Data controller
CruitWay, Mohammedia, Morocco, is responsible for the processing described here. For questions about your data or to exercise your rights, email support@cruitway.com.
Data we collect
- Account information such as your name, email address, encrypted password, photo, and profile type.
- Professional information you provide, including résumés, skills, experience, education, portfolios, posts, and applications.
- Company or university information provided during registration.
- Technical information such as IP address, device, browser, security logs, cookie preferences, and activity required to operate the service.
- Support, billing, and subscription information. Complete card details are processed by our payment providers and are not stored by CruitWay.
Why we process data
We use this information to provide and secure the service, authenticate users, display profiles and opportunities according to their settings, process applications and subscriptions, provide support, prevent fraud, meet legal obligations, and—with consent where required—measure and improve the experience.
Google Sign-In
If you choose Google Sign-In, we receive profile information authorized by Google, usually your identifier, name, and email address. We use it only to create or connect your CruitWay account.
Automated and AI processing
Some optional features use automated processing, including AI chat, application drafting, interview practice and analysis, portfolio design analysis, recommendations, moderation, and candidate matching. Depending on the feature, submitted text, CVs, portfolio information, audio, images, or interview responses may be processed by CruitWay's local AI services or an identified service provider. We use the result to provide the requested feature, retain related history where the feature requires it, and allow you to review or delete available records. AI output can be inaccurate and does not make employment, education, or other decisions for you. Do not submit information you are not authorized to share. Where consent is required, the feature presents a consent or confirmation step before processing.
Retention and security
We keep account data while your account is active; after closure, we delete or anonymize it within the period stated in our retention schedule, except data required for legal, security, fraud-prevention, or dispute purposes. We use appropriate access controls, encryption, and logging measures. No system can guarantee absolute security.
Your choices and rights
You may request access, correction, export, or deletion of your information, object to certain processing, or withdraw consent where processing is based on consent. You can manage cookie preferences from the website. We may retain some information where the law requires it. We will verify the requester before responding and handle requests within the applicable legal period.
Changes and contact
We may update this policy and will publish the revised date on this page. To exercise a right or ask a question, contact our privacy and support team.