Last updated: 2 August 2026 · privacy-2026-08-02
Full legal content is currently available in English.
This policy describes what Wohaj actually does with your information. It was written from the platform's own code and database rules rather than from a template. Where we do not yet know something — for example how long an external provider keeps a copy of data we send it — this policy says so instead of guessing.
Wohaj is a Qatar-based student achievement and opportunity network, operated from Qatar. The legal identity of the operating entity is being confirmed and will be named here once it is. Until then, the address in section 15 reaches the people responsible for this platform and for this policy.
Wohaj is independent. It is not affiliated with, endorsed by, or acting on behalf of any university, government body, or employer.
This policy applies to everyone who uses Wohaj: students, company representatives, administrators, and visitors who are not signed in.
Account information. Your email address, name, and profile picture, received from Google if you sign in with Google, or your email address if you sign in with a magic link. We also store your role (student, company, or admin) and whether you have finished onboarding.
Student profile. University, major, study year, biography, skills, links, availability, and preferences. Everything beyond what onboarding asks for is optional. We do not collect your date of birth, national ID, or any government identifier.
Career Book content. The projects, achievements, hackathon work, and evidence links you publish, plus comments and reactions you leave on other people's work.
Applications. Your application message, your answers to a company's screening questions, relevant experience, portfolio link, expected compensation, availability, and any CV you attach.
Company information. Company name, type, description, website, logo, and the record of our review decision including who made it, when, and any reason given for a rejection.
Activity data. Which pages you visit inside Wohaj, whose profile you viewed and who viewed yours, and product events such as opening an opportunity or completing onboarding.
Email records. Every email we send is logged with the recipient address, the type of message, and whether it was delivered, failed, or was skipped because of your preferences.
Technical data. Our hosting provider records request information including IP addresses in its logs. When you joined a waitlist we stored a salted hash of your IP address rather than the address itself.
Wohaj uses a third-party AI provider (Groq) for two things, and only these two.
Draft assistance. When you ask Wohaj to help draft a Career Book entry, the text you typed and the structured fields you filled in are sent to the provider, which returns a suggested title and body. Nothing is saved until you review it and choose to keep it, and you can discard the suggestion entirely.
CV import. If you import a CV, the text of that document is sent to the same provider so it can be turned into entries you then review. Before the text leaves our servers we remove labelled contact and sensitive lines — email, phone, address, date of birth, age, nationality, gender, marital status, ID and passport numbers, salary, and health information — in both English and Arabic. That reduces what is sent. It is pattern matching on labelled lines, so we cannot promise it catches everything.
What we do not yet know. We have not confirmed whether this provider retains what we send, for how long, or whether it may be used to train models. Until we have confirmed it we cannot tell you, and we will not pretend otherwise.
Wohaj does not use AI to rank you, score you, match you to opportunities, or make any decision about you. Opportunity relevance and applicant suggestions are ordinary rules, and the reasons are shown on the page.
We use what we collect to:
Aura is calculated from your activity on Wohaj. It is not a measure of verified skill, it is not money or credit, and it does not guarantee any hiring outcome.
We do not sell your information. We do not run advertising. There is no advertising pixel, marketing tracker, or third-party analytics script anywhere on Wohaj.
Public. If you set your profile to public, your profile page and anything you publish publicly can be seen by anyone who opens the link, including people who are not signed in, and it can appear in search engines. That is the point of a shareable Career Book, but it is worth being deliberate about. You can make your profile private at any time.
Search engines. Public profiles, public Career Book entries, published opportunities, hackathons, and student clubs are indexable. Everything else — your applications, messages, drafts, private entries, the company workspace, and every internal page — carries an explicit instruction to search engines not to index it. When you make something private that instruction applies immediately, but search engines only remove a page on their next crawl, so it can linger in results for a while afterwards.
Companies. When you apply to an opportunity, only the company that posted it can see your application, your answers, and any CV you attached. Other companies cannot, including companies whose accounts are still awaiting review or were rejected. Companies can also write private notes about applicants; you cannot see those notes.
Only you. Your drafts, your private Career Book entries, your email address, and your notification settings. Your email address is never shown on a public page.
Us. Wohaj administrators can access account data to run the platform, review company accounts, and respond to support requests.
We use these providers to run Wohaj. Each receives only what it needs:
We are confirming where each provider stores data and what its retention terms are. Until that is done we cannot tell you which country your data sits in, and we will not guess. We will update this section as each one is confirmed.
We may also disclose information where we are legally required to, including in response to a valid request from a court or government authority in Qatar, or where it is necessary to protect someone's safety.
We do not sell, rent, or trade your personal information for anyone's marketing purposes.
Wohaj sends three different kinds of email, and they are treated differently.
Essential messages are about your own account: an application outcome, a decision on your company account, a registration you made. These cannot be switched off while your account exists, and they never carry promotional content.
Optional notifications are alerts, digests, and reminders. You can turn each category off in your notification settings, or turn all of them off from the link in any such email.
Marketing and product news is off unless you turn it on. We do not treat silence as consent. Every change you make to that setting is recorded with the date and where the change came from.
If an email to you hard-bounces, or you mark one as spam, we stop sending to that address entirely — including essential messages — because we can no longer deliver to it responsibly.
We would rather be accurate than reassuring, so this section says what the system actually does today.
CV imports follow a defined schedule: the source file and raw processing data are deleted within 24 hours of the import finishing; a failed import is kept up to 7 days so it can be retried; an import left in progress is abandoned after 30 days; structured entries are purged 30 days after the import reaches a final state; and the import event log is kept 90 days.
Product analytics events are deleted after 400 days.
Everything else — your profile, Career Book entries, applications, attached CVs, application messages, notifications, profile-view records, activity records, and email logs — is currently kept for as long as your account exists, because automatic deletion for those categories has not been built yet. We are working on it, and we would rather tell you that than imply a schedule that does not exist.
Deleting your account removes your profile and the records attached to it. Files you uploaded are removed separately; say so in your request and we will confirm when it is done.
Access is enforced in the database itself, not only in the interface, so a request for something you are not entitled to fails at the data layer rather than relying on a screen to hide it. Uploaded CVs live in private storage scoped to your own account. Sign-in credentials are handled by our authentication provider and are never stored by Wohaj.
No method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee absolute security.
You can edit your profile at any time, switch it between public and private, delete individual Career Book entries, and change your notification settings.
To request a copy of your data, a correction, or deletion of your account, email the address in section 15. There is not yet a self-service export or a delete-my-account button; requests are handled by a person. We aim to respond within 30 days, and we will tell you if something has to be kept for a legal reason.
Wohaj is currently open to people aged 18 and over.
We ask one question: are you 18 or older? We store your answer as a yes or a no, and the date you gave it. We do not collect or store a date of birth, an age, or a year of birth. A yes-or-no answer settles the same question while telling us far less about you, so that is all we keep. We cannot verify age, and we do not claim to.
If you answer that you are under 18, your account keeps working and keeps everything in it. Your profile is not shown publicly and companies cannot find you, and you cannot publish, apply to an opportunity, upload a CV, register for an event, or accept contact from a company. Signing in, reading your own data, exporting it, and deleting it are never blocked.
You can change your answer later, and this is a temporary rule. See section 3 of the Terms.
If you believe a child has provided us with personal information, contact us and we will remove it.
This policy is versioned. The current version and its effective date are at the top of this page. When we make a material change we publish a new version, update that date, and notify users through the platform or by email.
Wohaj records which version of this policy was current when your account completed onboarding, so there is a factual answer to what you were shown and when.
For questions about this policy, or to exercise any of the rights in section 11, contact us at:
This policy describes Wohaj's actual behavior as of the version date above. It has not been reviewed by a qualified lawyer in Qatar, and nothing here is a statement that Wohaj complies with any particular law.