Privacy policy

Progrid Arabia (بروجريد العربية) ("Progrid", "we") is the controller of the personal data described in this policy. We follow the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its implementing regulations. Questions and requests: support@progrid.sa.

What we collect

Account data. Name, email address, password (stored as a hash), phone number if you add one, company name, tax number and address for invoicing, and the identity or business documents you provide for verification.

Billing data. Invoices, payments and credit history. Card payments are processed by our payment provider; we receive a reference, the last four digits and the card brand, never the full number.

Usage and technical data. API requests, console actions, IP addresses, browser and device information, and an audit log of who did what on your account, including API tokens and the AI tools you connect. Server metrics (CPU, memory, disk, network) are collected to run the platform and show you graphs.

Support data. Tickets, messages and the details you give us to solve a problem.

Content you store. Whatever you put on your servers, volumes, databases and buckets is yours. We do not read it, index it or use it for any purpose other than storing and serving it, except as needed to respond to your support request or as required by law.

Why we process it

• To provide the Services and keep them secure: account management, metering, invoicing, fraud and abuse prevention, incident response. Legal basis: performance of our contract with you and our legitimate interest in running a secure platform.
• To meet legal obligations: ZATCA e-invoicing, tax and accounting records, responding to lawful requests from competent authorities.
• To communicate with you: service notices, invoices, security alerts, and answers to your requests. Marketing email only with your consent, and you can withdraw it from any message.
• To improve the Services, using aggregated and de-identified data.

We do not sell personal data and we do not use it for automated decisions with legal effect on you.

Who we share it with

• Payment processing: our payment provider, for card and wallet payments.
• E-invoicing: the Zakat, Tax and Customs Authority, as the law requires.
• Infrastructure and communication providers that host parts of the platform or deliver email and SMS, under contracts that bind them to protect the data.
• Authorities, when a lawful request or court order requires it. We notify you unless the law prevents it.
• A successor, if Progrid is acquired or merges, under the same protections.

Where data leaves the Kingdom, we do so only as permitted by the PDPL, with appropriate safeguards.

How long we keep it

Account data for as long as your account exists and for 5 years after closure to meet accounting and tax rules. Audit logs for 1 year. Server metrics for 30 days at full resolution. Support tickets for 3 years. Content you store is deleted when you delete the resource and, at the latest, 30 days after your account is closed, except for backups which expire on their normal schedule.

Your rights

Under the PDPL you can ask us to tell you what personal data we hold about you, to correct it, to delete it where we have no legal duty to keep it, to give you a copy in a usable format, and to stop processing it in certain cases. Send requests to support@progrid.sa from the email on your account. We answer within 30 days. You can also complain to the competent authority for personal data protection in the Kingdom.

Security

Data is encrypted in transit. Passwords are hashed. Access to production systems is limited to named engineers with two step sign in and is logged. We notify you and, where required, the authority of a personal data breach without undue delay.

Cookies

See the Cookie policy.

Changes

We update this policy when our processing changes. Material changes are announced by email and on this page before they take effect.