Privacy Policy

Last Updated: April 15, 2026 | Hdqah Company — Kingdom of Saudi Arabia

1. Introduction

Hdqah Company (“we”, “us”, “the Company”) respects the privacy of users of our products and services. This policy explains how we collect, use, and protect personal information across all our current and future products, including: DOFS, Nozule, Mudeer, Basetah, Markaz, and any other services we provide.

2. Information We Collect

We collect the following information depending on the product or service:

• Account Information: Name, email, phone number, company name, job role.
• Usage Data: Login records, in-app actions, IP addresses, browser type.
• User Content: Text, images, videos, and documents uploaded by the user to our platforms.
• Third-Party Platform Connection Data: Access tokens for platforms such as X, LinkedIn, Meta, WhatsApp, and TikTok, when the user activates them. These tokens are encrypted and stored securely.
• Payment Data: Processed through certified providers (such as Stripe, Tap, Moyasar). We do not store credit card data directly.

3. How We Use Information

• Providing services and operating products.
• Sending operational notifications (email, WhatsApp, SMS) related to your account.
• Improving user experience through aggregated usage data analysis.
• Complying with regulatory and legal requirements in Saudi Arabia and other countries where we operate.
• Protection against fraud and abuse.

4. Sharing Information

We do not sell your personal information to any third party. We may share data only in the following cases:

• With technical service providers (hosting, payment, analytics) under data protection agreements.
• With platforms the user chooses to connect to their account (such as LinkedIn, X, Meta) via official OAuth interfaces.
• Upon formal request from competent regulatory or judicial authorities.

5. Data Protection

We apply strict security standards including:

• Data encryption in transit (TLS 1.3) and at rest (AES-256).
• Encryption of sensitive third-party platform access tokens in our databases.
• Access restricted to authorized personnel only.
• Regular backups and disaster recovery plans.

6. Your Rights

You have the right to:

• Access your personal data that we hold.
• Request correction or update of inaccurate data.
• Request deletion of your data (subject to legal requirements).
• Disconnect any third-party platform at any time from your account settings.
• Withdraw your consent to data processing.

7. Cookies

We use cookies essential for operating our services (login, user preferences) as well as analytical cookies to understand platform usage. You can manage cookie preferences through your browser.

8. Data Retention

We retain your data for the duration of your use of our services. Upon account closure, we delete data within 90 days, except what must be retained for legal or accounting purposes.

9. Social Platform Data

When connecting social platform accounts (such as LinkedIn, X, Meta, TikTok, WhatsApp) to our products, we commit to the following:

• Using access tokens only for purposes the user has explicitly approved.
• Not publishing any content without the user’s direct approval.
• Deleting access tokens immediately upon user disconnection.
• Complying with each platform’s policies and API terms of use.

10. Policy Changes

We may update this policy from time to time. We will notify users of material changes via email or in-app notification 30 days before they take effect.

11. Contact Us

For any privacy inquiries or to exercise your rights, contact us at:

• Email: [email protected]
• Address: Hdqah, Kingdom of Saudi Arabia