Privacy Policy

1. Introduction

At Amlaki, we value your trust and are committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data when you use our platform. We are committed to complying with the Personal Data Protection Law of the Kingdom of Saudi Arabia.

2. Data We Collect

We collect different types of data:

2.1 Registration data

• Full name
• Email address
• Mobile number
• Real-estate office name (for offices)
• Commercial registration number (for offices)

2.2 Property and tenant data

• Property and unit information
• Tenant data
• Contract and payment details
• Attached documents

2.3 Usage data

• Sign-in and activity logs
• Device and browser type
• IP address
• Pages you visit

3. How We Use Data

We use your data for the following purposes:

• Providing property management services
• Recording and verifying payments and issuing invoices
• Sending notifications and alerts related to your account
• Improving and developing our services
• Contacting you about technical support
• Complying with legal and regulatory requirements
• Preventing fraud and protecting the security of the platform

4. Data Sharing

We do not sell your personal data. We may share your data only in the following cases:

• Service providers: hosting services and email services.
• Legal requirements: when requested by a competent government authority.
• Protection of rights: to protect our rights or the safety of users.
• With your consent: in any other case, after obtaining your explicit consent.

5. Data Protection

We take strict security measures to protect your data:

• Encryption of data in transit using TLS 1.3 on all connections
• Passwords stored hashed with the bcrypt algorithm (never stored in plain text)
• Daily data backups
• A multi-level permission system that isolates each office's data from the others
• Short-lived sessions, revoked immediately on sign-out or password change
• Uploaded files protected by a permission check before they are served
• Regular security reviews of the code and remediation of findings

6. Data Retention

We retain your data for as long as your account is active or as needed to provide the services. After your account is closed, your personal data (name, email and mobile number) is anonymized immediately, and accounting records remain anonymized for the period required by the accounting and tax regulations of the Kingdom.

• Account and profile data: for as long as the account is active, then anonymized upon deletion
• Contracts and payment records: for the period required by accounting and tax regulations
• Sign-in and activity logs: used for security auditing and detecting unauthorized use
• Temporary verification codes (OTP): expire within minutes and are deleted periodically
• Session tokens: expire automatically and are deleted by a daily cleanup job

You can request deletion of your data at any time through the Delete Account page.

7. Your Rights

You have the following rights regarding your data:

• Right of access: request a copy of your personal data.
• Right to rectification: correct any inaccurate data.
• Right to erasure: request deletion of your data (subject to legal requirements).
• Right to portability: obtain your data in a portable format.
• Right to object: object to the processing of your data for certain purposes.
• Right to withdraw consent: withdraw your consent at any time.

To exercise any of these rights, please contact us by email: [email protected]

8. Cookies

We use cookies to improve your experience:

• Essential cookies: to operate the platform correctly.
• Performance cookies: to analyze and improve use of the platform.
• Preference cookies: to remember your preferred settings.

You can manage cookies from your browser settings.

9. Children's Privacy

Our services are not directed at persons under 18 years of age. We do not knowingly collect personal data from children. If you learn that a child has provided us with personal data, please contact us so we can delete it.

10. International Transfers and Service Providers

We use service providers to operate the platform, and some of them process data outside the Kingdom. In each case we limit this to the minimum data needed to perform the service:

• Infrastructure and attack-protection services: network addresses and request data
• Email service: email address and message content (confirmations, password recovery)
• SMS services: mobile number and message text
• Push notification service: device identifier and notification text

We are committed to applying the safeguards required by the Saudi Personal Data Protection Law and its Implementing Regulations for any transfer outside the Kingdom.

11. Legal Basis for Processing

We process your data on a clear legal basis for each purpose:

• Performance of a contract: creating the account and managing properties, contracts and payments
• Legal obligation: keeping accounting and tax records
• Legitimate interest: protecting the platform from unauthorized use and improving the service
• Consent: marketing messages, if any, which can be withdrawn at any time

When a real-estate office enters the data of a tenant or owner, the office is the controller of that data and Amlaki acts as a processor on its behalf. The office is responsible for informing the data subjects and obtaining the necessary legal basis before entering the data.

12. Filing a Complaint

If you believe that the processing of your data violates the Personal Data Protection Law, please contact us first using the contact details below and we will address your request. You also have the right to file a complaint with the competent authority supervising the application of the law in the Kingdom (the Saudi Data & AI Authority — SDAIA).

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by email or through a notice on the platform. We recommend reviewing this policy periodically.

14. Contact Us

If you have any questions or inquiries about this privacy policy, please contact us:

• Email: [email protected]
• Contact us page