Privacy Policy

The data controller for your personal data is:

Tenure Careers
Email: legal@tenurecareers.io
Based in Dubai, United Arab Emirates.

We collect the following categories of personal data:

Account information. When you create an account, we collect your email address and name. Authentication is handled through a secure email-based sign-in system.

Preference data. If you choose to set preferences for Tenure Briefing personalisation, we collect your selected sectors, seniority level, country preferences, and firm type preferences. This data is stored in our database and used solely to personalise your experience.

Usage data. We record which job listing detail pages you view, tied to your account or session. This data is used for analytics and service improvement. It is not used to limit your access to listings.

Search data. When you use the Platform’s search functionality, your search queries are processed by AI services to improve search relevance. We log search queries, parsed interpretations, result counts, and performance metrics. IP addresses are hashed (not stored in raw form) for rate-limiting purposes.

CV review data. If you submit a CV for review, we collect your name, email, current role, target seniority, target firm type, notes, and the CV file itself. CV files are stored securely and are reviewed only by our team. CVs are deleted within 90 days of review completion unless you request that we retain the file. CV data is never shared with employers, recruiters, or any third party.

Analytics data. We use Google Analytics 4 to collect anonymised usage data including pages visited, time on site, referral source, device type, and general geographic region. This data is aggregated and does not personally identify you. Analytics cookies are only set if you provide consent.

Error monitoring data. We use Sentry to monitor technical errors and Platform performance. Sentry collects error details (stack traces, browser type, page URL) as part of essential service operation. With your analytics consent, Sentry may also record anonymised session replays (with all text masked and media blocked) to help us diagnose issues. Sentry does not collect your name, email, or account details.

Data we do not collect. We do not collect or store any payment card information, bank account details, national identification numbers, passport numbers, or other sensitive financial or identity data. All payment processing is handled by Stripe Payments Europe, Ltd (our Merchant of Record from May 2026 onwards). A small number of subscriptions opened before May 2026 remain on our prior Merchant of Record, Dodo Payments, until they lapse. Financial data is collected and stored by the processor under their own privacy policy.

We use your personal data for the following purposes:

Service delivery. To provide you with access to the Platform, manage your account, and deliver paid features including the salary database and personalised Tenure Briefing.

Personalisation. To customise your experience based on your stated preferences, including Tenure Briefing content, job recommendations, and salary data relevance.

Search functionality. To parse and interpret your search queries using AI services in order to deliver relevant job listings and salary data.

Platform improvement. To analyse aggregated usage patterns, improve our content curation, and enhance Platform features.

Communication. To send you the weekly curated Tenure Briefing (paid subscribers only, or where you have opted in), transactional emails related to your account, and important service announcements. We will not send you marketing emails without your consent.

Legal compliance. To comply with applicable laws, regulations, and legal processes.

We process your personal data on the following legal bases:

Contractual necessity. Processing necessary to perform our contract with you (providing the Platform and subscription services).

Legitimate interest. Processing necessary for our legitimate interests in improving the Platform, preventing fraud, and understanding usage patterns, provided these interests are not overridden by your rights.

Consent. Where required by applicable law, we rely on your consent for specific processing activities, such as sending marketing communications, setting analytics cookies, or processing CV review submissions. You may withdraw consent at any time.

We use the following third-party services to operate the Platform. Each processes data in accordance with their own privacy policies:

Stripe Payments Europe, Ltd. Merchant of Record for all payment processing from May 2026 onwards. Stripe collects and processes payment information, handles billing, invoicing, applicable tax, and refunds. Stripe’s privacy policy is available at stripe.com/privacy.

Dodo Payments (legacy). Merchant of Record for subscriptions opened before May 2026, retained until those subscriptions naturally lapse. Dodo Payments’ privacy policy is available at dodopayments.com/legal/privacy.

Supabase Inc., Database hosting and authentication services. Stores account data, preferences, and listing view tracking. Supabase infrastructure is hosted in the cloud.

Vercel Inc., Website hosting and content delivery. Servers are located in the United States and global edge network.

Resend, Transactional and Tenure Briefing email delivery. Processes email addresses for the purpose of sending account-related and Tenure Briefing emails.

Google Analytics 4, Website analytics. Collects anonymised usage data only when you have consented to analytics cookies. You can opt out of Google Analytics using the Google Analytics Opt-out Browser Add-on.

Anthropic, AI service used to parse and interpret search queries on the Platform. Search query text is sent to Anthropic’s API for natural language processing. Anthropic does not use API inputs for model training.

OpenAI, AI service used to generate text embeddings for semantic job search. Job listing text is sent to OpenAI’s API for vectorisation. OpenAI does not use API inputs for model training under their current data processing terms.

Sentry, Error monitoring and performance tracking. Sentry receives technical error data (stack traces, browser metadata, page URLs) to help us maintain Platform reliability. Session replay recording (with all text masked and media blocked) is only enabled if you consent to analytics cookies.

Company Logos, Company logos are stored in our own database and served from our infrastructure. No third-party logo services (such as Clearbit or Google Favicons) are used, so your IP address is never exposed to external logo providers.

Some of our third-party service providers are located outside the UAE and GCC region, including in the United States and the European Economic Area. Where your personal data is transferred internationally, we ensure that appropriate safeguards are in place in accordance with applicable data protection laws, including UAE Federal Decree-Law No. 45 of 2021 and, where applicable, GDPR Chapter V (Articles 44–49). These safeguards may include standard contractual clauses, adequacy decisions, or other mechanisms recognised by applicable law.

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you delete your account, we will delete or anonymise your personal data within thirty (30) days, unless we are required by law to retain it for a longer period.

Please note that data previously shared with third-party processors (such as analytics, error monitoring, or AI services) may be retained by those processors in accordance with their own data retention policies, even after your account is deleted from Tenure’s systems.

CV review files are deleted within ninety (90) days of review completion unless you request that we retain them.

Anonymised and aggregated data that does not identify you may be retained indefinitely for analytical and statistical purposes.

Listing view tracking data for unauthenticated users (session-based) is automatically purged after ninety (90) days.

Search query logs are retained for twelve (12) months from the date of the search, after which they are automatically deleted or anonymised.

We implement appropriate technical and organisational measures to protect your personal data, including: encryption in transit (HTTPS/TLS) across all connections; secure authentication through Supabase Auth; row-level security (RLS) policies ensuring users can only access their own data; Content Security Policy (CSP), HTTP Strict Transport Security (HSTS), and other security headers; and regular review of access controls and security practices.

While we take reasonable steps to protect your data, no method of transmission or storage is completely secure. We cannot guarantee absolute security.

In the event of a data breach affecting your personal data, we will notify the relevant data protection authorities and affected users in accordance with applicable laws, including within 72 hours where required by GDPR or UAE data protection regulations.

The Platform uses the following cookies and tracking technologies:

Essential cookies. Required for authentication and session management. These cannot be disabled without affecting Platform functionality. Includes Supabase authentication cookies (session duration, refreshed on each visit) and the cookie consent preference cookie stored in your browser’s local storage (persists until cleared).

Analytics cookies. Google Analytics 4 cookies (prefixed with _ga) are used to collect anonymised usage data. These cookies have a duration of up to 2 years. Analytics cookies are only set if you accept them through our cookie consent banner. You can change your preference at any time using the “Cookie Settings” link in the footer.

Error monitoring. Sentry sets performance monitoring cookies as part of essential error tracking (session duration). Session replay cookies are only set if you have accepted analytics cookies through our cookie consent banner.

Listing view tracking. We record which listing detail pages you have viewed, using session identifiers and account IDs, for analytics and service improvement. This data is not used to enforce any access limit.

We do not use advertising cookies, retargeting cookies, or any third-party tracking for advertising purposes.

Under applicable data protection laws, including UAE Federal Decree-Law No. 45 of 2021, you have the following rights:

Right of access. You may request a copy of the personal data we hold about you.

Right to rectification. You may request that we correct inaccurate or incomplete personal data.

Right to erasure. You may request that we delete your personal data, subject to any legal obligations requiring retention.

Right to restrict processing. You may request that we limit the processing of your personal data in certain circumstances.

Right to data portability. You may request a copy of your data in a structured, commonly-used, and machine-readable format.

Right to object. You may object to the processing of your personal data based on legitimate interest grounds.

Right to withdraw consent. Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at legal@tenurecareers.io. We will respond to your request within thirty (30) days.

If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) provides you with additional rights and protections. In addition to the rights listed in Section 10 above:

Legal basis. We process your data on the legal bases described in Section 4. For EU/EEA users, consent-based processing (analytics cookies, marketing emails) requires your affirmative opt-in, which you can withdraw at any time.

Cross-border transfers. Your data is transferred to the United States (Supabase, Vercel, Resend, Anthropic, OpenAI, Sentry) and potentially other jurisdictions. We rely on Standard Contractual Clauses (SCCs) approved by the European Commission and/or adequacy decisions to safeguard these transfers.

Right to lodge a complaint. You have the right to lodge a complaint with your local data protection supervisory authority.

Data Protection Officer. For GDPR-related enquiries, contact us at legal@tenurecareers.io.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with specific rights regarding your personal information:

Right to know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources, the purposes for collection, and the categories of third parties with whom we share your data.

Right to delete. You have the right to request deletion of your personal information, subject to certain exceptions.

Right to opt out of sale or sharing. Tenure does not sell your personal information. We share limited data with analytics providers (Google Analytics) for Platform improvement purposes. You can opt out of this sharing by declining analytics cookies through our cookie consent banner or by adjusting your cookie preferences in the footer.

Right to non-discrimination. We will not discriminate against you for exercising your CCPA rights.

Do Not Sell or Share My Personal Information. Tenure does not sell your personal information as defined under CCPA/CPRA. To opt out of sharing your data with analytics providers, decline analytics cookies through our cookie consent banner or select “Cookie Settings” in the footer at any time. You may also click here to manage your cookie preferences.

To exercise your California privacy rights, contact us at legal@tenurecareers.io.

Paid subscribers receive a weekly curated Tenure Briefing personalised to their stated preferences as part of the subscription service. Free-tier users may opt in to receive The Tenure Briefing during account setup or through their account settings.

You may unsubscribe from the Tenure Briefing at any time by clicking the unsubscribe link in any Tenure Briefing email or by updating your preferences in your account settings. Unsubscribing from The Tenure Briefing does not cancel your paid subscription.

We may send transactional emails related to your account (such as subscription confirmations and sign-in links) regardless of your Tenure Briefing preferences. These are not marketing communications.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take steps to delete the information.

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page, updating the “Last updated” date and version number. For Subscribers, we will also provide notice via email at least fourteen (14) days before material changes take effect. We encourage you to review this policy periodically.

If you have a concern about how we handle your personal data, we encourage you to contact us first at legal@tenurecareers.io so that we can address it. You also have the right to lodge a complaint with the relevant data protection authority, including the UAE Data Office or your local EU/EEA supervisory authority, as applicable.

For any questions about this Privacy Policy or our data practices, please contact:

Tenure Careers
Dubai, United Arab Emirates
Email: legal@tenurecareers.io