Privacy policy

What this policy covers

This policy covers this marketing website, and the usage and advertising measurement in the alFatora platform described below. The rest of the alFatora platform and the Connect customer portal are governed by the agreement signed with the customer.

This website has no sign-in, no accounts and no database. We do not ask for tax numbers, invoice data or customer records through it — and we would rather not receive them this way.

What we collect

• What you send us: the start-now form gives us your name, email address, phone number, company name and the monthly document volume you enter. A demo request gives us whatever your email contains. If you message us on WhatsApp we receive your phone number, your profile name there, and what you write. If you leave your address on the National Day offer form we receive the address alone, and keep it on a mailing list to send you that offer and our e-invoicing updates.
• What your browser sends: our hosting provider records ordinary server log data — IP address, browser and device type, the page requested and the time. This is needed to serve pages and to defend the site against abuse.
• How our websites and the platform are used: we record events about how they are used — pages viewed, and steps such as requesting a demo, starting a request, opening a chat with us, creating an account, or placing and paying for a subscription order — to understand what works and to improve the experience. Before you answer the banner, and inside the platform, this is a count with no measurement cookie and no identifier stored on your device. In the platform these events are tied to a coded identifier of your account, never to your name or email.
• What we collect on the website if you accept: the above, plus pages viewed across the visit, an approximate location derived from a truncated IP address, device type and referral source, tied together by a measurement cookie so that a repeat visit is distinguishable from a new one.

Cookies and local storage

The list is short because what we use is short:

• alfatora-locale — a cookie remembering whether you chose Arabic or English. One year, and set only when you pick a language explicitly.
• alfatora-consent-v1 — your answer to the cookie banner, kept in your browser’s local storage and never sent to us.
• Measurement cookies — created only after you accept. If you decline or ignore the banner, none is written or read, and no identifier is assigned to you.
• Advertising measurement cookies — on the Saudi site (saudi.alfatora.ai) only, set by advertising partners when you visit, without waiting for your answer to the banner; deleted, and the measurement stopped, if you decline.
• alf_gclid — on the Saudi site only, and only if you arrived from an ad. A cookie written by us, holding the click identifier the ad added to the link and nothing else. It lasts 90 days, and is deleted if you decline.
• alf_src — a cookie written by us and read only by the alFatora platform, never by an advertising partner: where you came to us from (the campaign tags in the link, the kind of ad click but not its identifier, the name of the site that referred you but not its page, the first page you saw, and the day). Nothing in it identifies you. If you create an account or order a subscription, we keep it with your account and your order, to know which channel brought you. It lasts 90 days, and is deleted if you decline.

Advertising and how we measure it

We advertise on online platforms and measure whether those ads lead to visits, sign-ups and subscriptions, so that we spend on what works.

On the Saudi site, advertising partners’ measurement scripts record that a page was visited and connect the visit to the ad before it, using a cookie. They run without waiting for your answer to the banner; if you decline, they stop and are not loaded on your later visits. What reaches each partner through them: the page address, your IP address, device and browser type, the cookie identifier, and the click identifier if you arrived from an ad. The website never learns your name, email or phone number, so it cannot send them.

In the alFatora platform, the registration, sign-in and subscription pages carry a measurement tag that records the page view and, on the subscription pages, that an order was placed or paid, with its reference, plan and amount. It runs with advertising and analytics storage denied: it writes no cookie and reads none.

When you create an account, first order a subscription, or pay for it, our server may tell an advertising partner that it happened — a sign-up, an order or a payment, and its amount — so that the partner can connect it to its ads. We do this only for a partner whose cookie or click identifier your browser still holds from your visit to the Saudi site. It is identified by that cookie or click identifier and, for some partners, by a hashed copy of your email address from which the address cannot be read. We never send your name, phone number, tax number or invoice data. If you declined, or never visited the Saudi site, nothing about you is sent.

Where a partner supports it, ad personalisation stays switched off permanently.

We do not sell personal data, and we do not share it with data brokers.

Why we use it

• To answer your enquiry or request.
• To send offers and e-invoicing updates to people who asked for them.
• To learn which pages and steps are useful and improve the content and the experience accordingly.
• To measure and improve our advertising.
• To keep the site available and secure and to prevent abuse.
• To meet legal obligations where they apply.

The basis we rely on

• Your consent — for measurement cookies on the website and for the mailing list, and you can withdraw it at any time.
• Steps taken at your request — for replying to the form or to a demo email.
• Legitimate interests — for the server logs needed to run and secure the site, for usage counts that store nothing on your device, and for measuring our advertising (which you can refuse on the banner).
• Legal obligation — where the law requires us to keep or disclose something.

Who else sees it

We use service providers who process data on our behalf and on our instructions:

• Hosting and infrastructure providers — running the website and the platform, and their server logs.
• Email delivery providers — delivering the start-now form to our mailbox, and holding the mailing list and sending its messages.
• Analytics providers — measuring how the website and the platform are used, as set out under “What we collect”.
• Advertising platforms we advertise on — measuring our advertising, as set out under “Advertising and how we measure it”.
• Messaging apps — only if you choose to message us there. The conversation happens inside that app and is governed by its privacy policy, not this one.

Transfers outside your country

Data may be processed on servers outside your country of residence, because the providers above operate in several locations. We rely on the contractual safeguards those providers offer, and — where local law requires a transfer condition — on your consent or on the necessity of the service you asked for.

How long we keep it

• Enquiry correspondence: for as long as the conversation is live, and no more than twenty-four months afterwards, unless you ask us to delete it sooner.
• Server logs: a short period at the hosting provider, under its operational policy.
• Analytics data: at most fourteen months.
• The mailing list: your address stays on it until you unsubscribe — every message carries the link — or ask us to remove it.

Keeping it safe

The site is served over HTTPS throughout, and holds no visitor database: form submissions go straight to the sales mailbox and are not retained on the server. Access to that mailbox is limited to the people whose work requires it.

No website can promise absolute security, and this one does not.

Your rights

Subject to the law that applies to you, you may:

• Know what data we hold about you and obtain a copy of it.
• Have inaccurate data corrected and incomplete data completed.
• Ask us to delete your data.
• Withdraw your consent to measurement cookies at any time — clearing this site’s browser storage brings the banner back.
• Object to a particular processing, or ask us to restrict it.
• Complain to the competent supervisory authority in your country.

Children

This website is aimed at businesses and professionals, not at children. We do not knowingly collect data from anyone under eighteen, and will delete such data when we become aware of it.

Country-specific rules

The following applies in addition to everything above. Where local law gives you more than this policy does, local law prevails.

Changes to this policy

We may update this policy; the date at the top of the page shows when it last changed. If a change materially affects how analytics is used, the consent banner is shown again so that you can answer afresh.

Contact

For any privacy question or request: [email protected]. alFatora is a product of dataBrain Lab.