Privacy Policy
At Jawb.ma, protecting your personal data is a priority. This policy explains how your data is collected, used and protected.
Last updated: 19 May 2026
Data controller
MASHAAH LLC
- Registered office 1111B S Governors Ave STE 28451, Dover, DE 19904, USA
- Email contact@mashaah.com
- Website jawb.ma
Data collected
Candidates
When you apply for a job or upload your CV, we collect:
- First and last name
- Email address
- Phone number
- CV (PDF or Word document)
- Cover letter (if provided)
- City and preferred location
- Skills and professional experience
Recruiters
When you create a recruiter account, we collect:
- Company Name
- Work email address
- Phone number
- Activity Sector
- Company city
- Company description
Technical data
During your visit, we automatically collect:
- IP address
- Browser type and operating system
- Pages visited and visit duration
- Technical and operational cookies
Purposes of processing
Your data is used to:
- Connect candidates with recruiters
- Manage your account and authenticate your access
- Forward your applications to the relevant recruiters
- Display jobs relevant to your profile
- Improve our services and user experience
- Send notifications about your applications
- Prevent fraud and ensure service security
Legal basis for processing
- Consent: You agree to the collection of your data when registering or applying
- Performance of a contract: Processing is necessary to provide our matching services
- Legitimate interest: Service improvements, fraud prevention and anonymised statistics
Data sharing
Your personal data is never sold to third parties. It may be shared with:
- Recruiters: Only application information (CV, name, email) for the jobs you apply to
- Technical service providers: Hosting (AWS/Supabase), email delivery (Resend), payments (Stripe) — under confidentiality agreements
- Competent authorities: Only when legally required
Retention period
- Active accounts: Your data is retained for as long as your account is active
- Applications: Retained for 24 months after the last activity
- Uploaded CVs: Retained for 12 months, then deleted unless renewal is requested
- Technical data: Logs retained for up to 6 months
- After account deletion: Data deleted within 30 days
Your rights
Under applicable regulations, you have the following rights:
- Right of access: Obtain a copy of your personal data
- Right to rectification: Correct inaccurate or incomplete data
- Right to erasure: Request deletion of your data
- Right to portability: Receive your data in a structured format
- Right to object: Object to the processing of your data
- Right to restriction: Restrict processing in certain circumstances
To exercise your rights, email contact@mashaah.com with your request and proof of identity. We will respond within 30 days.
Data security
We implement technical and organisational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS)
- Encryption of data at rest
- Secure authentication with encrypted sessions
- Role-based data access restrictions (Row Level Security)
- Regular backups and a business continuity recovery plan
- Regular security updates
Cookies
Jawb.ma uses cookies that are strictly necessary for the service to operate:
- Authentication cookies: Keep you signed in
- Preference cookies: Remember your choices (language, cookie consent)
- Analytics cookies: Anonymised statistics to improve the service
For more information, see our Cookie Policy.
International transfers
Your data may be processed outside Morocco, particularly in the United States (cloud hosting). These transfers are subject to appropriate safeguards (standard contractual clauses and providers' security certifications).
Policy changes
We reserve the right to amend this privacy policy. In the event of a material change, you will be informed by email or a notification on the website. The last update date is shown at the top of this page.
For any questions about your personal data, contact us at contact@mashaah.com