Privacy Policy

Our definitive commitment to data protection, engineering transparency, and compliance with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL).

Last UpdatedSeptember 25, 2026

JurisdictionKSA // سدايا

EncryptionAES-256 / TLS 1.3

AI IsolationZero Leakage

Document Sections

Official & Binding Policy

Applicable across all systems

1. Overview & Data Controller

Sawab Technologies is committed to safeguarding the privacy, confidentiality, and integrity of personal, corporate, and proprietary data processed across our software engineering, cloud, and digital platforms.

This Privacy Policy is structured in strict compliance with the Saudi Personal Data Protection Law (PDPL - Royal Decree No. M/19), its executive regulations, guidelines issued by the Saudi Data and AI Authority (SDAIA), and global data protection standards (including ISO/IEC 27001 and GDPR principles).

Designated Data Controller:

Sawab Technologies LLC

King Fahd Road, Al Olaya District, Riyadh 12211, Kingdom of Saudi Arabia

Privacy & DPO Inquiries: [email protected]

2. Information We Collect

We collect and process only the minimal necessary data to fulfill contractual commitments and provide high-reliability directional engineering:

Identity & Contact Information

Full name, corporate email address, direct phone number, company name, professional title, and official billing details.

Project & Technical Specifications

System architecture designs, API specifications, project scopes, integration parameters, and compliance requirements.

Technical Telemetry & Diagnostics

IP address, user agent, browser engine, operating environment, performance metrics, and error diagnostic logs.

Preferences & Interaction State

Language localization choice (Arabic / English), display theme state (dark / light), and consent preferences.

3. Lawful Basis & Purposes of Processing

All data processing operations are anchored in lawful bases recognized under the Saudi PDPL and international best practices:

Contractual Execution: Engineering software architectures, deploying cloud topologies, fulfilling Statements of Work (SOW), and managing SLAs.
Legitimate Operational Interests: Hardening cybersecurity postures, detecting unauthorized intrusion vectors, and optimizing engine performance.
Statutory & Regulatory Compliance: Adhering to statutory tax obligations (ZATCA e-invoicing compliance) and Saudi corporate regulations.
Explicit Prior Consent: Gathered before sending technical briefings, engineering whitepapers, or co-authoring public case studies.

4. Enterprise AI & Data Sovereignty

Zero Data Leakage & Isolated Enterprise AI Guarantee

We strictly guarantee that your proprietary codebases, trade secrets, and client datasets are never used to train public foundation models or third-party AI systems. All enterprise AI workflows execute within sandboxed, zero-retention private tenants.

Data Sovereignty & Local Residency: In accordance with National Cybersecurity Authority (NCA) essential controls and SDAIA standards, sensitive client workloads and sovereign records are hosted in certified Tier-III/IV cloud data centers physically located within the Kingdom of Saudi Arabia.

5. Cryptographic Security & Access Control

We employ defense-in-depth engineering to ensure end-to-end data confidentiality, integrity, and availability:

AES-256 GCMMilitary-grade encryption for all data at rest and persistent stores

TLS 1.3 / HSTSEnd-to-end authenticated transport encryption across all endpoints

RBAC & MFALeast-privilege role-based access enforced by hardware security keys

Our infrastructure undergoes continuous static and dynamic security analysis, periodic independent penetration tests, and immutable audit log streaming.

6. Your Rights Under KSA PDPL

Under the Saudi PDPL and international regulations, data subjects hold clearly defined enforceable rights:

Right to be Informed: Clear visibility into why, how, and for how long your personal data is collected and processed.

Right to Access: Request a verifiable copy of your personal data held by Sawab Technologies at no charge.

Right to Rectification: Rectify inaccurate, outdated, or incomplete data records without undue delay.

Right to Destruction / Erasure: Request the deletion of records once the stated legitimate business purpose expires.

Right to Withdraw Consent: Revoke prior processing consent at any time without retroactive invalidation.

To exercise your rights, transmit a formal request to our Data Protection Officer at [email protected]. We provide statutory resolution within 30 days.

7. Cookies & Tracking Technologies

We utilize strictly necessary cookies and local storage tokens to deliver seamless portal experiences:

Strictly Necessary: Essential for session continuity, request verification, and CSRF protection.
Preference Cookies: Storing language localization (ar / en) and UI theme modes (dark / light).
No Third-Party Ad Retargeting: We do not deploy cross-site commercial ad trackers or sell telemetry.

8. Inquiries & Data Protection Officer

For inquiries regarding this Privacy Policy, compliance audits, or data rights requests, please contact our legal and DPO desk:

Direct DPO Email[email protected]

Corporate HeadquartersRiyadh, Kingdom of Saudi Arabia