Privacy policy (PDPL)

We comply with the Saudi Personal Data Protection Law (PDPL) and collect only the data needed to run the service.

Last updated: 20 October 2026

1. Data we collect

We collect basic account details (name, email, role), client business profile details (business name, activity, city, optional CR number), and creator profile details (handle, bio, cities, portfolio, and Mawthooq licence where applicable).

2. Purpose of processing

Personal data is used solely to operate accounts, fulfil orders, issue invoices, verify creator eligibility, resolve disputes, and meet legal and tax obligations.

3. File security & expiring links

Uploaded files live in private storage buckets protected by database row-level security (RLS) and are served through signed URLs that expire after 10 minutes.

4. Your rights

You may access and correct your personal data or request deletion of your account and data not subject to statutory retention by contacting us.