تخطي للذهاب إلى المحتوى

PRIVACY POLICY

Effective Date: 1/10/2025  Website: erp.atwaaj.sa Owned by: Atwaaj

1. Introduction

This Privacy Policy explains how Atwaaj (referred to as "we," "us," or "our") collects, uses, shares, and protects information in connection with your use of our Enterprise Resource Planning (ERP) platform, accessible at erp.atwaaj.sa (the "Platform").

As a B2B Software as a Service (SaaS) provider, we treat data in two distinct categories: Platform Data and User Data. Your use of the Platform is governed by this Privacy Policy and the separate Service Agreement executed between Atwaaj and your organization (our Client).

2. Definitions

TermDescription
Platform DataAll data uploaded, submitted, stored, or processed by our Client and its Authorized Users within the ERP Platform. This includes customer lists, financial records, inventory data, HR files, etc.
User DataPersonal Information related to the individual employees or agents (Authorized Users) of our Client who access and use the Platform.
Client/ControllerYour organization, which determines the purposes and means of processing Platform Data. The Client is the Data Controller of the Platform Data.
Atwaaj/ProcessorAtwaaj, which processes Platform Data only on the Client's behalf and instructions. Atwaaj is the Data Processor of the Platform Data.

3. Collection and Use of User Data (The Authorized User)

We collect User Data solely to provide, maintain, and secure the Platform for the Client.

Category of User DataHow We Collect ItPurpose of Use
Registration/Login DataDirectly from the Authorized User or the Client during account creation.To create, manage, and verify the user's identity for secure access to the Platform.
Contact DataDirectly from the Authorized User or the Client.To communicate with the Authorized User regarding service announcements, security alerts, and technical support.
Usage/Technical DataAutomatically via server logs, cookies, and analytics tools as the user interacts with the Platform.To monitor system performance, diagnose technical issues, analyze usage patterns to improve the Platform, and ensure system security.

4. Handling of Platform Data (Client's Business Data)

The Platform Data is owned and controlled entirely by our Client. Atwaaj will treat all Platform Data as confidential and will only process it according to the Client's instructions as detailed in the Service Agreement.

  • Ownership and Control: The Client retains full ownership and control over the Platform Data.

  • Purpose of Processing: We process Platform Data only to provide the ERP services requested by the Client (e.g., generating reports, processing payroll, tracking inventory).

  • No Sharing or Selling: We will not share, sell, rent, or trade the Platform Data with any third parties except as necessary to fulfill our obligations under the Service Agreement or as required by law.

  • Access: Access to Platform Data by Atwaaj personnel is strictly limited to authorized employees who need access for technical support, maintenance, or as legally required.

5. Data Sharing and Disclosure

We may share User Data or Platform Data in the following limited circumstances:

  • With Client's Consent: If the Client explicitly instructs us to share Platform Data with a third-party application or service provider integrated with the Platform.

  • Service Providers (Sub-Processors): We engage trusted third-party service providers (e.g., cloud hosting, database management) to assist in providing the Platform. These providers are strictly bound by contractual obligations to protect the data and use it only for the purposes for which we disclose it.

  • Legal Compliance: We may disclose data if required by law, legal process, or governmental request (e.g., court order).

  • Protection of Rights: To enforce our Service Agreement, protect our rights, or investigate fraud or security issues.

6. Data Security and Retention

  • Security Measures: We implement industry-standard administrative, technical, and physical safeguards (such as encryption for data in transit and at rest, Multi-Factor Authentication (MFA), and regular security audits) designed to protect all data from loss, misuse, and unauthorized access or disclosure.

  • Retention: We retain User Data for as long as the Authorized User's account is active and for a reasonable period thereafter to comply with our legal obligations. Platform Data retention and deletion are primarily governed by the terms of the Service Agreement with the Client.

7. User Rights

Because we act as the Data Processor for Platform Data, most user rights (e.g., access, correction, deletion) must be exercised by the Authorized User through their employer (the Client/Controller).

Authorized Users may contact their company administrator to:

  • Access, review, or correct personal information within the Platform.

  • Request the deletion of their Platform account data.

8. International Data Transfers

The Platform is hosted on servers located in [Specify Hosting Location, e.g., Saudi Arabia, or a global cloud provider's regional data center]. By accessing or using the Platform, you understand and consent to the storage and processing of your data in this location.

9. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify our clients of any material changes by posting the new policy on this page and updating the "Effective Date" at the top of the policy. We encourage you to review this policy periodically.

10. Contact Information

For questions or concerns regarding this Privacy Policy, please contact us:

Atwaaj

Website: erp.atwaaj.sa

Email:info@atwaaj.sa

Address: riyadh, Saudi Arabia