Privacy Policy

At Sahaab, your privacy matters to us. This Privacy Policy explains how we collect, use, and protect personal information when you visit our website (sahaab.ai) or interact with our services. We are committed to handling your data transparently and in compliance with applicable laws, including the Saudi Personal Data Protection Law (PDPL).

1. Who We Are

Sahaab is a digital solutions company headquartered in Riyadh, Kingdom of Saudi Arabia. We build AI-powered SaaS products for businesses and consumers across the Kingdom and beyond.

2. Information We Collect

When you interact with our website, we may collect the following categories of information:

a. Information you provide directly

When you fill out our contact form or email us, we collect:

• Your name
• Your email address
• Your company name (if provided)
• The contents of your message

b. Technical information collected automatically

When you visit our website, our hosting provider (Cloudflare) may automatically collect basic technical information for security and performance purposes, including:

• IP address
• Browser type and version
• Device type and operating system
• Pages visited and time spent on each page
• Referring website

c. Cookies and local storage

Our website uses minimal browser storage (specifically, your browser's localStorage) to remember your language preference (English or Arabic). We do not currently use tracking cookies, advertising cookies, or third-party analytics cookies on this website.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to your inquiries and communicate with you
• To provide and improve our services
• To ensure the security and proper functioning of our website
• To comply with legal obligations
• To remember your preferences (such as language) for a better experience

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Your consent — when you submit a contact form or email us
• Legitimate interest — to operate, secure, and improve our website
• Legal obligation — to comply with applicable laws and regulations

5. Sharing Your Information

We do not share your personal information with third parties except in the following limited circumstances:

• Service providers — we use trusted third-party services to operate our website (such as Cloudflare for hosting and form submission services). These providers process data only on our behalf and are bound by confidentiality obligations.
• Legal requirements — we may disclose information when required by law, court order, or to protect our rights and safety.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred. We will notify you of any such change.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, to comply with our legal obligations, resolve disputes, and enforce our agreements. Contact form messages are typically retained for up to 24 months unless ongoing communication or legal requirements dictate otherwise.

7. Your Rights

Under Saudi Arabia's Personal Data Protection Law (PDPL) and similar applicable laws, you have the following rights regarding your personal data:

• Right to access — request a copy of the personal data we hold about you
• Right to correction — request that inaccurate or incomplete data be corrected
• Right to deletion — request that we delete your personal data, subject to legal retention requirements
• Right to withdraw consent — withdraw your consent at any time where processing is based on consent
• Right to object — object to certain types of processing of your data
• Right to data portability — request your data in a portable, machine-readable format

To exercise any of these rights, please contact us at info@sahaab.ai. We will respond to your request within 30 days.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (HTTPS), secure hosting infrastructure, and limited access to personal data on a need-to-know basis. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

9. International Data Transfers

Some of our service providers may be located outside the Kingdom of Saudi Arabia. When we transfer personal data internationally, we ensure that appropriate safeguards are in place in accordance with PDPL requirements and applicable data protection laws.

10. Children's Privacy

Our website is not intended for children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us so we can take appropriate action.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: