Fursa Privacy Policy

1) Who we are

Fursa is operated by Polynomial Studio Company. “Fursa,” “we,” “us” and “our” refer to that company and the Fursa service.

Privacy requests can be sent to [email protected].

2) The service covered today

Fursa currently provides public job discovery and accounts. Mia, the candidate product, is being prepared for an invite-only beta for UAE-located roles. An access request is not admission and is not consent to daily email.

Marco is open only for design-partner conversations. Fursa does not currently provide Marco customers with candidate search, candidate profiles, CVs or contact details. The Fursa AI ATS is parked.

3) Information we collect

Depending on how you use Fursa, we may process:

• account and contact information, including name and email;
• candidate-provided CVs, professional history, education, skills and links;
• desired work, location, level, compensation expectations, timing, exclusions and other stated constraints;
• messages to Mia, corrections, approvals, declines and feedback;
• job views, saves, dismissals, apply-link clicks and status updates;
• email choices, pause state, recruiter-discoverability choices and opportunity-specific consent;
• access requests, employer design-partner requests and support messages; and
• device, browser, IP-derived region, security, diagnostic and consent-choice information.

Do not send passport or visa copies, financial account details, medical data or other sensitive material unless Fursa clearly asks for it for a stated purpose. Nationality is not required for candidate readiness and must not be inferred.

4) Where information comes from

We receive personal information from you, from your use of Fursa and from a source you ask Fursa to process, such as an uploaded CV or supported professional-profile link. Entering a link, importing a source and verifying ownership are separate states.

Job and company information comes from employer career pages, applicant tracking systems and other public or permitted sources. The existing public-search archive is still being narrowed; it must not be read as an already complete UAE-only index.

5) How we use information

• operate accounts, search, saved jobs and application tracking;
• build an inspectable candidate draft and apply approved corrections;
• understand stated intent and rank or withhold roles against it;
• answer messages and, when eligible and opted in, prepare a daily Mia update;
• keep a conversation consistent across email and the app;
• process access and employer-interest requests;
• secure the service, enforce limits and investigate errors or abuse; and
• measure and improve Fursa where analytics has been allowed.

6) Legal bases

Where applicable law requires a legal basis, Fursa relies on consent for optional email, analytics and any future recruiter disclosure; steps requested by you and performance of the service for account and candidate functions; legitimate interests in service security, reliability and limited product improvement; and legal obligations.

Consent for one purpose does not authorize another. Daily email, anonymous recruiter discoverability, identity or contact sharing, and any nationality-specific purpose require distinct decisions.

7) AI and automated processing

Fursa uses automated systems and AI providers to extract a draft from professional evidence, organize candidate statements, answer messages, retrieve and rank jobs, explain recommendations and detect service problems. Relevant content may be sent to those providers to perform the requested task.

AI output may be wrong, incomplete or stale. Imported and inferred information is labelled separately from candidate-stated information where the product supports it. A proposed profile rewrite requires approval before it becomes an accepted change.

Fursa does not make an employer's final hiring decision. Candidates and employers should verify jobs, compensation, eligibility and important decisions at the source.

8) Candidate privacy and recruiter contact

Candidate profiles, CVs, intent and messages are private by default. Requesting Mia access, using job search, saving a job, clicking apply or enabling daily email does not make a candidate discoverable to recruiters.

Fursa will not provide unrestricted access to candidate records. Before any Marco pilot can open even an anonymized personal profile, Fursa must complete its separate privacy, data-location, recipient, retention and withdrawal controls.

Future contact sharing must be tied to a named opportunity and recipient and requires the candidate's affirmative agreement. Withdrawing general discoverability stops future access; obligations for data already shared with an authorized recipient will be stated before that feature launches.

9) Email and communications

Account, security, legal and direct support messages may be sent when needed to run the service. Candidate product mail comes from Mia; founder and company notices come from Fursa. Replies to Mia use a signed address so the reply can return to the same candidate thread.

Daily Mia email is not active for the new beta until release gates pass. When active, it requires admission, readiness, a verified email and explicit opt-in. Turning email off, unsubscribing, pausing a search, a suppression, bounce or complaint stops the relevant scheduled mail. A reply does not silently resubscribe or resume email.

You can use the controls in Fursa where available, use the unsubscribe link in an email, or contact us. Necessary account, security and legal notices may still be sent.

10) Cookies, local storage and analytics

Fursa uses first-party storage needed for authentication, security, preferences and short-lived access handoffs. Optional product and website analytics is off until the visitor allows it, and browser Do Not Track or Global Privacy Control signals override an earlier analytics grant.

The current providers and browser control are described in the Cookie Policy.

11) Who we share information with

We use providers for hosting, database/authentication/storage, search, AI processing, email, security/error monitoring and optional analytics. Current provider categories include Vercel, Supabase, Meilisearch, OpenAI, Resend, Sentry, PostHog and Google Analytics. Stripe remains only for historical billing and accounting compatibility; there is no new candidate checkout.

We may also disclose information to professional advisers, a lawful authority, or a successor in a genuine corporate transaction. We do not sell personal information or candidate profiles and do not share candidate contact details with employers in the current Marco design-partner stage.

12) Data location and international processing

Fursa's providers may process information outside the UAE, including in the United States or Europe depending on provider configuration and support access. We use contractual and technical controls appropriate to the service and applicable law.

The UAE's federal Personal Data Protection Law includes controls for processing, data-subject rights and cross-border transfers. Fursa will not open candidate data to a Marco pilot until its specific controller/processor roles, hosting locations, transfer basis and withdrawal propagation are documented and implemented. See the UAE Government's data-protection overview.

13) Retention and deletion

We retain personal information for as long as needed to provide the service, preserve requested job or conversation history, meet legal and accounting duties, secure the service and resolve disputes. The period depends on the data and its purpose.

A deletion request removes or de-identifies personal payloads unless limited data must be kept for legal, fraud-prevention, suppression or audit purposes. Email suppression evidence may be retained so an address is not accidentally mailed again.

14) Your choices and privacy rights

Depending on applicable law, you may ask for access, correction, portability, restriction, objection or deletion, and may withdraw consent. You can also correct candidate information in the product where that control is available.

Send a request from the email linked to your account to [email protected]. We may need to verify identity. Withdrawing consent does not undo processing that was lawful before withdrawal.

15) Security and age

We use access controls, signed tokens, encryption in transit, scoped service roles, rate limits, logs and provider controls intended to protect information. No online service can guarantee absolute security.

Fursa is intended for people aged 18 or older and is not directed to children. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

16) Changes to this policy

We may update this policy as Fursa changes. We will update the date above and use an appropriate notice for material changes. A future Marco pilot requires a further policy update before candidate data becomes available to a customer or service operator.

17) Contact

Questions and privacy requests: [email protected].