Privacy Policy

1. Information We Collect

Account information: name, email address, and password you provide during registration.

Business data: products, orders, invoices, customer records, and other business information you input into the Service.

Usage data: pages visited, features used, device information, and interaction patterns.

Log data: IP address, browser type, operating system, and timestamps of your interactions with the Service.

2. How We Use Your Information

To provide, maintain, and improve the Service.

To process transactions, generate invoices, and support ZATCA e-invoicing compliance.

To communicate with you about your account, updates, and support inquiries.

To monitor usage patterns and optimize performance.

To detect and prevent fraud, abuse, and security threats.

3. Data Storage & Security

Your data is stored on secure, encrypted servers using SurrealDB with RocksDB storage. All data in transit is encrypted via TLS/HTTPS. We implement industry-standard security measures including access controls, regular security reviews, and encrypted backups. While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security.

4. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share data only in the following circumstances: with your explicit consent, with service providers who assist in operating the Service (under strict confidentiality agreements), to comply with legal obligations, or to protect our rights and safety.

5. ZATCA & Regulatory Submissions

When you submit invoices through the Service for ZATCA compliance, the necessary invoice data (including tax numbers, invoice details, and digital signatures) is transmitted to ZATCA's FATOORA system as required by Saudi Arabian e-invoicing regulations. This data transfer is mandatory for compliance and is not controlled by us.

6. Data Retention & Deletion

We retain your account data for as long as your account is active.

Upon account cancellation, your data is retained for 30 days, after which it is permanently deleted.

You may request deletion of your data at any time by contacting us. Certain data may be retained as required by law (e.g., tax records).

Anonymized usage statistics may be retained indefinitely for analytical purposes.

7. Cookies & Tracking

We use essential cookies for authentication and session management. We may use analytics cookies to understand how the Service is used. You can control cookie settings through your browser. Disabling essential cookies may affect the functionality of the Service.

8. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data. You may also have the right to object to or restrict certain processing activities. To exercise any of these rights, contact us at the address below.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and, where appropriate, by email. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.

10. Contact

If you have any questions about this Privacy Policy, please contact us at: