1. Information We Collect

We may collect the following categories of information from users and partners:

• Personal Identification: Name, business name, phone number, email address, location
• Business Data: Billing details, POS usage patterns, subscription history
• Technical Data: Device type, IP address, browser type, OS, access logs
• Communication Data: Support tickets, feedback forms, chat messages

2. Use of Data

We use your data to:

• Provide, operate, and improve our SaaS platforms and mobile apps
• Communicate service updates, technical changes, and offers
• Respond to inquiries and support requests
• Meet regulatory and contractual obligations
• Generate aggregate insights and analytics (non-identifiable)

3. Data Retention

We retain personal data only as long as necessary for business and legal compliance. Any inactive account data will be archived or deleted after 24 months unless required for compliance purposes.

4. Data Protection Measures

We apply robust technical and organizational measures including:

• SSL encryption
• Access control and role-based permissions
• Periodic security audits
• Local and cloud backups

5. Third-Party Disclosure

We do not sell your data. We may share limited data with verified third-party service providers (e.g., payment gateways, hosting services) under strict confidentiality agreements.

6. International Data Transfers

As part of global infrastructure, data may be stored on servers outside KSA (e.g., AWS, Azure). We ensure such transfers meet PDPL safeguards, including adequacy or binding contracts.

7. Cookies & Tracking

We use cookies to enhance your browsing and analytics experience. You may disable cookies via browser settings, but this may affect certain features.

8. Your Rights under PDPL

You have the right to:

• Request access, correction, or deletion of your data
• Withdraw consent at any time
• Lodge a complaint with Saudi Data & AI Authority (SDAIA)

9. Contact Information