Your career planning should remain yours.

Effective January 1, 2026 · Last updated January 1, 2026

Ufuq is a private workspace for discovering internships, organizing opportunities, tracking applications, and preparing resumes. This policy applies to the Ufuq website, account, APIs, and related workspace features. It is written for students and early-career candidates, including people using Ufuq from Tunisia and other MENA countries.

Information we collect

• Account information: name, email address, password verifier, invitation or verification details, and account security records.
• Workspace information: search profiles, roles, keywords, locations, timing preferences, source selections, saved lists, notes, flags, favorites, application stages, and related links.
• Resume information: resume profile details, LaTeX source, generated versions, compile results, PDFs you choose to store in Resume Studio, and semantic embedding vectors created when you request internship match scores.
• Technical information: IP address, request metadata, browser information, error logs, rate-limit events, and security events needed to protect the service.
• Optional product analytics: limited usage events when analytics is enabled and permitted by the deployment configuration. We respect browser Do Not Track signals and do not use analytics to sell your profile.

How we use information

We use information to authenticate accounts, isolate each workspace, run searches requested by a user, normalize and display opportunities, save application progress, calculate user-requested resume-to-job match scores, generate or compile resume documents, provide support, prevent abuse, enforce rate limits, diagnose failures, and improve reliability. We use the minimum information reasonably necessary for each purpose. We do not make hiring decisions for employers and do not sell personal information.

When information is shared

Ufuq shares data with service providers only when they need it to provide infrastructure or a feature you request. Depending on the deployment, these providers can include a hosted PostgreSQL database, hosting and content delivery, the configured search provider, email delivery, product analytics, Cerebras for resume generation, Google Gemini for requested text-embedding match scores, and a separately hosted Tectonic compiler for LaTeX compilation. The sub-processor page describes these categories and the safeguards we expect from providers.

Search requests and resume content are sent to a provider only when the related feature is used. When you request internship match scores, Ufuq sends plain text extracted from your uploaded LaTeX resume and the saved internship titles, companies, and descriptions being ranked to Google Gemini; raw LaTeX commands are removed first. We do not put Cerebras or Gemini credentials, compiler credentials, database passwords, or search-provider tokens in browser code. We may disclose information when required by law, to protect users and the service, or during a corporate transaction subject to appropriate confidentiality protections.

Retention and choices

We keep account and workspace data, including stored resume and internship embedding vectors, while the account is active or as needed to provide the service, resolve disputes, meet legal obligations, and maintain security records. You can request access, correction, export, or deletion by contacting privacy@ufuq.app. We may need to verify account ownership before completing a request. Deleting an account may not immediately remove security logs or backups that must be retained for legitimate operational or legal reasons, but those records are retained only as long as necessary.

Security and international transfers

We use password hashing, secure sessions, origin checks for browser mutations, per-user ownership checks, rate limits, protected server credentials, and encrypted transport in production. No online service can promise absolute security, so please report suspected vulnerabilities promptly through our contact page. Providers may process data in countries other than where you live; we evaluate contractual, technical, and organizational safeguards appropriate to the service and the applicable law.

We may update this policy when the product or legal requirements change. The effective date above identifies the current version. If a change materially affects how we use account data, we will provide notice through the service or by email when appropriate.