1.Who we are
ijra (اجراء) is operated by Alileus, the controller of the personal data described in this policy, meaning it decides why and how that data is processed. "We" and "us" in this policy mean Alileus.
- Commercial registration number: 7050212898
- National address: 3162 Al Abbas Ibn Abdul Mutalib, Al Taawun Dist., Riyadh 12475, Saudi Arabia
- Email: hala@ijra.ai
2.Data we collect
If you browse the map without an account, we don't collect account data. We only receive the technical data below and aggregated, cookieless statistics (see "Cookies and browser storage").
- Account data: your name, email address, preferred language, plan, account role (user or administrator) and the date you joined.
- Sign-in data: one-time codes sent to your email address, which expire after 15 minutes; your sign-in sessions; and records of code requests, used to limit abuse. We don't use passwords.
- Subscription and payment data: your plan, subscription dates and status, auto-renew setting, payment amounts and references, payment method type and, for your saved card, its brand, its last four digits and a token issued by Moyasar. We never receive or store full card numbers or security codes.
- Invoice data: invoice number, date, amounts, VAT and service period, and the name on your account, which appears on the tax invoice.
- Alert settings: the name, categories, countries, map areas, severity and verification levels of each alert you save, how it is sent (daily or as it happens), the time of your daily email, and when it last emailed you.
- Messages you send us, such as support or privacy requests.
- Technical data: limited logs (such as request times and error reports) needed to run and secure the service.
3.Cookies and browser storage
We don't use advertising or tracking cookies.
- Language: if you choose a language, a cookie (ijra_locale) remembers it for up to a year.
- Sign-in: when you sign in, your session tokens are kept in your browser's local storage so you stay signed in. Signing out removes them.
- Display preferences: your theme choice (light or dark) and similar preferences are kept only in your browser's local storage and are never sent to us.
- Usage and performance statistics: Vercel Web Analytics and Speed Insights count page visits and measure loading speed. They work without cookies and give us aggregated statistics (such as pages viewed, referring site, country, browser and device type, and load times) that don't identify you.
You can clear cookies and local storage in your browser settings at any time. This signs you out and resets your preferences.
4.Why we use it
- To create and secure your account and sign you in.
- To provide the service, including your plan's features and the alerts you set up.
- To take payments, renew your subscription as agreed, and issue electronic tax invoices reported to ZATCA.
- To send service emails: sign-in codes, receipts, renewal reminders, payment problems, subscription changes, account deletion confirmations and the alert emails you set up.
- To answer your messages and requests.
- To keep the service secure, prevent fraud and abuse, and understand overall usage and performance so we can improve it.
- To meet our legal obligations.
We don't sell your data or use it for advertising. We send marketing messages only if you've agreed to receive them, and you can unsubscribe at any time using the link in the message or by contacting us. Service emails are part of the service; you can pause or delete your alerts on the Alerts page.
5.Legal bases
We process personal data only where the PDPL allows it:
- Contract: to provide your account, subscription, alerts and service emails.
- Legal obligation: to issue tax invoices, keep tax and commercial records, and respond to lawful requests from competent authorities.
- Consent, where required: for example, for marketing messages. You can withdraw consent at any time; this doesn't affect processing that took place before.
- Legitimate interest: to keep the service secure, prevent fraud and abuse, and produce aggregated usage statistics, provided this doesn't harm your rights and interests. We never rely on legitimate interest to process sensitive data, and we don't ask you for any.
7.Transfers outside the Kingdom
Some of our service providers store or process data outside Saudi Arabia: Convex (hosting and database), Vercel (website hosting and statistics) and Resend (email). We transfer data to them only under the conditions set by the PDPL, its Implementing Regulations and the Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards such as contractual data-protection commitments, and we transfer only the minimum data needed for each purpose.
8.How long we keep it
- Account data, sessions and alert settings: for as long as your account exists. They're deleted when you delete your account.
- Sign-in codes: they expire after 15 minutes.
- Payment, subscription and invoice records: for the periods required by tax, zakat and commercial record-keeping rules, generally between six and ten years, even after you delete your account. After deletion we anonymise these records where possible; tax invoices already issued can't be changed, so they keep the name they were issued with.
- Messages you send us: for as long as needed to deal with them and any follow-up.
- Technical logs: for a short period, normally no more than 90 days.
When a retention period ends, we destroy the data or anonymise it so that it no longer identifies you.
9.Your rights
Under the PDPL you have the right to:
- Be informed of how and why we process your personal data, as this policy explains.
- Access your personal data and obtain a copy of it in a clear, readable format.
- Have inaccurate, incomplete or outdated data corrected.
- Have your data destroyed when it's no longer needed, subject to the records we must keep by law.
- Withdraw your consent where processing is based on it.
You can change your name and language, and delete your account, yourself from your account page. For any other request, email hala@ijra.ai from the address linked to your account; we may ask you to confirm your identity. We'll respond within 30 days. If the Implementing Regulations allow us more time, for example for a complex request, we'll tell you before the 30 days end, with the reason and the new date.
If you're not satisfied with our response, you can lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
10.Deleting your account
You can delete your account at any time from your account page. We then immediately delete your profile, sign-in methods, sessions and saved alerts, turn off auto-renew, end your subscription, delete your saved card from Moyasar and email you a confirmation. Records we must keep by law, such as invoices and payment records, are kept as described under "How long we keep it" and destroyed when the retention period ends.
11.Security
We protect personal data with encryption in transit, one-time sign-in codes with attempt limits, and access controls that limit our staff to the data their role needs. Card details are entered on Moyasar's secure form and never pass through our servers. No system is completely secure, but we work to prevent unauthorised access to personal data and its loss or misuse.
If a personal data breach occurs, we'll notify SDAIA within 72 hours of becoming aware of it where the regulations require, and tell affected users without undue delay where the breach is likely to harm them, including steps they can take to protect themselves.
12.Children
ijra isn't intended for anyone under 18. Accounts and subscriptions are for adults only, and we don't knowingly collect children's personal data. If you believe a child has created an account, email hala@ijra.ai and we'll delete it.
13.Changes to this policy
We may update this policy when the service or the law changes; the date at the top shows the current version. If a change is significant, we'll tell you by email or on the site before it takes effect.
14.Contact us
For any privacy question or request, email us at hala@ijra.ai.
You can also write to us at our national address: 3162 Al Abbas Ibn Abdul Mutalib, Al Taawun Dist., Riyadh 12475, Saudi Arabia.