Privacy policy

At Fatoorah360, we respect your privacy and are committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use the Fatoorah360 website, platform, applications, integrations, APIs, and related services (collectively, the "Services").

By using Fatoorah360, you acknowledge that you have read and understood this Privacy Policy.

1. Who we are

Fatoorah360 is a business management platform operating in the Kingdom of Saudi Arabia.

Our Services help businesses manage activities such as invoicing, accounting, inventory, sales, purchases, expenses, payroll, reporting, integrations, and other business operations.

For questions about this Privacy Policy or our handling of personal data, please contact us using the information provided in the Contact Us section.

2. Scope of this privacy policy

This Privacy Policy applies to personal data collected through:

• The Fatoorah360 website.
• Fatoorah360 applications and platform.
• Customer accounts.
• Customer support channels.
• Integrations and APIs.
• Communications between you and Fatoorah360.
• Other services or features that link to this Privacy Policy.

It does not necessarily apply to third-party websites, applications, or services that are connected to Fatoorah360. Those services may have their own privacy policies.

3. Personal data we collect

Depending on how you use Fatoorah360, we may collect different categories of personal data.

Account Information

When you create an account, we may collect:

• Full name
• Business name
• Email address
• Phone number
• Username
• Login credentials
• Business address
• Country or location
• Account and subscription information

​

Business information:

Depending on the features you use, you may provide:

• Company registration information
• Tax and VAT information
• ZATCA-related information
• Business addresses
• Financial information
• Invoice information
• Product and inventory information
• Supplier information
• Customer information
• Employee information

​

Transaction and financial information:

When using financial features, we may process information associated with:

• Invoices
• Credit notes
• Debit notes
• Bills
• Expenses
• Payments
• Purchases
• Sales
• Accounting records
• Payroll information
• Financial reports

Fatoorah360 does not necessarily collect complete payment-card information where payments are processed through third-party payment providers. The applicable payment provider's privacy policy may apply to payment information processed by that provider.

​

Customer and employee data:

If you use Fatoorah360 to manage customers, suppliers, employees, or other individuals, you may provide information such as:

• Names
• Email addresses
• Phone numbers
• Addresses
• Identification or business information where required
• Employment-related information
• Payment or billing information
• Other information you choose to store in the platform

You are responsible for ensuring that you have the appropriate legal basis and permissions to provide this information to Fatoorah360.

​

Technical information:

We may automatically collect certain technical information, including:

• IP address
• Browser type
• Device type
• Operating system
• Approximate location
• Login information
• Usage activity
• Pages or features accessed
• Error logs
• Performance information
• Authentication and security information

​

Communications:

If you contact us, we may retain information from your communication, including emails, support requests, attachments, and other information you choose to provide.

4. How we use personal data

We may use personal data to:

• Create and manage user accounts.
• Provide and operate the Fatoorah360 Services.
• Process invoices, transactions, and business records.
• Provide accounting, inventory, payroll, reporting, and other requested functionality.
• Facilitate integrations and API connections.
• Support ZATCA-related e-invoicing functionality.
• Process subscriptions and payments.
• Provide customer support.
• Communicate with customers about their accounts and Services.
• Detect, prevent, and investigate fraud, abuse, and security incidents.
• Maintain and improve the performance and reliability of the Services.
• Develop and improve products and features.
• Monitor platform usage and troubleshoot technical issues.
• Comply with applicable laws and legal obligations.
• Protect the rights, property, and security of Fatoorah360, our customers, and others.

5. Legal basis for processing

Where applicable, we process personal data in accordance with the legal bases permitted under applicable Saudi data protection laws and regulations.

Depending on the circumstances, processing may be necessary to:

• Perform a contract with you.
• Take steps at your request before entering into a contract.
• Comply with a legal obligation.
• Protect legitimate interests where permitted by law.
• Obtain consent where consent is required.
• Protect vital interests where applicable.

Where processing relies on consent, you may have the right to withdraw that consent subject to applicable legal requirements and limitations.

6. Customer responsibilities

When you use Fatoorah360 to store or process personal data belonging to your customers, employees, suppliers, or other individuals, you remain responsible for your use of that information.

You should:

• Collect personal data lawfully.
• Provide appropriate notices to individuals where required.
• Obtain consent where legally required.
• Use personal data only for appropriate and lawful purposes.
• Avoid uploading unnecessary or excessive personal information.
• Maintain appropriate access controls for your users.
• Comply with applicable Saudi data protection requirements.

Depending on the nature of the Services and the applicable legal framework, Fatoorah360 may process Customer Data on your behalf.

7. Sharing personal data

We may share personal data where necessary to provide and operate the Services.

This may include sharing information with:

​

Service providers:

We may use trusted third-party providers for services such as:

• Cloud hosting
• Data storage
• Payment processing
• Email delivery
• Customer support
• Security
• Analytics
• Authentication
• Infrastructure
• Communications

These providers may access personal data only as necessary to provide their services and subject to appropriate contractual or legal safeguards

.

Integrations:

If you choose to connect Fatoorah360 to a third-party application or service, information may be shared with that service according to your instructions and the integration's functionality.

You should review the third party's privacy policy before enabling an integration.

​

Legal and regulatory authorities:

We may disclose information when required or permitted by applicable law, regulation, court order, government request, or legal process.

We may also disclose information where reasonably necessary to detect or prevent fraud, security threats, illegal activity, or harm to our users or others.

8. ZATCA and regulatory compliance

Certain Fatoorah360 features may require the processing or transmission of business and tax information to support electronic invoicing and applicable regulatory requirements.

Where required, information may be processed or shared with relevant government or regulatory authorities in accordance with applicable laws and regulations.

You are responsible for ensuring that the information you provide to Fatoorah360 is accurate and complete.

9. International data transfers

Fatoorah360 primarily operates in Saudi Arabia. However, certain service providers or technical infrastructure used to provide the Services may process or store information outside the Kingdom of Saudi Arabia.

Where personal data is transferred outside Saudi Arabia, Fatoorah360 will implement applicable legal and regulatory requirements and appropriate safeguards for such transfers.

The locations and providers involved may change as our infrastructure and service providers evolve.

10. Data retention

We retain personal data for as long as reasonably necessary to:

• Provide the Services.
• Maintain your account.
• Fulfill contractual obligations.
• Comply with legal and regulatory requirements.
• Resolve disputes.
• Enforce agreements.
• Maintain security and business records.

When personal data is no longer required, we may delete, anonymize, or securely dispose of it in accordance with applicable law and our data-retention practices.

Certain business, financial, tax, or transaction records may need to be retained for longer periods because of legal or regulatory requirements.

11. Data security

We use reasonable technical and organizational measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

Security measures may include:

• Access controls
• Authentication mechanisms
• Encryption where appropriate
• Monitoring and logging
• Secure infrastructure
• Backup and recovery procedures
• Security testing and monitoring

However, no internet-based system can guarantee absolute security.

You are also responsible for protecting your account credentials and limiting access to authorized users.

12. Cookies and similar technologies

Fatoorah360 may use cookies and similar technologies to:

• Keep users signed in.
• Maintain session functionality.
• Remember preferences.
• Improve website and platform performance.
• Understand how users interact with our Services.
• Detect security issues.
• Analyze usage and improve our Services.

Where required, we will obtain appropriate consent before using non-essential cookies or similar technologies.

You may be able to control cookies through your browser settings.

13. Marketing communications

Where permitted by applicable law, we may send information about product updates, new features, services, events, or offers.

You may opt out of marketing communications by using the unsubscribe mechanism included in the communication or by contacting us.

You may continue to receive essential service-related communications, such as security alerts, account notifications, billing notices, and important changes to the Services.

14. Your privacy rights

Subject to applicable Saudi laws and regulations, you may have rights relating to your personal data, including rights to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion where legally applicable.
• Request restriction of certain processing where applicable.
• Withdraw consent where processing is based on consent.
• Request information about how your personal data is processed.
• Exercise other rights provided under applicable data protection laws.

Certain rights may be subject to legal exceptions, contractual requirements, or other applicable limitations.

To exercise a privacy right, contact us using the details provided below.

We may need to verify your identity before processing your request.

15. Children's privacy

Fatoorah360 is designed for businesses and is not intended for children.

We do not knowingly collect personal data from children except where permitted or required by applicable law.

If you believe that a child has provided personal data to us without appropriate authorization, please contact us.

16. Third-party services

Fatoorah360 may contain links to or integrations with third-party services.

We are not responsible for the privacy practices, content, security, or policies of third-party services.

Your use of a third-party service is governed by that provider's terms and privacy policy.

17. Data breaches and security incidents

If Fatoorah360 becomes aware of a personal data breach or security incident affecting personal data, we will assess and respond to the incident in accordance with applicable laws and regulatory requirements.

Where notification is legally required, we will notify the relevant parties or authorities within the applicable timeframe.

18. Changes to this privacy policy

We may update this Privacy Policy from time to time to reflect changes to our Services, business practices, legal requirements, or regulatory obligations.

When we make material changes, we may provide notice through the Fatoorah360 platform, website, email, or other appropriate channels.

The updated Privacy Policy will include a revised Last Updated date.

20. Governing framework

This Privacy Policy is intended to operate in accordance with applicable laws and regulations of the Kingdom of Saudi Arabia, including applicable personal data protection and privacy requirements.

Where mandatory provisions of applicable law differ from this Privacy Policy, the applicable legal requirements will prevail.