept for as long as you have an account with us. Nothing expires on a timer and nothing is deleted automatically.
- If you ask us to delete. We act on the request. The 30-day commitment below is not in force yet.
- Your video. Held by our video provider for as long as we hold the application or profile it belongs to.
- Backups. Held by our hosting and video providers and overwritten on their own cycles, which we do not set.
- Records required by law (e.g. tax, regulatory). Retained as long as the law requires.
What we have committed to
These periods are decided and we are building them now. They are not in force yet — we are publishing them so you know what we are holding ourselves to, and we will say so here when each one starts running.
- If you ask us to delete. Within 30 days of your request.
- Your video and audio. Deleted 12 months after your last activity with us.
- Your transcript, scores and the readings taken from them. Anonymised at 12 months, so what is left is no longer about you.
- An outer limit. Nothing is kept beyond 24 months.
- If the law requires us to keep something for a case or an investigation, that pauses these periods for as long as the obligation lasts.
- An employer we work for may ask for shorter periods than these. They cannot ask for longer ones.
Until those are running, these are the criteria we use to decide how long something is kept: whether you still have an account, whether it is needed for an application you made, whether you have asked us to remove it, and whether the law requires us to keep it.
08Your rights
Under UAE PDPL, Saudi PDPL, and EU/UK GDPR, you can ask us to:
- See what data we hold about you. Ask us and we will send you a written record of what we hold and of everything that was decided about your applications.
- Correct anything that's wrong. The details you entered yourself you can change at any time from your profile; for anything else, ask us and we will act on it.
- Delete your data ("right to be forgotten").
- Restrict how we process your data while a question is being resolved.
- Object to processing based on legitimate interests.
- Take it with you in a structured, machine-readable format (portability).
- Withdraw consent at any time, where processing is based on consent. You can turn your profile off from the talent pool yourself, from your profile; for the others, ask us. Prior processing isn't affected.
- Request a detailed sub-processor list at any time, along with the safeguards in place for each. Provided on request rather than published publicly (see section 6 for the high-level categories).
The fastest way is to email hello@pulsehiring.ai. We may ask you to verify identity (typically via the phone number on your account) before acting on a request. There's no charge for exercising any of these rights.
You can also complain to your data-protection authority without going through us first — SDAIA in Saudi Arabia, your national supervisory authority in the EU, and the competent authority for your emirate or free zone in the UAE.
09Cookies & security
We use a small number of strictly-necessary first-party cookies to keep you signed in and protect against cross-site request forgery. We don't use advertising or third-party tracking cookies. Our analytics is configured to operate without cookies and without collecting personally identifiable information.
All data is encrypted in transit (TLS 1.2+) and at rest. Authentication on the candidate side is passwordless (one-time codes). Access to production data is restricted to the controller and is audit-logged. If we become aware of a personal-data breach affecting you, we'll notify you and the relevant authority within the timeframes required by PDPL and GDPR (72 hours to the supervisory authority where applicable). For Saudi-resident candidates the competent authority is SDAIA; for EU-resident candidates, your national supervisory authority (in Spain, the AEPD).
10Changes & contact
Pulse Hiring is for adults aged 18 or over. We do not knowingly collect data from minors. If you believe a minor has registered, tell us and we'll remove the account.
If we materially change this notice, we'll update the "Last updated" date at the top of this page and let you know in-app or by email before the change takes effect for you.
Email: hello@pulsehiring.ai. We act on any privacy request that reaches us. Entity details and our postal address are provided on request.