Privacy Policy

Last updated: April 16, 2025

1. Introduction

DEEP.SA ("Company", "we", "us", or "our") is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at deep-sa.org, use our enterprise AI platform, or otherwise interact with us.

This Policy is issued in compliance with Saudi Arabia's Personal Data Protection Law (PDPL), enacted by Royal Decree M/19 dated 14 Muharram 1443 AH and its implementing regulations issued by the Saudi Data & AI Authority (SDAIA). By using our website or services, you consent to the practices described in this Policy.

If you have questions about this Policy or our data practices, please contact us at info@deep-sa.org.

2. Who We Are

DEEP.SA is an enterprise AI company headquartered in Saudi Arabia. Our registered address is:

For data protection inquiries, you may contact our Data Protection Officer at the address above, marking your correspondence "Attention: Data Protection."

3. Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

• Contact information: name, email address, phone number, job title, and company name when you complete forms on our website, request a demo, or contact us.
• Account information: credentials and profile data when you register for a DEEP.SA platform account.
• Communications: content of messages you send us, including support inquiries and survey responses.

3.2 Information Collected Automatically

• Usage data: pages visited, time spent, referring URLs, and navigation patterns on our website.
• Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Cookie data: information collected through cookies and similar technologies as described in our Cookie Policy.

3.3 Information from Third Parties

We may receive information about you from business partners, analytics providers, and publicly available sources for marketing and business development purposes, where permitted under applicable law.

4. How We Use Your Data

We process your personal data for the following purposes and on the following lawful bases:

Purpose	Lawful Basis
Providing and managing our services and platform	Contract performance
Responding to inquiries and customer support	Contract performance / Legitimate interests
Sending product updates, newsletters, and marketing communications	Consent (you may withdraw at any time)
Website analytics and improvement	Legitimate interests
Compliance with legal obligations	Legal obligation
Security, fraud prevention, and platform integrity	Legitimate interests / Legal obligation

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service providers: trusted third parties who assist in operating our website and services (cloud hosting, analytics, email services) under strict data processing agreements.
• Business partners: with your consent, in connection with co-marketing or joint service delivery activities.
• Legal and regulatory authorities: where required by Saudi law, court order, or regulatory request.
• Corporate transactions: in connection with a merger, acquisition, or sale of assets, where the recipient is bound by this Policy.

6. International Data Transfers

Your personal data is stored and processed primarily within Saudi Arabia. Where we transfer data outside the Kingdom, we ensure appropriate safeguards are in place in accordance with PDPL requirements for cross-border data transfers, including contractual protections and recipient country adequacy assessments.

7. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, to provide our services, comply with our legal obligations, resolve disputes, and enforce our agreements. When data is no longer needed, we securely delete or anonymize it. Specific retention periods vary by data category and are documented in our internal records management policy.

8. Your Rights Under the PDPL

Under Saudi Arabia's Personal Data Protection Law, you have the following rights with respect to your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to correction: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your personal data, subject to our legal and contractual obligations.
• Right to object: to object to processing based on legitimate interests or for marketing purposes.
• Right to withdraw consent: where processing is based on consent, to withdraw that consent at any time without affecting prior processing.
• Right to data portability: to receive your data in a structured, commonly used format where technically feasible.

To exercise any of these rights, please contact us at info@deep-sa.org. We will respond within the timeframe required by applicable law.

9. Security

We implement industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and employee training. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Cookies

We use cookies and similar tracking technologies on our website. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

11. Children's Privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at info@deep-sa.org.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Policy on this page with a revised "Last updated" date. We encourage you to review this Policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data protection rights have been infringed.