This policy explains how Datara collects, uses, and protects data when you use our website at datara.sa or the business platform at app.datara.sa. Datara is an integrated business platform (ERP) delivered to companies as a cloud service (SaaS).
1Our role in processing data
Datara handles two kinds of data:
- Account data: data about subscribing companies and their users (name, email, phone, role) — here we act as a data controller.
- Customer data (tenant content): the data each company enters into its own workspace (orders, customers, employees, conversations, invoices) — here we act as a processor on behalf of the subscribing company, which is the controller of its customers' data.
2Data we collect
- Registration & account data: company and user name, email, phone, and user role.
- Usage data: sign-in and activity logs within the platform for security and operations.
- Tenant content: the orders, customers, employees, conversations, and invoices a company enters.
- Basic technical data: IP address, browser type, and request timestamps needed to operate and protect the service.
3How we use data
- Operating the platform and providing its features to the subscribing company and its users.
- Authentication, permission management, and protecting accounts from unauthorized access.
- Technical support and communication about the account, invoices, and subscription.
- Improving the platform's performance and security.
4Data isolation between companies
Each subscribing company's data is stored in an independent logical workspace and is not accessible to any other company. Access is controlled by account- and role-level permissions, and server-side security rules prevent cross-tenant access.
5Data sharing
We do not sell or rent your data. We share only the minimum necessary with trusted providers solely to operate the platform, such as:
- Google Firebase / Google Cloud — to host the platform, store data, and handle authentication securely.
These providers process data only under their policies and for the service's purposes.
6Data retention
We retain account data and content for the duration of the subscription and as required by law. Upon termination, a company's data is deleted or anonymized within a reasonable period unless retention is legally required.
7Data protection
We apply technical and organizational safeguards including encryption in transit, role-based access control, server-side security rules, and hosting on Google's secure cloud infrastructure.
8Your rights
A subscribing company may request access to, correction, export, or deletion of its data. End customers of a company should direct their requests to that company as the controller of their data, and Datara will assist in fulfilling them.
9Data deletion
To request deletion of your account or company data, email us at hello@datara.sa from the email associated with the account. We will process your request within a reasonable period unless retention is legally required.
10Contact us
For any question about this policy: hello@datara.sa — Website: datara.sa