Privacy Policy

Information We Collect

• Account Information: When you create an account, we collect your email address, full name, and authentication credentials (password or OAuth provider token).
• Company Information: You provide company details including company name (English and Arabic), Commercial Registration (CR) number, industry sector, entity size, and total headcount.
• Employee Data: You enter employee records including names, nationalities, employment types, salary ranges, disability status, and dual-employment status. This data is used solely for Saudization calculations.
• Usage Data: We automatically collect usage information such as pages visited, features used, browser type, and IP address for analytics and service improvement.

How We Use Your Information

• Perform Saudization calculations and Nitaqat band classifications based on the employee data you provide.
• Provide, maintain, and improve our services including dashboards, scenario planning, and compliance reports.
• Authenticate your identity and manage your account access and team member permissions.
• Send you service-related communications including compliance alerts, subscription notifications, and important updates.

Data Storage & Security

Your data is stored in a Supabase (PostgreSQL) database with row-level security (RLS) policies ensuring each user can only access their own company data. All data is encrypted at rest (AES-256) and in transit (TLS 1.3). Our application is hosted on Vercel's edge network with SOC 2 Type II compliance.

Third-Party Services

• LemonSqueezy: Processes subscription payments. LemonSqueezy receives your email and payment details but not your employee data. See LemonSqueezy's privacy policy for details.
• Vercel: Hosts our application infrastructure. Vercel processes request metadata but does not access your stored data.
• Supabase Auth: Manages authentication including OAuth flows with Google. Supabase stores your authentication credentials securely.

Cookies & Tracking

We use essential cookies for session management and authentication. We do not use third-party advertising cookies. Analytics cookies are limited to first-party usage metrics that help us improve the service.

Your Rights

• Access: You can view all your stored data through the application at any time.
• Export: You can export all your company data as JSON from the Settings page.
• Deletion: You can delete your company and all associated data from the Settings page. Account deletion can be requested by contacting us.
• Correction: You can update your personal and company information at any time through the application.

Data Retention

We retain your data for as long as your account is active. When you delete a company, all associated employee records, snapshots, scenarios, and audit logs are permanently deleted. After account deletion, we retain only anonymized usage statistics.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. Continued use of the service after changes constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or your data, please contact us at [email protected].