This policy explains how Datara collects, uses, and protects data when you use our website at datara.sa or the business platform at app.datara.sa. Datara is an integrated business platform (ERP) delivered to companies as a cloud service (SaaS).

1) Our role in processing data

Datara handles two kinds of data:

• Account data: data about subscribing companies and their users (name, email, phone, role) — here we act as a data controller.
• Customer data (tenant content): the data each company enters into its own workspace (orders, customers, employees, conversations, invoices) — here we act as a processor on behalf of the subscribing company, which is the controller of its customers' data.

2) Data we collect

• Registration & account data: company and user name, email, phone, and user role.
• Usage data: sign-in and activity logs within the platform for security and operations.
• Tenant content: the orders, customers, employees, conversations, invoices, and integrations a company enters.
• Basic technical data: IP address, browser type, and request timestamps needed to operate and protect the service.

3) How we use data

• Operating the platform and providing its features to the subscribing company and its users.
• Authentication, permission management, and protecting accounts from unauthorized access.
• Technical support and communication about the account, invoices, and subscription.
• Improving the platform's performance and security.

4) Data isolation between companies

Each subscribing company's data is stored in an independent logical workspace and is not accessible to any other company. Access is controlled by account- and role-level permissions, and server-side security rules prevent cross-tenant access.

5) Data sharing

We do not sell or rent your data. We share only the minimum necessary with trusted providers solely to operate the platform, such as:

• Google Firebase / Google Cloud — to host the platform, store data, and handle authentication securely.
• Meta / WhatsApp — to deliver messages via the WhatsApp Business platform (when a company enables this feature).
• Salla & Wafeq — store and invoicing integrations (when a company enables them).

These providers process data only under their policies and for the service's purposes.

6) Data retention

We retain account data and content for the duration of the subscription and as required by law. Upon termination, a company's data is deleted or anonymized within a reasonable period unless retention is legally required.

7) Data protection

We apply technical and organizational safeguards including encryption in transit, role-based access control, server-side security rules, and hosting on Google's secure cloud infrastructure.

8) Your rights

A subscribing company may request access to, correction, export, or deletion of its data. End customers of a company should direct their requests to that company as the controller of their data, and Datara will assist in fulfilling them.

9) Data deletion

To request deletion of your account or company data, email us at heid@datara.sa from the email associated with the account. We will process your request within a reasonable period unless retention is legally required.

10) Contact us

For any question about this policy: heid@datara.sa — Website: datara.sa