Privacy policy
Last updated: 25/09/2026
1. Introduction
This Privacy Policy explains how the Saaraha platform collects, processes, stores, and protects data when you use the website or application. By using the Platform or creating an account, you acknowledge that you have read this Policy and accept its terms.
2. Data We Collect
2.1 Data you provide directly - Account data: full name, email address, mobile number. - Company data: company name, trade, logo, stamp, signature, brand colour, tax number, address. - Client data: names, phone numbers, addresses, and tax data that you enter for your own business clients. - Quotation data: line items, descriptions, prices, images, payment terms, and terms & conditions. - Communications: any messages you send us for support or subscription purposes. 2.2 Data collected automatically - Usage data: pages visited, session durations, browser and device type. - Quote-tracking data: the date and time a recipient opens a quotation link and the number of opens, as a core part of the Service. 2.3 What we do not collect We do not collect credit card or bank account details in any form. Payment is arranged directly with you, and no financial identifiers pass through our Platform.
3. Legal Bases for Processing
- Contract performance: delivering the Service you subscribed to. - Legitimate interest: platform security, fraud prevention, and service improvement. - Legal obligation: compliance with applicable laws. - Consent: any optional marketing communication only with your approval.
4. How We Use Your Data
We use data exclusively for: operating and delivering the Service, technical support, platform security and integrity, continuous improvement, and fulfilling legal obligations. We do not sell, rent, or trade your data to any third party.
5. No Direct Access to Your Data
The Company does not directly access users' data, their clients' data, or their quotations. Your data belongs to you alone, and no member of our team can access it in the ordinary course of business. No employee may view your account content except in narrow, specific cases — such as providing technical support at your explicit request, investigating misuse, or complying with a legal obligation — and only to the minimum extent necessary and with documentation.
6. Third-Party Data Sharing
We rely on trusted technical service providers to operate the Platform, such as hosting and email delivery services. These providers process data on our behalf under strict contractual obligations of confidentiality and protection, and they may not use it for any other purpose. We do not share your data with any other party except in cases of legal necessity or the protection of rights.
7. Data Security
We apply appropriate technical and organisational measures to protect your data, including: encryption of data in transit and at rest, isolation of each subscriber's data so that no subscriber can access another subscriber's data, encrypted password storage that cannot be viewed, and continuous monitoring for unauthorised access attempts. In the event of a breach affecting your rights, we will notify you promptly upon discovery.
8. Data Retention and Deletion
- Account, company, and quotation data: for the duration of the subscription and for 12 months after it ends. - Technical usage logs: 90 days on a rolling basis. - Subscription records for accounting purposes: 5 years in accordance with the law.
9. Your Rights
You have the right to: access your data, correct it, request its deletion, restrict its processing, object to direct marketing, and obtain your data in a readable format. Contact: privacy@falconcode.sa — we respond within 14 business days.
10. Cookies
We use only strictly necessary cookies for session management and sign-in. We do not use them for advertising tracking.
11. Dormant and Cancelled Accounts
- Dormant accounts (no sign-in for more than 18 months): we send a notice, then the account is deleted after 30 days. - Cancelled subscriptions: switched to view-only mode with data retained per Section 8.
12. Minors
The Platform is intended for persons over the age of 18. If we become aware that a minor has submitted data, we will delete it immediately.
13. Changes to This Policy
We reserve the right to amend this Policy at any time. Material changes will be communicated by email and an in-app notice. Your continued use 7 days after notification constitutes acceptance of the changes.
14. Contact
Email: privacy@falconcode.sa Website: saaraha.com In the event of any conflict between the Arabic and English versions, the Arabic version shall prevail.