Privacy Policy

1. Who we are and what this covers

This policy explains how HarakahTec (حركة تك), based in Riyadh, Saudi Arabia, handles personal data when you visit harakahtec.com, register a business, use the HarakahTec back office and point-of-sale app, or contact us. We follow the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations.

For account, registration and contact information, we decide how the data is used. For the records a business keeps in the Service about its own customers and employees, that business decides, and we process the data on its behalf and on its instructions.

2. The data we collect

• Registration details: business name, commercial registration and VAT numbers, national address, the owner’s name, mobile number and email, and the documents uploaded for verification.
• Account details: names, email addresses and mobile numbers of authorised users, with their roles and permissions. Passwords are stored only as a one-way hash, and two-factor authentication secrets are stored encrypted.
• Security and usage records: sign-in attempts, the IP address and device used, and a log of changes made in the Service, so that each business can see who did what.
• Business records: products, sales, invoices, suppliers, and details of a business’s customers and employees, entered by that business.
• Subscription and billing records: plans, invoices and payments.
• Contact form messages: name, email, mobile number, shop name, the message, and the IP address it was sent from.
• Messages we send: a record of the emails and text messages sent through the Service, such as password reset links and notifications. Sign-in codes are never stored.

3. How we collect it

• directly from you, when you register, use the Service or contact us;
• from your staff, when they sign in and work in the Service;
• automatically from your device when you use the Service, for example sign-in records.

4. Why we use it, and on what basis

• To provide the Service and manage your subscription: to perform our agreement with you.
• To verify registrations, issue tax invoices and keep the records the law requires: to meet our legal obligations.
• To keep accounts and the Service secure, prevent fraud and investigate misuse: our legitimate interest in running a safe service.
• To answer your enquiries and send service messages: to perform our agreement, or because you asked.
• To send marketing messages: only with your consent, which you can withdraw at any time.

We do not sell personal data, and we do not use it to build advertising profiles.

5. Who we share it with

• Service providers that help us run the Service, such as hosting, email and text-message providers. They must protect the data and use it only for us.
• Government authorities, courts and regulators, such as the Zakat, Tax and Customs Authority, when the law requires it.
• A buyer or successor, if HarakahTec is merged or sold, subject to the same protections.
• Anyone else only with your consent.

6. Where the data is stored

Our servers are currently hosted by a data-centre provider in the European Union, outside the Kingdom of Saudi Arabia. Data sent there is protected by encryption in transit, access controls and our agreements with our providers, and we transfer personal data outside the Kingdom only as the Personal Data Protection Law and its regulations on transfers permit.

7. How long we keep it

• Account and business records: while the subscription is active, then for 30 days after it ends so that a copy can be requested, and then deleted.
• Tax invoices and accounting records: for the period required by the VAT and commercial record-keeping regulations, even after the subscription ends.
• Security records and change logs: for as long as they are needed to protect accounts and investigate incidents.
• Contact form messages: for as long as they are needed to answer and follow up the enquiry.

8. How we protect it

• connections to our website and the Service are encrypted;
• passwords are hashed, and sensitive secrets and backups are encrypted;
• two-factor sign-in is available, and access within each business is controlled by roles and permissions;
• each business’s data is kept separate from every other business’s;
• changes made in the Service are logged.

No system is completely secure. If a breach affects your personal data, we will notify you and the competent authority as the law requires.

9. Your rights

Under the Personal Data Protection Law, you have the right to:

• be told how your personal data is collected and used;
• access your personal data and obtain a copy of it;
• ask for inaccurate or incomplete data to be corrected;
• ask for data we no longer need to be destroyed;
• withdraw consent you have given, where we rely on consent.

To use these rights, email support@harakahtec.com with the subject “Privacy request”. We will reply within 30 days. If your data is held in the Service by a business you deal with, for example as its customer or employee, please contact that business first. If you are not satisfied with our reply, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

10. Cookies and similar technologies

The Service uses only what it needs to work: storage in your browser that keeps you signed in, remembers your language, and lets the point-of-sale app keep selling while offline. We do not use advertising or tracking cookies. Our website loads its fonts from Google Fonts, which receives your IP address when a page loads.

11. Children

The Service is for businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18, except where a business enters it as part of its own records.

12. Changes to this policy

We may update this policy. We will publish the new version on this page with its date, and tell registered customers about material changes by email or in the Service.

13. Language

This policy is published in Arabic and English. If the two differ, the Arabic version governs.

14. Contact us

HarakahTec, Riyadh, Saudi Arabia. Email: support@harakahtec.com. You can also reach us through our contact page.