NittaqNittaq · Legal
Effective date and version:
Nittaq is a Saudi Arabia-based database platform. This policy explains how the Nittaq platform team handles personal information in account applications, support, custom-plan enquiries and service administration. Contact our team using the email below for privacy questions or to exercise your rights. Customer database content is handled to deliver the agreed service under the customer’s instructions; additional data-processing arrangements must be agreed for that service.
An account application collects your name, email, phone number, country, city, password and any plan or project details you provide. Support requests collect your contact details, subject and message. Custom-plan enquiries collect your contact and organisation details, location and capacity requirements. Forms identify required and optional fields; without required information we may be unable to process your request. We record a request reference, submission time, language and the version of the terms and privacy notice you accepted.
We receive information directly through our forms and communications. We use it to review applications, verify contact details, understand requirements, respond to support, prepare proposals and administer approved accounts. Applications are reviewed by people. For applications and enquiries we request your consent to the described handling; you may withdraw it by contacting us. For an active service, processing may also be necessary to perform our agreement or meet legal obligations. Security processing based on a lawful legitimate interest requires appropriate assessment and safeguards. We do not treat an application as consent to promotional messages.
Application passwords are converted into a secure, one-way password hash and stored with the application in private storage. Your password and its hash are excluded from notification emails, routine logs and submission responses. Request records are held in private Vercel Blob storage; approved account records use the platform’s account database. Access remains subject to approval. We use access restrictions and appropriate technical safeguards, and assess security incidents and notification duties under applicable law. Use a unique password and avoid including credentials or sensitive records in messages.
Request details, excluding passwords and password hashes, are sent to the Nittaq team at f.aldawood@nittaq.com for manual handling. Authorised team members and providers supporting hosting, secure storage and email delivery may process information for those purposes. Our website and request storage use Vercel; request emails use Resend and the receiving mailbox provider. We do not sell your personal information. Disclosure to an authority occurs only where legally required or otherwise lawfully permitted with applicable safeguards.
We are based in Saudi Arabia and our primary hosting direction is the Middle East. Website hosting, storage, email delivery and mailbox services can involve processing outside Saudi Arabia, depending on provider configuration. Submitting a request does not promise Saudi-only data residency. Cross-border processing must meet applicable Saudi data-transfer requirements; consent alone does not replace required safeguards. Contact us before submitting information that requires a particular residency arrangement.
Request records and correspondence are retained while a request is under review and as necessary to resolve it, administer an approved relationship or meet an applicable legal requirement. The same principles apply to our mailbox and service-provider records. We review retention manually and remove information when no longer necessary, subject to lawful retention duties; submission records do not have a fixed automatic expiry. You may request withdrawal and deletion using your reference number. We will explain any information that must remain and why. Customer database and backup retention follows the agreed service arrangements.
Under applicable Saudi personal data protection rules, you may request information about processing, access to your personal data, a readable copy, corrections and deletion where the conditions for deletion are met. You may withdraw consent without affecting prior lawful processing; this may prevent us from continuing a request that depends on that information. Contact us with your reference number where available. We may verify your identity using proportionate information. We handle requests within applicable legal time limits and explain lawful restrictions. You may also complain to the Saudi Data and AI Authority through its official personal data protection channels.
The platform uses necessary session and security cookies when you use account functions; the interface may also remember language or display preferences. Optional tracking requires an appropriate notice and choice before it is introduced. We publish the policy version and effective date and provide notice of material changes where required. New purposes that require consent will be presented separately.
For questions, account requests or privacy matters, contact our team: f.aldawood@nittaq.com