What we collect
When you use the portal, we may process your email address and optional phone number for email-code sign-in, the job searches and pages you request, and any CV or other document you upload after sign-in. Job listings and blog data are public content, not account data.
If you choose to answer the optional About you questions (gender, date of birth, nationality, and whether you live in the UAE or in which country), we use them only for anonymous totals about who uses Unirecruit and to check the legal working age (16 in the UAE). These answers are never shown to employers or to anyone outside Unirecruit, and you can change or remove them at any time on My applications.
Employers may upload a photo of an ID card or passport so they can post without the daily limit. We use it only to confirm who is posting jobs and to protect candidates from fraud. It is stored privately, only the site owner can open it, and the employer can delete it at any time from the Post a job page.
Why we use it
We use account data to verify a sign-in, maintain a session, show and protect your own documents, and operate the recruitment portal. We do not use an uploaded document as public media and we do not display private document metadata to signed-out visitors.
Where it is stored
The independent portal runs on Cloudflare Workers. Account and portal data are stored in Cloudflare D1; private documents are stored in Cloudflare R2 under owner-scoped private keys; sessions are stored in Cloudflare KV. Sign-in codes are delivered through Mailgun.
Cookies and sessions
After successful email-code sign-in, the portal uses a secure, HTTP-only session cookie to keep you signed in. The current session is configured for up to 30 days. Sign-in codes expire after 10 minutes. You can sign out from the portal to invalidate the active session.
Applying by email through Unirecruit
When a job shows an apply address ending in @unirecruit.ae, your email and attachments are passed on to that employer, and the employer’s replies are passed back to you. We keep a copy of the message text (not the attachments) with the job it relates to, so you and the employer can keep one conversation and so we can see whether listings get answers. We never sell this information or use it to contact you about anything else.
Sharing and retention
We use the infrastructure providers above to operate the service. We do not publish your uploaded documents. Retention depends on the operational need and applicable law; contact us to request access, correction, or deletion of personal information, subject to legal and operational limits.
Security and fraud records
To protect candidates and employers from fraud and attacks, we keep a security record of what is sent to the site (forms, messages, uploaded files such as CVs and flyers, and text sent to our writing assistant), together with the account, IP address, internet provider, approximate location, device and the exact time. These records are kept for 12 months, are seen only by the site owner, and may be shared with the police or other authorities to investigate fraud or a security incident. Sign-in codes and passwords are never kept in them.
Contact and changes
For privacy requests or questions, contact hello@unirecruit.ae. We may update this notice as the independent service changes. The latest version will be published at this URL.
Review notice:
This page is an operationally accurate working draft, not legal advice. A qualified lawyer should review it for GDPR, UAE, and any other applicable requirements before final publication.
