Legal

Privacy policy.

This Privacy Policy explains how MSI Qatar (“MSI Qatar,” “we,” “us,” or “our”) collects, uses, shares, and protects information when you use our recruiting platform, our websites, and related services (collectively, the “Service”). It also describes the rights you have over your information.

Effective date: May 28, 2026

1. Who we are

MSI Qatar provides a recruiting and talent management platform used by employers (“Customers”) to manage hiring. Depending on the context, MSI Qatar may act as a data controller (for our own websites, marketing, and accounts) or as a data processor on behalf of a Customer (for candidate data managed within their workspace). When MSI Qatar acts as a processor, the Customer is responsible for the lawful basis of processing candidate data and for responding to candidate rights requests.

2. Information we collect

We collect information in the following ways:

2.1 Information you provide

Account data: name, email address, password (hashed), profile picture, role, and workspace.
Candidate data: applications, CVs, cover letters, contact details, answers to screening questions, interview notes, feedback, and scorecards submitted to a workspace.
Communications: emails, messages, scheduling information, and support requests exchanged through the Service.
Billing data: company name, billing contact, and tax identifiers (payment card data is handled by our payment processor and is not stored by MSI Qatar).

2.2 Information collected automatically

Usage data: pages viewed, actions taken, timestamps, referring URLs, and feature interactions.
Device and log data: IP address, browser type, operating system, language, and crash reports.
Cookies and similar technologies: for authentication, preferences (such as theme and density), and analytics. You can control cookies through your browser.

2.3 Information from third parties

Single sign-on providers (e.g., Google, Microsoft) provide your name, email, and profile picture when you sign in.
Calendar providers (Google Calendar, Microsoft Outlook, CalDAV) provide event metadata, availability, and the ability to create/update interview events at your direction.
Background-check or assessment vendors, if a Customer chooses to integrate them.

3. Google user data & Google API services

When you connect a Google account to MSI Qatar, we request only the scopes needed to provide the features you enable. Today this includes Google Calendar access used to read your availability and to create, update, and delete interview events on your calendar.

MSI Qatar’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide and improve user-facing features (interview scheduling, calendar sync, conflict detection).
We do not use Google user data to serve advertising, and we do not sell it.
We do not allow humans to read Google user data, except (a) with your explicit consent, (b) for security investigations, (c) to comply with law, or (d) where data has been aggregated and anonymized.
We do not transfer Google user data to third parties except as necessary to provide the Service, for security purposes, or to comply with law.
You can revoke MSI Qatar’s access at any time from your Google account permissions page or by disconnecting the integration in MSI Qatar’s settings.

4. How we use information

To provide, secure, and operate the Service.
To authenticate users and manage workspace membership.
To schedule interviews, sync calendars, and send notifications you have opted into.
To generate AI-assisted summaries, drafts, and recommendations, subject to the settings configured by the Customer.
To analyze and improve features, fix bugs, and prevent abuse.
To comply with legal obligations and enforce our Terms.

5. AI processing

MSI Qatar integrates with model providers (such as Anthropic, OpenAI, Google, and self-hosted models) to power AI features. Customers control which provider is used, whether PII redaction is applied before content leaves the workspace, and whether “no-log” mode is enabled with the provider. AI outputs are suggestions only and do not constitute automated decisions about a candidate’s employment.

6. Legal bases (EEA/UK)

Contract: to provide the Service to you or your Customer.
Legitimate interests: to secure, maintain, and improve the Service.
Consent: for optional integrations, cookies that are not strictly necessary, and certain communications.
Legal obligation: to comply with applicable law.

7. How we share information

We share information only as needed and never sell it. Categories of recipients include:

Customers and other authorized workspace members for collaborating on hiring.
Service providers (hosting, error monitoring, email delivery, AI model providers, payment processors) bound by data-protection terms.
Integrations you choose to enable, such as Google Calendar, Microsoft 365, or third-party HRIS.
Authorities when required by law, regulation, or valid legal process.
Successors in connection with a merger, acquisition, or asset sale, with notice where required.

8. International transfers

MSI Qatar may process information in countries other than your own. Where required, we rely on appropriate safeguards, including the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms.

9. Data retention

We retain personal data for as long as needed to provide the Service and for the periods Customers configure. Account and billing records are retained as required by law. Candidates may request deletion through the relevant Customer, or via hello@msiqatar.com if MSI Qatar is the controller.

10. Security

We apply administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include encryption in transit, encrypted backups, role-based access controls, audit logging, and least-privilege engineering practices. No system is completely secure, and we cannot guarantee absolute security.

11. Your rights

Depending on your location, you may have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw consent. To exercise these rights, contact hello@msiqatar.com. If your data is processed by MSI Qatar on behalf of a Customer, we will route your request to that Customer. You also have the right to lodge a complaint with your local supervisory authority.

12. Children

The Service is not directed to children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us so we can delete it.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version on this page and, if the changes are material, we will notify you through the Service or by email.

14. Contact us

For privacy questions, requests, or complaints, contact our team at hello@msiqatar.com.