Privacy Policy

Privacy at a glance

We collect the minimum personal data needed to provide our AI-powered HR services. We process applicant data, employee records and job-related information on behalf of the organisations that use Cherii.

Our platform follows GDPR and UAE PDPL principles, with a human-in-the-loop approach where AI provides recommendations but people make all final decisions.

Who we are

Cherii is an AI-powered HR platform. Organisations using Cherii act as the data controller for their candidates and employees; Cherii acts as their data processor.

General inquiries and privacy requests can be sent through your organisation’s HR administrator or through the contact details provided in your service agreement.

Data we collect & why

What: email address (required); name; basic device and session data (for security and aggregate analytics); CVs and application details; interview responses and recordings (for AI interview processing); and, for employees, the HR records your organisation manages in Cherii (such as onboarding documents, timesheets, expenses and reviews).

Why: to provide AI-powered recruitment and HR services, to contact you about the service, to protect our service from abuse, and to understand platform performance.

Legal basis:

• Recruitment and HR services: legitimate interest and contractual necessity (core platform functionality);
• User account data: contractual necessity (required for account management);
• Marketing communications: consent (opt-in only);
• Security and analytics: legitimate interest (platform security and performance).

Storage & transfers

Data is hosted with reputable cloud infrastructure providers, with encryption at rest and in transit. International transfers are secured through Standard Contractual Clauses (SCCs) and other appropriate safeguards.

Subprocessors: we work with trusted providers for hosting, storage, email delivery and AI processing. All have appropriate data processing agreements in place. A current list is available on request.

Retention

We keep data only as long as necessary for the stated purposes, then delete or anonymise it. Applicant data is typically retained for 90 days after a role is closed, though organisations can configure retention periods based on their needs. Interview recordings, responses and employee records are retained according to your organisation’s requirements and applicable legal obligations.

Your rights

Under GDPR and UAE PDPL you may request access, correction, deletion, restriction of, and objection to certain processing. To exercise a right, contact the organisation that holds your data or send a request through the Cherii platform. We will verify your identity and respond within statutory timelines.

Marketing & opt-out

We send marketing messages only with prior consent. You can opt out at any time using the unsubscribe link in any message.

Cookies & tracking

We use only what’s necessary for site operation and basic aggregate analytics. You can block cookies in your browser; the site will still function, but some features may be limited.

AI interview processing

Our AI interview service processes responses to conduct interviews and provide insights. This processing is necessary for the core functionality of the platform. All processing follows a human-in-the-loop approach where AI provides recommendations but people make all final decisions.

Children’s data

Our services are designed exclusively for adult users (18+). We do not knowingly collect or process data from individuals under 18 years old. If we become aware that data from a minor has been collected inadvertently, it will be securely deleted without delay.

Data breach notification

We maintain a documented incident response plan. Where GDPR applies, supervisory authorities are notified within 72 hours. Affected customers are notified without undue delay.

Contact

For privacy questions, contact your organisation’s HR administrator or use the contact details in your Cherii service agreement. For comprehensive compliance details, see our Standards page.