Privacy Policy

We collect information you provide when you request a demo, create an account, use the Compliors platform, or contact support. This may include:

• Identity and contact details (name, email, phone, job title, company name)
• Account and billing information needed to provide the service
• Business and technical data processed in compliance workflows, such as invoice metadata, integration mappings, ZATCA-related payloads, certificate identifiers, and ERP references — limited to what is necessary to operate the product you use

We also collect technical and usage information (for example logs, device/browser data, IP address, and product interaction events) to operate, secure, troubleshoot, and improve the platform.

We use information to:

• Provide and operate Compliors services (ZATCA e-invoicing automation, Oracle Fusion integration, EGS configuration, certificate lifecycle management, and related features)
• Authenticate users, manage accounts, and enforce security controls
• Respond to inquiries, support requests, and contractual obligations
• Monitor reliability, detect abuse, and comply with applicable laws and regulatory expectations in Saudi Arabia where relevant to our services
• Analyze aggregated or de-identified usage to improve the product; we do not sell your personal information

Where required, we obtain consent before sending marketing communications about our compliance automation platform. You can opt out of marketing as described in communications or by contacting us.

We implement appropriate technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction, including access controls, encryption in transit where applicable, and least-privilege access for personnel who support the service.

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your credentials and for promptly notifying us of suspected unauthorized access.

We may share information with trusted service providers who perform services on our behalf (for example cloud hosting, logging, monitoring, email delivery, and customer support tooling). They may only use data as instructed by us and subject to appropriate confidentiality and security obligations.

Where integrations are enabled (such as Oracle Fusion or other systems you connect), data flows according to your configuration and authorization. You control which environments and data scopes are connected.

Your information may be processed in Saudi Arabia and in other countries where our subprocessors operate. When personal data is transferred across borders, we take steps designed to ensure appropriate protection consistent with applicable law and our agreements with customers.

We use cookies and similar technologies on our website where necessary for security, session management, preferences, and to understand aggregated traffic patterns. You can control cookies through your browser settings; some features may not work correctly if cookies are disabled.

We may use analytics to measure site performance and campaign effectiveness in aggregate form. We send transactional and service-related messages (such as security alerts, onboarding, and billing notices) as needed to operate your account.

Depending on applicable law (including Saudi Arabia’s Personal Data Protection Law where it applies to our processing), you may have rights to access, correct, or delete certain personal data, or to object to or restrict certain processing. To exercise rights, contact us using the details on our website (for example via the contact page). We will respond in line with legal requirements.

We retain information for as long as needed to provide the services, meet legal and accounting obligations, resolve disputes, and enforce agreements. Retention periods vary by data category.

We may update this Privacy Policy from time to time. The effective date at the top will change when we publish material updates. Continued use of the platform after updates constitutes acceptance where permitted by law.