How we handle your data.

Sakb is built to comply with the Personal Data Protection Law of Saudi Arabia (PDPL) and its implementing regulations. This policy describes what personal data we collect, how we use it, who we share it with, and the rights you have over it.

Sakb is operated by Sakb Technologies, a company registered in the Kingdom of Saudi Arabia (CR pending), with its registered address in Riyadh. For data protection matters, Sakb acts as the data controller for personal data collected through this website and as a data processor for personal data we process on behalf of customers using the Sakb platform.

We collect personal data in three contexts:

• When you visit this website: request metadata (IP address, user agent, timestamps), preferences (language, theme), and information you submit through forms (trial registrations, contact messages, partner applications).
• When you use Sakb: account information (name, email, phone, role), authentication data, and operational telemetry. Financial data you upload or connect is handled under our role as data processor for your business.
• When you correspond with us: the contents of messages, support tickets, and any documents you share.

Personal data collected via this website is used to respond to your inquiries, evaluate trial registrations, and operate the website itself. It is not used for marketing without consent. Usage analytics are limited to aggregate, non-identifying telemetry.

We share personal data only with the subprocessors needed to operate the service, listed on our security page, and only to the extent necessary. We do not sell personal data. We do not share personal data with advertisers.

Inquiry and form data is retained for 24 months from the date of submission, after which it is deleted unless you become a customer (in which case it becomes part of your account record).

Customer account data and the financial records held in it are retained for the life of the account plus the period required by Saudi commercial and tax law, typically 10 years.

Under PDPL, you have the right to access, correct, and (in defined circumstances) request deletion of your personal data. You can withdraw any consent you have given. To exercise these rights, write to privacy@sakb.sa.

Personal data is stored in Saudi Arabia. Limited operational processing may occur outside the Kingdom and is governed by appropriate safeguards as required by PDPL. The subprocessor list identifies which subprocessors operate from outside Saudi Arabia.

Material changes to this policy will be communicated to customers in advance of taking effect. The effective date and version of this policy are shown at the top.

For privacy questions or to exercise your rights: privacy@sakb.sa.