Privacy Policy

1. What we collect and why

Website visitors: a cookieless measurement tool provides aggregate page statistics without personal identifiers, and a tag manager is used to manage measurement tags. The tags active today do not build a personal profile of you; if tracking tags that rely on cookies are enabled, we will ask for your consent first and update this policy.

Demo bookings: when you book a demo we collect — through our scheduling provider — your name, email, mobile number, business name, sector, approximate call volume, and any message you include, for the sole purpose of contacting you and preparing the demo.

Newsletter: when you subscribe to our newsletter we collect only your email address and preferred language, for the sole purpose of sending Saut Najdi updates and AI news. Your email is held in our own private store, is not shared with any third party, and you can unsubscribe at any time by emailing ai@sautnajdi.ai — we then delete it permanently.

Subscribed businesses and their customers: the platform processes call and text-conversation content (audio, transcripts, summaries), the customer records a business enters (names, contact numbers, preferences, bookings), and usage logs — to operate the AI answering and human-handoff service the business contracted for.

2. Where data is stored

Permanent platform storage is in the Gulf region (Doha) with a major global cloud provider, over private networking, with backups and point-in-time restore.

3. Processors and cross-border transfers

In line with the PDPL's cross-border transfer disclosure requirements, these are the categories of processor your data transits and where they process it:

• Realtime speech and AI providers (speech-to-text, language understanding, voice generation) — via global processing endpoints.

• The OCR service for knowledge-base documents — via a European processing endpoint.

• Our website hosting and cookieless analytics provider — a processor outside Saudi Arabia.

• Our demo scheduling provider — a processor outside Saudi Arabia.

• The CRM system receiving booking data — added to the list once selected.

The sub-processor list, with names and processing locations, is available on request and is attached to the data processing agreement on contracting. Subscribing businesses are notified before any change to it. To request it: ai@sautnajdi.ai.

4. Retention

Call recordings: retention follows the plan terms confirmed at activation: 90 days for Essential, 180 for Growth, 365 for Expansion, and by contract for Enterprise; automatically deleted when the agreed period after the call ends.

Transcripts, summaries and customer records: retained for the duration of the business's subscription to operate the service, then handled per the business's instructions at termination.

Demo-booking and contact data: retained as long as needed to follow up on your request, then for contracting if it proceeds.

5. Your rights

Under the PDPL you have the right to know your data is processed, to access it, to correct it, and to request its destruction within the law's limits. If you are a customer of a subscribed business, requests go to that business as the data controller, and the platform assists in fulfilling them.

For any request: ai@sautnajdi.ai.