Data Protection

Privacy Policy

Last updated: September 10, 2026

1. Commitment to Saudi PDPL Regulations

SMART PLATFORM is fully committed to the Personal Data Protection Law (PDPL) enacted in the Kingdom of Saudi Arabia. We ensure that all personal and enterprise records are gathered, processed, and maintained in strict adherence to Saudi privacy regulations.

2. Information We Collect

  • Account Information: Name, corporate email, mobile number, organization name, and commercial registration (CR).
  • Operational Data: Invoices, accounting records, items, and inventory data entered by your team members in the ERP.
  • Security & Technical Logs: IP addresses, browser session identifiers, and audit logs to protect your workspace against unauthorized access.

3. How We Use Your Data

We utilize customer and organizational data exclusively to:

  • Provision, operate, and maintain your cloud ERP workspace and database.
  • Authenticate users and enforce multi-tenant organization isolation.
  • Process billing subscriptions and issue ZATCA-compliant e-invoices.
  • Deliver technical support, system alerts, and critical security notices.

4. Data Security & AES-256 Encryption

Security is embedded at the core of SMART PLATFORM architecture:

  • All data at rest is encrypted using bank-grade AES-256 algorithms.
  • All communication between your browser and our servers is secured via TLS 1.3 / HTTPS.
  • Automated daily snapshots and encrypted backups ensure full disaster recovery and zero data loss.

5. Zero Data Selling & Third-Party Privacy

We have a strict policy: SMART PLATFORM will never sell, lease, or monetize your organization data or personal contact records to any third party for marketing or advertising purposes.

6. Cookies & Session Storage

We only utilize essential, secure cookies necessary to maintain authenticated sessions (NextAuth JWT) and remember your UI locale (Arabic / English) and theme preference.

7. Contacting the Data Protection Team

For privacy inquiries, data export requests, or regulatory questions, please contact our support team through the official support channel or by email.