Privacy Policy

1. Introduction

At AlMustashar, we take your privacy seriously. AlMustashar is a service provided by Sa7ab LLC, a technology company registered in the United States of America. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our services through our website almustashar.io.

By using AlMustashar, you consent to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and the security of your data.

2. Information We Collect

2.1 Information You Provide Directly

• Account Information: Name, email address, password
• Conversation Content: Questions and messages you send to AlMustashar (for subscribers only)
• Documents: Any files you upload for review or analysis (for paid plans)
• Payment Information: Processed securely through Stripe (via RevenueCat); we do not store your credit card information

2.2 Information We Collect Automatically

• Usage Data: How you interact with the service, number of messages, features used, account balance
• Device Information: Device type, operating system, browser, IP address
• Cookies: To improve user experience and analyze performance

3. How We Use Your Information

We use the information we collect for the following purposes:

• Providing and improving our services
• Processing your inquiries and providing AI-powered responses
• Managing your account, subscription, and balance
• Processing payments and invoicing (in SAR)
• Sending service updates and important notifications
• Analyzing usage to improve the service
• Preventing fraud and protecting platform security
• Complying with legal obligations

4. Information Sharing

We do not sell or rent your personal information to third parties. We may share your information only in the following cases:

4.1 Service Providers

• Google Gemini AI: To process your inquiries and generate responses related to Saudi Labor Law
• Stripe: To process payments securely
• RevenueCat: To manage subscriptions and credit packs
• Hosting Services: To store data and operate the service

4.2 Legal Obligations

We may disclose your information if required by the laws of the Kingdom of Saudi Arabia or in response to valid legal requests from public authorities.

5. Data Security

We use advanced security measures to protect your information:

• SSL/TLS encryption for all data transfers
• Encryption of stored data
• Secure account authentication
• Continuous security monitoring
• Regular data backups
• Limited employee access to personal data
• Payment processing through PCI DSS-compliant Stripe

6. Data Retention

We retain your personal information as long as your account is active or as needed to provide services:

• Conversation History: Saved for subscribers only and deleted upon subscription cancellation or user request
• Free Plan: Conversations are not saved
• Credit Packs: Your balance is retained as long as the account is active

When you delete your account:

• Your account information will be deleted within 30 days
• Your conversation history will be completely deleted
• Financial data will be retained in accordance with Saudi legal requirements

7. Your Rights

You have the following rights regarding your personal information:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your personal data and conversation history
• Portability: Request transfer of your data to another service
• Objection: Object to certain processing of your data
• Withdraw Consent: Withdraw your consent at any time

To exercise any of these rights, please contact us at [email protected]

8. Cookies

We use cookies and similar technologies to:

• Maintain your session and login information
• Track your balance and service usage
• Understand how you use the service
• Improve performance and personalize the experience
• Analyze usage and trends

You can control cookies through your browser settings, but disabling them may affect the functionality of the service.

9. Children's Privacy

Our services are not directed to persons under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without appropriate parental consent, we will take steps to delete that information immediately.

10. International Data Transfer

Your information may be transferred to and processed in countries outside the Kingdom of Saudi Arabia (such as Google's AI servers). We take steps to ensure your data is adequately protected in accordance with this policy and applicable data protection laws, regardless of the processing location.

11. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We recommend reviewing this page periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us: