Version: 1.4 | Effective Date: July 2026 | Last Updated: October 21, 2026

1. Introduction JET ROLE respects the privacy of employees,

professionals, candidates, and job seekers who use the Platform.

This Employee Privacy Policy explains how JET ROLE collects, uses,

stores, discloses, protects, and otherwise processes personal data when

an individual:

Creates an Employee account. Creates or updates a professional profile.

Uploads a resume or CV. Searches for jobs. Applies for a job. Saves or

follows jobs and companies. Enables a public professional profile or

public CV. Uses career, recruitment, or Artificial Intelligence

features. Communicates with Employers or JET ROLE. Uses any other

Employee service available through the Platform. For the purposes of

this Policy, references to “Employee,” “Candidate,” “Job Seeker,”

“Professional,” “you,” or “your” refer to the individual using JET

ROLE’s Employee services.

References to “JET ROLE,” “we,” “our,” or “us” refer to Future Nexus

(مؤسسة رابطة المستقبل لتقنية المعلومات), the legal entity operating the

JET ROLE Platform in the Kingdom of Saudi Arabia under CR Number /

Unified Number 7035564892.

Future Nexus acts as the Data Controller for personal data processed

through the JET ROLE Platform in accordance with the Saudi Personal Data

Protection Law (PDPL) and other applicable laws and regulations in the

Kingdom of Saudi Arabia.

Data Subjects may contact JET ROLE regarding privacy matters, exercise

their personal data rights, or submit a privacy-related inquiry or

complaint through the Help Center / Support Ticket available on the JET

ROLE Platform.

Data Controller JET ROLE is operated by Future Nexus (مؤسسة رابطة

المستقبل لتقنية المعلومات), a legal entity registered in the Kingdom of

Saudi Arabia.

Commercial Registration / Unified Number: 7035564892 Platform: JET ROLE

Country: Kingdom of Saudi Arabia Data Protection & Privacy Office: JET

ROLE Privacy & Personal Data Privacy Contact: JET ROLE Help Center →

Support Ticket → Privacy & Personal Data

This Policy should be read together with:

JET ROLE Privacy Overview. Employee Terms and Conditions. Cookie Policy.

Artificial Intelligence Policy. Security Policy. Any additional notice

presented when a specific feature is used. 2. Our Role JET ROLE operates

a recruitment Platform that enables Employees to create professional

profiles, search for employment opportunities, apply for jobs,

communicate with Employers, and use career-related services.

JET ROLE generally determines the purposes and methods of processing

personal data collected directly through Employee accounts and Platform

activity.

An Employer that receives personal data through an application, resume

download, candidate search, interview process, or communication may also

process that information for its own recruitment purposes.

Once an Employer lawfully receives Employee information, that Employer

may have its own responsibilities under applicable privacy, employment,

and data-protection laws.

JET ROLE does not control every action performed independently by an

Employer outside the Platform.

3. Scope of This Policy This Policy applies to personal data processed

through:

The JET ROLE website. Employee registration and login pages. Employee

dashboards. Employee profiles. Professional Identity pages. Public CV

pages. Job-search pages. Job applications. Saved jobs. Company-following

features. Employee-following features, where available. Referral

features. Subscription and payment pages. AI-powered Employee tools.

Customer-support communications. Notifications and email communications.

Security and account-verification services. Mobile applications or other

JET ROLE services introduced in the future. This Policy does not govern

an independent third-party website, service, Employer system, or

communication channel that is not controlled by JET ROLE.

4. Personal Data We May Collect The personal data collected depends on

the features you use, the information you choose to provide, and the

requirements of a particular job application.

4.1 Account Information We may collect:

Full name. First and last name. Email address. Phone number. Phone

country code. Password or encrypted authentication credentials. Account

type. Email-verification status. Registration date. Account status. Freeze and deletion request status, timestamps, and lifecycle confirmation records.

Preferred language. Communication preferences. Login and

account-recovery information. 4.2 Identity and Profile Information We

collect:

Profile photograph or avatar. Date of birth or age-related information.

Gender. Nationality. Marital status. Number of dependents. Country of

residence. City of residence. Professional title. Position sought.

Professional summary. Current employer or company. Years of experience.

Availability for employment. Preferred working arrangements. Preferred

job locations. Social or professional profile links. Professional

Identity information. QR code and digital business-card information.

vCard information. Public profile URL. You should provide only

information that is accurate, appropriate, and relevant to your

professional profile or job search.

4.2A Employment Verification Information To support Company employment

verification and public company profile features, JET ROLE may collect

and process information relating to your current employer selection.

This information may include:

The Company selected by you. Company identifier. Employment verification

request date. Verification request status. Approval or rejection status.

Date of approval or rejection. Identity of the authorized Company

representative who reviewed the request, where appropriate. Optional

rejection reasons provided by the Company. Records of changes to your

employment verification status. Audit logs relating to the employment

verification process. Where you request employment verification, JET

ROLE may notify the selected Company solely for the purpose of

confirming your current employment relationship.

Approval or rejection affects only your eligibility to appear as a

verified current employee on the Company’s public profile, where

available.

The employment verification process does not modify your resume,

employment history, professional profile, qualifications, skills,

certifications, or any other information contained in your Employee

account.

JET ROLE does not independently verify the accuracy of employment

relationships and relies on the selected Company to review and respond

to verification requests based on its own records.

4.3 Resume and Career Information We may collect information included in

your resume, CV, profile, or applications, including:

Employment history. Job titles. Employer names. Employment dates.

Responsibilities. Achievements. Education. Qualifications.

Certifications. Professional licenses. Skills. Languages. Training.

Projects. Portfolio information. Work samples. Salary expectations,

where available. Notice period. Career interests. Job preferences.

References, where lawfully provided. Resume files and replacement

versions. Cover letters. Supporting documents. You must not include

information about another person unless you are authorized to provide

it.

4.4 Job Search and Application Information We may collect:

Jobs viewed. Search terms. Search filters. Saved jobs. Followed

companies. Recommended jobs viewed. Job alerts. Applications submitted.

Application date and time. Application status. Application answers.

Screening-question responses. Cover letters. Documents attached to an

application. Employer communications. Interview invitations. Interview

scheduling information. Withdrawal or cancellation activity. Reasons

voluntarily provided for withdrawing an application. Recruitment

workflow history visible to you. 4.5 Profile Visibility and Privacy

Settings We may collect and store your selected privacy settings,

including whether:

Your profile is visible to eligible Employers. Your resume is available

to Employers. Your Professional Identity page is public. Your public CV

is enabled. Selected profile fields are publicly displayed. Your email

address or phone number is hidden. Employers may discover your profile.

You wish to receive notifications or job alerts. 4.6 Employer

Interaction Information We may process information relating to Employer

activity involving your profile, such as:

Employers that viewed your profile. Employers that viewed your resume.

Resume downloads. Saved-candidate activity. Shortlisting activity.

Interview invitations. Application-status updates. Employer messages.

Recruitment notes or status information made available to you. Records

showing whether a communication was sent or received. Some Employer

activity may not be displayed to the Employee where it forms part of

confidential internal recruitment processes, security records, legal

records, or private Employer notes.

4.7 Subscription, Referral, and Transaction Information Where

applicable, we may collect:

Subscription plan. Subscription status. Start and renewal dates. Upgrade

history. Coupon code usage. Referral code. Referral points. Points

earned or redeemed. Payment status. Transaction reference. Invoice

information. Refund or chargeback status. Promotional eligibility.

Education-domain eligibility for a plan upgrade. Records necessary to

prevent coupon or referral abuse. JET ROLE does not intend to store

complete payment-card details where payments are processed by an

authorized payment provider.

4.8 Artificial Intelligence Information When you use AI-powered

services, we may process:

Your resume or selected resume content. Profile information. Job

descriptions. Skills and experience. Education and qualifications.

Questions or prompts submitted to the AI feature. AI-generated scores

and results. Resume strengths and weaknesses. Suggested improvements.

Job-match results. Recommended jobs. Interview-practice content.

Suggested courses or skills. Generated professional summaries or cover

letters. Feature-usage counts and limits. Feedback you submit about an

AI result. 4.9 Communications and Support Information We may collect:

Support requests. Complaint details. Privacy requests. Verification

communications. Emails sent to or from JET ROLE. Notification delivery

records. Survey responses. Feedback. Reports of suspicious activity.

Records of disputes. Attachments submitted to customer support. IP

address and country information recorded in connection with support

tickets, where applicable. 4.10 Technical, Device, and Security

Information We may automatically collect or generate:

IP address. Browser type. Device type. Operating system. Device

identifiers. Approximate location inferred from technical information.

Login date and time. Failed-login attempts. Session identifiers.

Trusted-device information. OTP activity. Password-reset activity.

Cookie identifiers. Security alerts. Fraud-risk indicators. Pages and

features used. Referral source. Error logs. Performance information.

Account and security audit logs. 5. Sensitive Personal Data Some

information submitted through a resume, application, or profile may be

treated as sensitive or require additional protection under applicable

law.

This may include information concerning:

Health or disability. Religious or philosophical beliefs. Biometric or

genetic information. Criminal records. Memberships or affiliations.

Other legally protected characteristics. JET ROLE does not require

Employees to add unnecessary sensitive information to a public profile

or resume.

You should avoid uploading sensitive personal data unless:

It is relevant and lawfully required for the particular purpose. You

understand how it will be used. You have a lawful right to provide it.

Any required consent or authorization has been obtained. JET ROLE may

remove, hide, restrict, or request deletion of unnecessary sensitive

information.

6. How We Collect Personal Data We may collect personal data:

6.1 Directly From You For example, when you:

Register an account. Verify your email. Complete your profile. Upload a

resume. Apply for a job. Contact an Employer. Use an AI feature.

Purchase a subscription. Use a coupon or referral code. Contact customer

support. Change privacy settings. 6.2 Automatically We may collect

technical and usage information when you:

Visit the Platform. Log in. Use a dashboard. View or search for jobs.

Interact with emails. Use cookies or similar technologies. Use

account-security features. 6.3 From Employers Employers may provide or

generate information relating to:

Your application. Application status. Interview invitation. Recruitment

communication. Candidate status. Job offer or selection status.

Suspected misuse or inaccurate information. Recruitment activity

performed through the Platform. 6.4 From Service Providers We may

receive limited information from:

Payment providers. Email-delivery providers. Identity or verification

providers. Analytics providers. Security and fraud-prevention providers.

AI service providers. Cloud and hosting providers. Customer-support

providers. 6.5 From Public or Authorized Sources Where lawful and

appropriate, we may receive information from:

Public professional pages. Public portfolios. Public company pages.

Professional or educational sources. A person authorized by you. An

organization authorized to create or manage an account on your behalf.

7. Purposes of Processing JET ROLE may process Employee personal data

for the following purposes.

7.1 Account Creation and Administration To:

Create your Employee account. Verify your contact information.

Authenticate login. Maintain account settings. Provide password

recovery. Manage subscription status. Provide customer support.

Communicate important account information. 7.2 Professional Profile and

Resume Services To:

Create and display your professional profile. Store and replace your

resume. Generate your Professional Identity page. Provide a QR code or

vCard. Operate public-profile features selected by you. Allow eligible

Employers to discover your profile according to your settings. Verify

Employee-company relationships and display approved current Employees on

public Company profiles where the feature is available.

7.3 Video Introduction and Employer Access JET ROLE allows you to add an

optional Video Introduction to your professional profile. JET ROLE

currently processes the video through the video URL and related metadata

provided through the Platform; the underlying video content may be

hosted by an external video or hosting provider.

Your Video Introduction is not automatically available to Employers

merely because you add it to your JET ROLE profile.

An Employer may request access to your Video Introduction only when:

You have submitted a job application to that Employer through JET ROLE.

Your relevant application has progressed to the Reviewing stage in the

Employer’s recruitment pipeline.

Reaching the Reviewing stage does not itself disclose your Video

Introduction.

The Employer must submit a Video Introduction access request through JET

ROLE, and you may approve or decline that request.

Your Video Introduction becomes accessible to the requesting Employer

only after you approve the request. Adding a Video Introduction does not

constitute consent for all Employers to view it, and an Employer cannot

obtain access solely because it discovered your profile through

Candidate Search.

Once approved, access currently remains available without a predefined

automatic expiration period unless the applicable access grant is

invalidated or removed. Changing the Video Introduction URL may

invalidate a previous access grant and require a new request or

approval.

JET ROLE may process:

The video URL you provide. Video-related metadata and settings. The

identity of the requesting Employer. The relevant application and

Reviewing-stage eligibility. The date and status of an access request.

Your approval or rejection. Changes to the video URL that affect

previously granted access. Notifications and technical records required

to operate, secure, and administer the feature.

Where the underlying video is hosted by a third-party service, that

provider may process information according to its own privacy policy,

terms, storage locations, cookies, and technical practices. JET ROLE

does not control the independent privacy or data-processing practices of

that third-party provider.

Removing or changing the link in JET ROLE does not necessarily delete

the original video or copies maintained by an external hosting provider.

7.4 Job Search and Applications To:

Display job opportunities. Process searches and filters. Provide job

recommendations. Save jobs. Submit applications. Transfer application

information to the relevant Employer. Display application status.

Facilitate interviews and recruitment communications. 7.5 Employer

Search and Candidate Discovery To:

Allow eligible Employers to search for candidates. Display candidate

profiles that are eligible for discovery under the Platform’s current

access rules. Permit Employers to save or shortlist candidates. Provide

resume access based on Platform permissions and subscriptions. Record

profile views or resume downloads. Prevent unauthorized data access. 7.6

Artificial Intelligence Services To:

Evaluate resumes. Calculate or display job-match indicators. Recommend

jobs. Identify possible skill gaps. Generate career suggestions. Assist

with interview preparation. Suggest resume improvements. Generate or

improve professional content. Enforce monthly or subscription-based AI

limits. Monitor reliability, security, and misuse. 7.7 Communications

and Notifications To send:

Email-verification messages. Account-activation messages. Application

confirmations. Application-status updates. Interview invitations. Job

alerts. Company-following notifications. Security alerts. Subscription

and payment notices. Policy updates. Service announcements. Marketing

communications, including applicable educational and re-engagement

communications, where the applicable marketing consent and communication

requirements are satisfied.

7.8 Security and Fraud Prevention To:

Protect accounts. Detect unauthorized login. Prevent fake profiles.

Detect false resumes or applications. Prevent automated abuse.

Investigate security incidents. Protect Employers and Employees. Enforce

usage limits. Maintain audit records. Resolve disputes. 7.9 Analytics

and Platform Improvement To:

Understand Platform usage. Measure feature performance. Improve search

and matching. Identify technical errors. Develop new services. Improve

accessibility and user experience. Produce aggregated or anonymized

statistics. Evaluate recruitment-market trends without unnecessarily

identifying individuals. 7.10 Legal and Compliance Purposes To:

Comply with applicable law. Respond to lawful government or judicial

requests. Maintain required financial or transaction records. Establish,

exercise, or defend legal claims. Investigate complaints. Enforce JET

ROLE’s policies. Protect the rights and safety of users and third

parties. 8. Legal Basis for Processing Depending on the circumstances

and applicable law, JET ROLE may process personal data based on:

Your consent. The need to provide services requested by you. Performance

of an agreement with you. Compliance with a legal or regulatory

obligation. Protection of your interests or the interests of another

person where legally permitted. JET ROLE’s legitimate interests,

provided those interests do not improperly override your rights.

Establishment, exercise, or defense of legal claims. Another lawful

basis recognized under applicable law. Where we rely on consent, you may

withdraw that consent through the withdrawal method made available for

the relevant activity or by submitting a request through JET ROLE Help

Center → Support Ticket → Privacy & Personal Data.

Withdrawal of consent does not affect processing that lawfully occurred

before withdrawal.

Some services may no longer be available where the relevant processing

is necessary to provide them.

9. Resume and Profile Visibility JET ROLE provides different forms of

profile visibility. Candidate Search visibility is separate from

Public Professional Profile and Public CV visibility.

9.1 Candidate Search and Employer Discovery Eligible Employers may be

able to discover professional information through Candidate Search in

accordance with the Platform’s current access, subscription, permission,

security, and eligibility rules.

Candidate Search does not by itself make your Professional Identity page

or Public CV publicly available on the internet.

Information already provided to an Employer through a job application

remains subject to the application and recruitment processing described

in this Policy.

JET ROLE may introduce additional Employee controls for Candidate Search

visibility. Where such controls become available, the applicable setting

and its privacy effect will be presented through the Platform.

9.2 Public Professional Profile Your Professional Identity page is

private/off by default and is not made public merely because you create

an Employee account or Professional CV.

Where you enable a public Professional Identity page:

Selected information may be accessible without login. The page may be

indexed by search engines. Other persons may share the public link.

Information may remain temporarily available in search-engine caches

after you disable the page. Private contact information remains hidden

unless the Platform expressly provides a lawful option for you to

display it and you choose to do so.

9.3 Public CV Your Public CV is private/off by default and is not made

public merely because you create an Employee account or Professional CV.

Where you enable a Public CV:

Selected CV information may be accessible through a public URL. The

Public CV may be shared by you or by persons who access it. Public

availability increases the risk of copying or independent storage by

third parties. JET ROLE cannot guarantee deletion of copies made or

retained by independent third parties. You should carefully review all

information before making a profile or CV public.

9.4 CV and Resume Export When you use JET ROLE’s resume or CV export

features, we may process information contained in your Professional CV,

including information you have provided about your professional

experience, education, skills, qualifications, certifications, and other

profile information, for the purpose of generating the requested

document.

The generated document may contain personal information selected from

your Professional CV. You are responsible for reviewing the document

before downloading or sharing it and for deciding what information you

wish to make available to third parties.

Once you download, upload, email, share, or otherwise distribute an

exported resume outside JET ROLE, JET ROLE does not control how third

parties store, process, use, or further disclose that copy. Third-party

employers, recruitment platforms, Applicant Tracking Systems, and other

services may process the document according to their own privacy

policies and terms.

9.5 Video Introduction Access Video Introduction access is governed by

Section 7.3 of this Policy. A Video Introduction is not automatically

disclosed to Employers. For an Employer to request access, the Employee

must have applied to that Employer and the relevant application must

have reached the Reviewing stage. The Employee may then approve or

decline the Employer’s request.

10. Job Applications and Disclosure to Employers When you actively

submit an application for a job through JET ROLE, your existing

Professional CV and the relevant information associated with your

application are made available to the Employer that posted or

manages that vacancy and its authorized team members for recruitment

purposes.

This disclosure occurs as a result of your affirmative action in

submitting the job application and does not make your Professional CV

publicly available.

Information made available to the Employer may include:

Your name and applicable contact information. Your Professional CV and

profile information. Employment history, skills, experience, education,

qualifications and certifications. Cover letter, where provided.

Application and screening-question responses. Supporting documents

submitted with the application. Application date and status. Other

information you intentionally submit as part of that application.

Changing your Candidate Search visibility, Public CV status, or other

general profile-visibility settings after submitting an application does

not automatically withdraw information already provided to the relevant

Employer through that application.

Employers may retain recruitment records already lawfully received,

subject to their own legal obligations and the JET ROLE Terms and

Conditions.

Resume Access and Download: When you apply for a job, the relevant

Employer and its authorized team members may access and, where the

Platform permits, download or export your Professional CV for legitimate

recruitment and hiring purposes related to your application.

Purpose Limitation: Employers must not use Candidate Personal Data

obtained through JET ROLE for unrelated marketing, advertising, resale,

unauthorized distribution, or other purposes incompatible with

recruitment.

Post-Disclosure Control: Once an authorized Employer has lawfully

downloaded or exported your CV, JET ROLE may not be technically able to

remove copies already stored outside the Platform. The Employer remains

responsible for its subsequent handling of that Personal Data in

accordance with applicable law and JET ROLE’s Employer Terms and privacy

requirements.

11. Employer Responsibilities Employers using JET ROLE must use Employee

information only for legitimate recruitment, hiring,

workforce-planning, and related lawful purposes.

Employers must not use candidate information to:

Send unrelated marketing. Sell or commercially trade candidate data.

Build unauthorized databases. Contact candidates for unrelated services.

Discriminate unlawfully. Publish private resumes. Share information with

unauthorized persons. Circumvent Platform restrictions. Retain

information longer than lawfully necessary. JET ROLE may investigate

complaints, restrict Employer access, suspend accounts, or take other

action where misuse is suspected.

However, JET ROLE is not responsible for every independent act of an

Employer after the Employer receives information lawfully through the

Platform.

12. Employer Activity Involving Your Profile or Resume JET ROLE may

record Employer activity involving Employee profiles and resumes for

recruitment operations, subscription controls, security, audit,

fraud prevention, support, and dispute resolution.

Such activity may include profile views, resume access or downloads,

saved-candidate activity, shortlisting, application-status changes,

interview invitations, and related recruitment events.

JET ROLE does not guarantee that Employer activity will be displayed to

the Employee. Some activity may remain internal to the Employer or JET

ROLE where it forms part of confidential recruitment processes, security

records, audit records, legal records, or private Employer notes.

13. Artificial Intelligence Processing JET ROLE provides Artificial

Intelligence-assisted features to support career, profile, resume,

job-matching, application, interview-preparation, and related

professional services.

Depending on the AI feature used, JET ROLE may process relevant

professional and career-related information, including:

Resume or selected resume content. Country and city of residence.

Nationality. Languages. Skills. Years of experience. Desired job title.

Professional summary. Preferred job country or city. Salary range, where

applicable. Employment history. Education. Certifications. Relevant job

descriptions. Questions, prompts, or instructions you intentionally

submit to an AI feature. JET ROLE uses OpenAI as an external Artificial

Intelligence service provider for applicable AI-powered features.

JET ROLE applies data-minimization controls to the Employee profile

context used for applicable AI processing. The following fields are

excluded from that profile context and are not intentionally transmitted

to OpenAI through that profile-context process:

Full name, first name, and last name. Email address. Mobile or telephone

number. WhatsApp number. Date of birth. Gender. Marital status. Number

of dependents. National ID or Iqama information. IBAN. Address. This

exclusion applies to the profile context automatically prepared by JET

ROLE. You should not intentionally enter unnecessary Personal Data or

Sensitive Personal Data into a free-text AI prompt.

AI-generated outputs may include profile or resume scores, match

information, suggested improvements, job or career recommendations,

interview-preparation content, skill suggestions, and generated

professional content.

AI outputs are provided as decision-support and advisory information

only. They may be inaccurate, incomplete, inconsistent, outdated, or

affected by technical limitations or bias.

AI-generated results do not constitute a final hiring, rejection,

interview, compensation, or employment decision. Employers remain

responsible for their recruitment and employment decisions.

Further information is provided in the JET ROLE Artificial Intelligence

Policy.

13.1 AI Usage Records and Temporary Processing JET ROLE may maintain

limited records relating to the use of AI features for purposes such as

feature limits, subscription entitlements, service administration,

security, and usage monitoring.

AI usage records may include the user identifier, AI feature used,

applicable usage period, usage count, and relevant timestamps.

JET ROLE’s AI usage counter does not itself store the AI prompt, AI

response, or token usage as part of the usage-counter record.

Certain AI features may temporarily cache generated results to operate

or optimize the service. For example, the Profile Score feature may

temporarily cache its generated result for up to 24 hours.

Other interactive AI features may process generated results without

maintaining a permanent AI-output history within JET ROLE where no

persistent storage is required for the feature.

Temporary technical processing or caching does not mean that all AI

interactions are permanently retained by JET ROLE.

Processing performed by an external AI service provider is also subject

to the applicable provider arrangements and JET ROLE’s vendor, privacy,

and international-transfer controls.

14. Automated Recommendations and Human Decisions JET ROLE may use

automated tools to organize, recommend, rank, filter, or present

jobs and candidate information.

These tools may consider factors such as:

Skills. Experience. Education. Location. Job preferences. Search

activity. Job-description relevance. Profile completeness.

Employer-selected criteria. A recommendation, ranking, or match score

does not represent a final employment decision.

Employers remain responsible for hiring, rejection, interview,

compensation, and employment decisions.

JET ROLE may provide options to request information or human support

where required by applicable law and technically available.

15. Who May Receive Employee Data JET ROLE may disclose personal data

to:

15.1 Employers Where:

You submit an application. Your profile is visible. You enable Employer

discovery. You communicate with the Employer. Disclosure is otherwise

authorized by you or permitted by law. 15.2 Authorized Service Providers

Including providers supporting:

Cloud hosting. Data storage. Email delivery. Notifications. Payment

processing. Customer support. Analytics. Security. Fraud prevention.

Identity verification. AI services. Document processing. Backup and

disaster recovery. 15.3 JET ROLE Personnel and Contractors Authorized

personnel may access information only where reasonably required for:

Support. Security. Administration. Technical maintenance. Compliance.

Dispute resolution. Service improvement. 15.4 Professional Advisers Such

as:

Lawyers. Auditors. Accountants. Insurers. Security consultants. 15.5

Government and Legal Authorities Where disclosure is:

Required by law. Required by a lawful order. Necessary to respond to a

regulatory request. Necessary to prevent or investigate fraud or

security incidents. Necessary to protect legal rights or safety. 15.6

Business Transactions Personal data may be disclosed as part of:

A merger. Acquisition. Financing. Corporate restructuring. Sale of

assets. Transfer of the Platform. Appropriate confidentiality and legal

safeguards should be applied where required.

16. Third-Party Service Providers JET ROLE may use service providers

that process personal data on our behalf.

We seek to require such providers to:

Process data only for authorized purposes. Maintain confidentiality.

Apply appropriate security safeguards. Limit access to authorized

personnel. Support deletion or return of data where required. Notify JET

ROLE of relevant security incidents. Comply with applicable contractual

and legal requirements. Some providers may independently determine

limited processing purposes under their own privacy policies,

particularly payment, authentication, analytics, or legally regulated

services.

Current service categories may include OpenAI for applicable AI-powered

features, PayPal for applicable payment processing, Google Analytics for

website and Platform analytics, and other infrastructure or service

providers used to operate JET ROLE. The providers used may change as the

Platform evolves.

17. International Data Transfers JET ROLE or its service providers may

process or store personal data outside the Kingdom of Saudi Arabia.

International transfers may occur when using:

Cloud-hosting providers. Email services. AI providers. Security

services. Analytics providers. Customer-support platforms. Other

international infrastructure. Where personal data is transferred outside

the Kingdom, JET ROLE will seek to apply the assessments, safeguards,

contractual protections, approvals, and other measures required by

applicable law.

The availability of JET ROLE in Saudi Arabia does not necessarily mean

that every service provider or backup system is physically located

inside the Kingdom.

18. Data Retention and Employee Account Lifecycle

JET ROLE retains Employee personal data for as long as necessary for the relevant purposes, subject to applicable Saudi legal, regulatory, financial, security, operational, and record-retention requirements. Retention periods vary by record category; a request to delete an account does not necessarily require immediate destruction of every associated record.

18.1 Active Accounts. While an Employee account is active, JET ROLE may retain the account, profile, Professional CV, applications, preferences, subscriptions, communications, and related service records as described in this Policy.

18.2 Frozen Accounts. An Employee may temporarily freeze their own eligible account using Account Status & Privacy, after the required identity verification. Freezing is not deletion. JET ROLE preserves the account and its underlying data and previously selected privacy preferences, but makes the Employee unavailable through Candidate Search, public Professional Identity and Public CV pages, and other public or employer discovery features. While frozen, the Employee cannot submit job applications or receive new contact through JET ROLE’s Employee contact features. Optional marketing, job alerts, and ordinary Platform notifications are paused; essential account, verification, security, and lifecycle communications may continue. Logging in and selecting Unfreeze restores the account and the privacy settings that applied before freezing, subject to other applicable restrictions. Freezing does not pause, extend, or refund a paid subscription.

18.3 Pending Deletion. A verified Employee may request self-service account deletion under Section 24. After acceptance of the request, the account is placed into a restricted, hidden state during the 90-day waiting period. During that period, ordinary Employee features are unavailable, and communications are limited to necessary security, verification, account-recovery, and deletion-related messages. Signing in successfully before final deletion automatically cancels the pending deletion request, restores the account subject to applicable restrictions, and triggers a cancellation confirmation email.

18.4 Final Deletion and Destruction. Once the applicable waiting period and reminder requirements are met, JET ROLE permanently removes the Employee account and associated active-platform data that is no longer required, including login credentials, account settings, sessions, OTP and trusted-device records, saved jobs, follows, public profile and Professional Identity information, Professional CV and related profile data, and Employee-specific notification and email-history records. A final confirmation email may be sent before the Platform deletes its record of that message. Final deletion cannot be reversed and the deleted account cannot be restored.

18.5 Recruitment Records. Applications previously submitted may remain within Employers’ recruitment records where retention is necessary and lawful. Within JET ROLE’s retained application records, the deleted Employee’s name is replaced with ‘Deleted Account’ and the account association is removed or de-identified as appropriate. This does not guarantee erasure of documents, copies, or records already lawfully downloaded or separately maintained by Employers or independent third parties. Any personal data that remains identifiable in retained application attachments or free-text records must be separately assessed and minimized, de-identified, restricted, or removed as applicable.

18.6 Records Retained for Limited Purposes. JET ROLE may retain necessary subscription, invoice, payment, coupon, transaction, and related accounting records; de-identified support tickets, campaign and event records; and security, audit, incident, or legal records for applicable retention periods. Employee-related referral coupons may be retained in a disabled state. Identifiers such as IP address or browser details are removed from de-identified support, campaign, and event records unless specific lawful retention requirements apply. JET ROLE may keep a minimal non-identifying record evidencing that deletion was completed. A registered email address may remain in a restricted global marketing suppression list solely to prevent unsolicited marketing; that suppression entry is not used to contact the former Employee. These retained records must not be used to reactivate the deleted account or send ordinary communications.

18.7 Backups and External Copies. Information deleted from live Platform systems may remain temporarily in protected backups until the relevant backup cycle expires, subject to applicable law and restoration controls. Public search engines and other third parties may retain cached or independently collected copies outside JET ROLE’s direct control.

18.8 Legal Rights and Exceptions. A statutory right to request destruction or other privacy relief is not replaced or limited by the voluntary self-service deletion workflow. JET ROLE will review rights requests in accordance with applicable law, including where a shorter period or different action is legally required. Records are not retained solely because the 90-day period exists if earlier destruction is legally required.

19. Data Accuracy You are responsible for maintaining accurate,

complete, and current information.

You should update your account when:

Your contact information changes. Your employment status changes. Your

resume changes. A certification expires. Your location changes. Your job

preferences change. Information is no longer accurate. JET ROLE may

request correction, verification, or removal of information that

appears:

False. Misleading. Outdated. Incomplete. Fraudulent. Unlawful.

Inconsistent with Platform rules. JET ROLE may restrict or suspend an

account while material information is being reviewed.

20. Data Security JET ROLE applies administrative, technical, and

organizational safeguards designed to protect Employee personal

data.

Measures may include:

Role-based access. Account authentication. Password protection. OTP

verification. Trusted-device controls. Session expiration. Automatic

logout. Secure transmission. Encryption where appropriate. Audit

logging. Monitoring. Backup procedures. Fraud detection. Access reviews.

Vendor-security requirements. Incident-response procedures. No online

system can guarantee absolute security.

Employees must:

Protect their password. Keep OTP codes confidential. Avoid sharing

accounts. Log out from shared devices. Maintain secure devices. Report

suspicious activity promptly. Further information is provided in the JET

ROLE Security Policy.

21. Personal Data Breaches Where JET ROLE becomes aware of a

personal-data breach, we may:

Investigate the incident. Contain the breach. Protect affected systems.

Reset credentials. Suspend affected sessions. Notify service providers.

Preserve evidence. Notify the competent authority where required. Notify

affected Employees where required or appropriate. Take measures to

reduce future risk. Notification may be delayed or limited where

permitted by law, required for security, or requested by a competent

authority.

22. Your Privacy Rights Subject to applicable law, identity

verification, and lawful exceptions, you may have the right to:

22.1 Right to Be Informed You may request information about:

Why your data is collected. The legal basis for processing. The

categories of data collected. How data is used. Who may receive it. How

long it may be retained. Whether it may be transferred outside the

Kingdom. 22.2 Right of Access You may request access to personal data

held about you, subject to applicable limitations.

22.3 Right to Obtain a Copy You may request a clear and readable copy of

eligible personal data in a format supported by JET ROLE and required by

law.

22.4 Right to Correction You may request correction, completion, or

updating of inaccurate, incomplete, or outdated personal data.

22.5 Right to Request Destruction You may request deletion or

destruction of personal data that is no longer needed, subject to legal,

contractual, security, fraud-prevention, and record-retention

requirements.

22.6 Right to Withdraw Consent Where JET ROLE relies on your consent for

a particular processing activity, you may withdraw that consent through

the withdrawal method made available for that activity or by submitting

a request through:

JET ROLE Help Center → Support Ticket → Privacy & Personal Data

Where applicable, marketing consent may also be withdrawn through the

unsubscribe method provided in the marketing communication.

Withdrawal of consent does not affect the lawfulness of processing

carried out before the withdrawal and may affect the availability of a

feature where that processing requires your consent.

22.7 Marketing Preferences

Where you have opted in to Marketing Emails, you may withdraw your

consent or unsubscribe from optional marketing communications at any

time using the unsubscribe method provided in the communication or

applicable communication-preference controls made available by JET ROLE.

Withdrawal of Marketing Email consent does not affect your JET ROLE

account and does not prevent JET ROLE from sending essential

non-marketing communications, including communications relating to

account security, applications, transactions, policy or legal notices,

and necessary service operation.

22.8 Profile Visibility You may manage the profile, Professional

Identity, Public CV, and other visibility controls that are actually

made available to you through the Platform. Candidate Search controls

may be introduced separately and will apply only when made available.

22.9 Account Freeze and Deletion. Eligible Employees may use Account Status & Privacy to freeze, unfreeze, or request deletion of their own account as described in Sections 18 and 24. These controls do not replace statutory privacy rights.

22.10 Complaints You may submit a privacy complaint to JET ROLE and,

where applicable, to the competent data-protection authority.

23. How to Exercise Your Rights Privacy requests may be submitted

through:

JET ROLE Help Center → Support Ticket → Privacy & Personal Data.

A request should include:

Your full name. Registered email address. Account identifier, where

available. A clear description of the request. Information reasonably

required to verify identity.

JET ROLE may request additional verification before providing a copy of

data, correcting sensitive account information, changing registered

contact information, implementing an account deletion or destruction

request, or disclosing security or application records.

JET ROLE may refuse, restrict, or delay a request only where permitted

or required by applicable law, including where necessary to protect

another person’s rights, preserve confidential information or legal

claims, prevent fraud, maintain security, or comply with a legal

obligation.

Where appropriate, JET ROLE will explain the reason for the decision.

24. Employee Account Freeze, Unfreeze, and Deletion

24.1 Eligibility and Control. Account Status & Privacy provides a self-service freeze and deletion request option to the owner of an eligible Employee account. Requests must be initiated by the account owner and are subject to identity verification. Employers and company accounts are not covered by this Employee feature. JET ROLE may maintain separate administrative suspension and legal restriction processes.

24.2 Temporary Freeze. A freeze hides the Employee from candidate discovery and public Professional Identity/CV access, prevents new job applications and Platform contact, and pauses nonessential notifications and marketing while preserving the underlying account data. It does not terminate or extend the subscription. To resume service, the Employee signs in and selects Unfreeze; the prior privacy selections are restored, subject to any independent restrictions. Freezing is reversible and is not a destruction request.

24.3 Requesting Deletion. The account owner must verify identity, enter their current password, and type DELETE to confirm the request. Repeated incorrect password attempts may trigger a temporary security lock. Once accepted, JET ROLE revokes existing sessions and schedules final deletion no earlier than 90 days after the request, subject to the reminder safeguard and any lawful retention or restriction requirements. The Employee receives an email confirming the request and scheduled deletion date.

24.4 Waiting Period and Cancellation. During the waiting period, the account is hidden and restricted. A successful sign-in before final deletion automatically cancels the deletion request and triggers a confirmation email. If the request remains pending, JET ROLE sends one reminder seven days before the planned deletion. Final deletion must not occur until at least seven full days after that reminder has been sent; if a reminder is delayed, the deletion date must be postponed accordingly. Essential account-security, verification, password-recovery, and deletion-related communications may continue during this period; ordinary marketing and feature notifications do not.

24.5 Consequences of Final Deletion. Final deletion permanently ends account access and removes active Employee account, profile, Professional CV, Professional Identity, Public CV, saved-job, follow, authentication, and related records as specified in Section 18, subject to lawful exceptions. Remaining subscription time, unused features, referral benefits, or other account entitlements are lost. Payments are not refunded merely because an Employee elects to delete the account, except where mandatory law or an applicable legally enforceable refund right requires otherwise.

24.6 Information That May Remain. JET ROLE may retain de-identified application records with the label ‘Deleted Account’, necessary accounting and payment records, disabled referral-coupon records, lawful security and audit evidence, minimal deletion proof, and a restricted marketing suppression entry. Employers or third parties may retain information independently and lawfully obtained before deletion. JET ROLE will not use retained records to market to or otherwise contact a former Employee, except where required by law.

24.7 Confirmation and Irreversibility. After completion, JET ROLE may send one final deletion confirmation email and remove its Platform record of that email. Final deletion cannot be undone. A person wishing to use JET ROLE again must create a new account, subject to the Platform’s eligibility and security requirements.

24.8 Other Privacy Requests. Employees may still request access, correction, destruction, withdrawal of consent, or other legally available relief through JET ROLE Help Center → Support Ticket → Privacy & Personal Data. JET ROLE will apply applicable law to such requests independently of the self-service account deletion timetable.

25. Marketing Communications JET ROLE may send optional marketing

communications about:

Job opportunities. Featured Employers. Career services. Subscription

plans. Platform features. Training or courses. Promotional campaigns.

Referral programs. Educational content and onboarding sequences.

Inactivity and re-engagement communications. Other relevant JET ROLE

services. JET ROLE sends marketing communications to you only where the

applicable marketing requirements are satisfied, including obtaining

your consent where required.

Where JET ROLE requests your consent to receive Marketing Emails, that

consent is separate from your acceptance of the JET ROLE Terms and

Conditions and Privacy Policy.

Marketing Email consent is optional and must not be pre-selected on your

behalf.

You may withdraw your Marketing Email consent or unsubscribe from

marketing communications at any time using the unsubscribe method

provided in the communication or the applicable communication-preference

controls made available by JET ROLE.

Freezing an Employee account suspends optional marketing and routine Platform notifications. A pending deletion request likewise suspends them. After final deletion, JET ROLE may retain the registered email address only in a restricted suppression list to prevent future marketing, not to send messages.

Once you unsubscribe or withdraw the applicable marketing consent, JET

ROLE will suppress your email address from future marketing

communications covered by that preference unless you subsequently

provide a new valid opt-in.

Withdrawing Marketing Email consent does not close your JET ROLE account

and does not prevent JET ROLE from sending essential transactional,

account, recruitment, security, payment, legal, or service

communications that are not marketing communications.

26. Cookies and Similar Technologies JET ROLE may use cookies and

similar technologies for authentication, login sessions, account and

form security, fraud and abuse prevention, trusted-device

functionality, applicable preferences, referral attribution,

performance, and website or Platform analytics.

Some cookies and similar technologies are strictly necessary for the

secure and proper operation of JET ROLE.

JET ROLE currently uses Google Analytics for website and Platform

measurement and also uses Independent Analytics (IndependentWP) as an

analytics tool. The exact processing, storage, and cookie behavior of

each analytics technology is governed by its configuration and

applicable provider arrangements.

JET ROLE does not currently provide a dedicated Cookie Banner or Cookie

Settings interface for accepting or rejecting optional cookies. JET ROLE

is reviewing and implementing appropriate controls for optional cookies

and similar technologies where consent or user choice is required.

Until those controls are implemented, JET ROLE will review the

configuration and use of optional analytics or tracking technologies for

compliance with applicable privacy requirements.

Further information about cookies, analytics technologies, purposes,

providers, and applicable retention is provided or will be maintained in

the JET ROLE Cookie Policy.

27. External Links and Third-Party Services JET ROLE may include links

to:

Employer websites. Social platforms. Video services. Payment providers.

Training providers. External application systems. Other third-party

services. JET ROLE does not control the privacy practices of independent

third parties.

You should review their privacy policies before submitting personal

data.

Where you leave JET ROLE to apply through an external Employer system,

that Employer’s or provider’s privacy policy may apply.

28. Children and Minimum Age JET ROLE Employee services are intended for

individuals who are legally eligible to seek employment or use the

relevant service.

Where an individual has not reached the applicable legal age:

JET ROLE may require consent or authorization from a parent, guardian,

or legally authorized person. Certain services may be restricted. JET

ROLE may request age verification. The account may be suspended or

deleted where eligibility requirements are not met. JET ROLE does not

knowingly intend to collect personal data from children in a manner

prohibited by applicable law.

A parent or guardian who believes that a child’s information has been

processed improperly may contact JET ROLE.

29. Employee Responsibilities Employees must:

Provide accurate information. Keep account details updated. Protect

credentials. Respect the rights of other persons. Avoid uploading

confidential information belonging to others. Avoid submitting unlawful

or misleading documents. Review public-profile settings. Review

AI-generated content. Notify JET ROLE of suspected unauthorized access.

Employees must not upload:

Another person’s resume without authorization. False qualifications.

Forged documents. Malicious files. Unlawfully obtained personal data.

Content that violates intellectual-property or privacy rights. 30.

Changes to This Policy JET ROLE may update this Employee Privacy Policy

to reflect:

New Employee features. New AI services. Changes to profile visibility.

Changes to service providers. Security improvements. Legal or regulatory

changes. Operational changes. The updated Policy will show a revised

“Last Updated” date.

Where a change is material, JET ROLE may provide notice through:

Email. The Employee dashboard. The Platform. A registration or login

notice. Another reasonable communication method. Where legally required,

JET ROLE may request renewed consent.

31. Governing Requirements This Policy is intended to operate in

accordance with the privacy and data-protection requirements

applicable to JET ROLE, including the laws and regulations of the

Kingdom of Saudi Arabia where applicable.

Nothing in this Policy limits any right that cannot lawfully be limited.

Where mandatory law provides greater protection than this Policy, the

mandatory legal requirement shall apply.
SUPPLEMENTAL INTEGRATED TERMS — 21 OCTOBER 2026

EMAIL VERIFICATION AND PASSWORD RECOVERY
New Employee, Employer/Company, Consultant and Partner accounts verify their registered email address using a six-digit one-time password (OTP) delivered by email, rather than an email activation link. The verification code expires after 10 minutes, is usable only once and permits no more than five incorrect attempts. Resending is subject to a minimum 60-second interval, a maximum of five issued codes per account per hour, and a maximum of 20 issued codes per source IP address per hour. Codes are stored only as non-reversible secure hashes, not in plaintext or reversibly encrypted form. JET ROLE records the source IP address associated with code issuance for security, abuse prevention and investigation, subject to the retention and access safeguards described below.
Password recovery uses an emailed one-time verification code instead of a password-reset link. A recovery code is subject to the security controls configured for the password-recovery flow; no separate recovery-code validity period or resend limit is promised here unless expressly confirmed by the Platform.
For Company, Consultant and Partner accounts, sign-in additionally requires an emailed one-time verification code. Login verification codes are single-use and subject to a maximum of five incorrect attempts. Any additional expiry, issuance or resend rules apply as implemented and communicated by the Platform; they should not be assumed identical to registration rules unless confirmed.
Transactional verification and recovery emails are sent in the language saved in the recipient’s account when a suitable translation exists; otherwise the configured default template language is used. This does not guarantee that every language is available.

SECURITY LOGS, DATA RETENTION AND BACKUPS
JET ROLE processes OTP issuance and verification metadata, related IP addresses, authentication attempts and security/audit records for account protection, fraud detection, investigation and legal compliance, subject to applicable Saudi personal-data law and appropriate access restrictions. The security-log retention period has not yet been fixed; JET ROLE must establish and publish an appropriate period before describing any definite duration. No indefinite retention is implied.
Outbound email delivery/history logs are retained for 30 days under the current operational retention configuration, subject to applicable legal preservation obligations. Company activity logs are retained for 365 days and then automatically deleted under the current configuration, except records that must lawfully be preserved. These operational durations do not necessarily govern separate payment, accounting, security, or dispute records.
Account deletion removes eligible personal data from active production systems in accordance with the applicable role policy. Limited restoration or off-site backups may temporarily contain earlier copies, including data already deleted from active systems and sensitive Partner bank information such as IBAN. Such backups are restricted to authorized restoration/security purposes, must not be used to reactivate deleted accounts for normal operations, and require appropriate access controls and deletion or expiry under a defined backup schedule. A 30-day backup retention period is proposed but has not yet been confirmed or implemented as a verified rule; no specific backup deletion deadline is represented here. Any restored backup must be reconciled against completed deletion requests before ordinary processing resumes, to the extent technically and legally required.
Where required, a minimal email address may be retained in a global marketing-suppression list solely to prevent further promotional messages; it must not be repurposed for marketing or ordinary contact. Statutory accounting, transaction, subscription, coupon, fraud/security and dispute records may remain for their applicable lawful retention periods, with access restricted and identifiers removed where feasible.

SELF-SERVICE ACCOUNT FREEZE AND DELETION — IMPLEMENTATION CLARIFICATIONS
For eligible active Employees, Consultants and Partners, voluntary freeze hides the account from discovery and public pages and prevents new Platform contact; it does not itself erase account information. Unfreeze restores applicable prior visibility preferences, subject to continuing eligibility. Voluntary deletion requires password confirmation, revokes active sessions, and is scheduled no earlier than 90 days after the request. A reminder is sent seven days before the scheduled deletion, with at least seven days between actual delivery of the reminder and final deletion. A successful authenticated login during the waiting period cancels the request and restores the account’s prior eligible state. Deletion may be deferred where necessary to meet unresolved lawful obligations.
Upon final deletion, active account data such as profiles, public pages, associated photographs where applicable, saved jobs, follows, notifications, OTP records, trusted-device records, profile statistics and unnecessary communication history is deleted, subject to lawful exceptions. Historical Employee applications may remain in an Employer’s recruitment records under the label “Deleted Account”, disconnected from the live Employee identity. Support tickets, campaign/event logs and AI-usage records may be retained in de-identified form. Financial records and proportionate security records may be retained where lawfully required. No refund arises solely from voluntary freeze or deletion of unused paid service time, except where mandatory law or applicable refund rights require otherwise.

32. Contact Us For questions, complaints, or requests regarding this

Privacy Policy or the processing of your personal data, you may

contact JET ROLE through the Help Center / Support Ticket available

on the Platform.

Platform: JET ROLE Legal Entity: Future Nexus (مؤسسة رابطة المستقبل

لتقنية المعلومات) CR Number / Unified Number: 7035564892 Country:

Kingdom of Saudi Arabia Privacy Contact Channel: JET ROLE Help Center /

Support Ticket

Privacy-related requests will be handled in accordance with applicable

Saudi data protection laws and JET ROLE’s privacy procedures.