Effective Date: May 2, 2025

At Qureos Inc. ("Qureos," "we," "our," or "us"), we understand how important your privacy is. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform as a job seeker. Our goal is to make your experience as seamless, transparent, and secure as possible, while ensuring we comply with the strictest global privacy standards.

By using our platform, you consent to the practices outlined in this policy.

To ensure clarity throughout this policy, we define key terms below:

• "Candidate": Refers to any individual using Qureos to explore career opportunities, apply for jobs, or receive career coaching.
• "Platform": Refers to the Qureos website (Qureos.com), mobile applications, and related digital services.
• "Personal Data": Means any information that can identify you, such as your name, email, voice recordings, or job history.
• "Processing": Includes any operation performed on personal data, such as collection, recording, storage, use, or sharing.
• "Services": Refers to all features provided to Candidates, including job matching, career guidance, and employer connections.

By defining these terms clearly, we aim to avoid ambiguity and support your understanding of our practices.

This Privacy Policy applies exclusively to Candidates who use Qureos to access job-related services. It explains how we handle your personal data, whether you're actively searching for a role, completing a profile, or passively exploring opportunities.

Our policy does not apply to Companies using Qureos to hire talent. Those users are covered under a separate privacy policy specific to companies.

We are committed to ensuring that all personal data processed under this policy is handled fairly, lawfully, and transparently.

We collect various categories of personal information to provide and improve our services. This includes data you provide directly, data we collect automatically, and data from third-party sources.

3.1 Personal Information You Provide

When you use our Platform, you may submit:

• Full Name: Used to personalize your experience and identify you in our system.
• Email Address: Required for login, notifications, and employer communication.
• Phone Number: Enables verification and support.
• Address (City, Country): Helps filter jobs based on location preferences.
• Nationality and Gender: Optional fields that may be used to help meet employer diversity goals or local employment regulations.
• CV/Resume and Work History: Forms the basis of your professional profile and is shared with employers.
• Job Preferences: Enables more accurate matching with relevant job opportunities.
• Audio and Video Recordings: Collected during assessments; used solely for skills evaluation and not for identity verification.

We treat all these details as private and secure, ensuring they are only processed for the stated purposes.

3.2 Automatically Collected Data

We also collect usage data through cookies and device logs:

• Device Information: Type of browser, device model, OS version.
• Activity Logs: Pages visited, time spent, click behavior.

This data helps us improve our Platform and ensure it works reliably across different systems.

3.3 Data from Public Sources

Where permitted by law, we may enrich your Candidate profile using publicly available data, such as from LinkedIn or GitHub. This is used to enhance your discoverability and match potential job opportunities more accurately.

We gather data from multiple sources to ensure completeness and accuracy:

• Direct Input: Information you submit when registering or updating your profile.
• Platform Interactions: Data generated through use of features like job applications, video responses, or saved searches.
• Public Enrichment: Select data collected from public web sources to strengthen your professional presence.

This multi-source approach supports more effective matchmaking between Candidates and Companies.

We use your personal data to provide, personalize, and optimize the Qureos experience:

• Account Creation and Profile Management: Establish and maintain your Candidate account.
• Job Matching and Recommendations: Connect you with roles aligned to your background and preferences.
• Employer Introductions: Share your profile with relevant companies.
• Interview and Assessment Facilitation: Enable you to complete audio/video responses for evaluation.
• Notifications: Inform you about job openings, updates, or feature enhancements.
• Platform Improvements: Analyze user trends to improve functionality and navigation.

We are careful to limit use to only those purposes necessary to deliver core services.

We rely on one or more of the following legal bases under GDPR and similar frameworks:

• Consent: For collecting optional data and sending non-essential communications.
• Contractual Necessity: To deliver services you requested, such as account creation and job applications.
• Legitimate Interests: For fraud prevention, system security, and platform analytics.
• Legal Obligations: When required to retain or disclose information under applicable law.

We ensure that all data processing is proportionate and consistent with your rights.

We only share personal data in limited cases:

• With Employers: When you apply to a job or match with a role, your profile is shared with the employer.
• With Service Providers: We use cloud hosting, analytics tools, and assessment platforms that may temporarily access your data under strict contracts.
• With Authorities: Where required by law or legal process.

We do not sell, lease, or monetize your personal information under any circumstances.

To support regional compliance and performance, your data is stored based on your location:

• EU Users: Data stored in secure data centers within the European Union.
• UAE Users: Data hosted within the UAE.
• Saudi Users: Data stored in accordance with KSA's data sovereignty requirements.

Cross-border transfers are only conducted with adequate protections like encryption and approved legal safeguards.

We maintain high standards of security to keep your data safe:

• Encryption: All sensitive information is encrypted both at rest and in transit.
• Access Control: Only authorized personnel with defined roles can access personal data.
• Monitoring and Alerts: Continuous monitoring to detect suspicious activity.
• Incident Response: In case of a breach, we act swiftly and transparently.

Your security is integral to our promise of responsible data stewardship.

You have several important rights under GDPR and equivalent laws:

• Access: You can request a copy of the personal data we hold.
• Correction: You may ask to update or correct inaccuracies.
• Deletion: You can delete your profile or request erasure of data.
• Restriction: You may limit how we process your data.
• Portability: You can receive your data in a machine-readable format.
• Objection: You can object to processing for certain purposes, such as marketing.
• Withdrawal of Consent: Where consent is the legal basis, you can withdraw it at any time.

You can exercise these rights through your account settings or by contacting hello@qureos.com.

We retain your data only as long as it serves the purposes outlined in this policy:

• Active Users: Your account remains active as long as you log in at least once per year.
• Inactive Users: If your account is inactive for 12 months, you will receive three warning notifications before we delete your data.
• Account Deletion: Upon request, your data is removed within 30 days unless required for legal reasons.

We never retain personal data longer than necessary.

We may revise this Privacy Policy from time to time to reflect improvements, legal updates, or changes in our data practices. If we make material changes, we will notify you via email or a notice on the Platform before they take effect.

You are encouraged to review this Policy regularly to stay informed.

If you have questions or concerns about this Privacy Policy or how we process your personal information, please contact us:

Qureos Inc.

• Email: hello@qureos.com
• Jurisdiction: UAE and KSA