Privacy Policy
Version 2.4 · Last updated: 14 October 2026
Who we are
The General Manager and Developer is ABDULHAKIM AHMED FALLATAH, the owner of the Muqtarah platform, under freelance document No. FL-525221446, address: Madinah, Saudi Arabia. For privacy questions: support@muqtarah.app.
Data we collect
- Account data: name, email, phone number, and business name.
- Google sign-in data, if you choose it: the name, email, and profile photo in your account.
- Brand data: your logo, colors, fonts, and sender details.
- Work content: the documents, line items, and client details you enter yourself.
- Payment data: cards are processed entirely by the payment gateway and we never store your card number; we keep only the transaction reference and the last 4 digits to display back to you.
- Consent records: the version of the terms and policy you accepted, the time, your IP address, and your browser type.
- Technical data: your IP address and browser type when you use the platform, for security and to prevent abuse.
- Usage data: anonymous visit statistics and, once you agree, analytics events and session recordings to improve the product.
- Document visits: when your client opens a document link, we record that it was opened, the device type, where the visit came from as one word (such as WhatsApp or email) and the time spent, under an anonymous identifier that changes every day. We use no cookies for these statistics, we use the IP address only for a moment to make that identifier and do not keep it in this record, and only the document’s owner sees the results.
- Access to restricted documents: when a document’s owner limits its link to email addresses they invite, we store those addresses, send a one-time code to the email a visitor types if it is invited, and keep the confirmation (the email and its time) for the session, 30 days at most.
Required and optional data
Your name and email are required to create an account; without them we cannot provide the service. Other data, such as your logo, phone number, and VAT number, is optional.
Why we use it, and on what basis
| Purpose | Legal basis |
|---|---|
| Creating your account, running the service, creating documents, and the client portal | Performing our contract |
| Payments, billing, and keeping billing records | Performing our contract and legal obligations |
| Analytics with cookies and session recording | Your consent through the cookie banner |
| Anonymous visit statistics without cookies | Legitimate interest |
| Showing a document’s owner how the document was opened and used | Performing our contract and legitimate interest |
| Launch updates and marketing messages | Your explicit consent in your account settings |
| Security, fraud prevention, and abuse prevention | Legitimate interest |
Artificial intelligence
When you write a request, such as a project description or a change to a document, the app sends that request with the document data it needs to an AI model provider, which creates or updates the document and returns the result to you. We make no automated decisions with legal or similarly significant effects on you: you review the document and decide whether to send it.
Service providers and transfers outside the Kingdom
We rely on service providers that process data on our behalf, each only for the stated purpose:
| Provider type | Purpose |
|---|---|
| Hosting and running the app | Running the platform and serving its pages |
| Database, storage, and sign-in | Keeping your account, documents, and files, and managing sign-in |
| Sending account, subscription, and document emails | |
| Payment gateway | Processing payments and cards |
| Analytics | Understanding and improving how the platform is used |
| Artificial intelligence | Creating and updating documents at your request |
| Document export | Converting documents to PDF and images |
| Bot protection | Protecting the sign-in and sign-up pages |
Some of your data is processed by providers outside the Kingdom of Saudi Arabia. We limit each purpose to the minimum data it needs, and rely on these providers’ contractual safeguards in line with the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom. We never sell your data, and we share the current list of providers on request at support@muqtarah.app.
Your clients’ data
For the client data you enter, you are the controller and we are the processor acting on your behalf. We process it only on your instructions to provide the service.
Retention
| Data | Retention |
|---|---|
| Account data and documents | For as long as your account is active. When you delete your account it is disabled right away and its data is locked; you can restore it within 30 days, after which it is permanently deleted. |
| Backups | Deleted automatically within 90 days of the account deletion. |
| Payment records | We keep a short financial ledger that is not linked to your account (transaction number, amount, date, and plan) for accounting, and the payment gateway keeps its own record of the transaction under its legal obligations. |
| Analytics data | Up to 12 months, linked to your account ID rather than your name or email. Session recordings are deleted after 30 days. |
| Consent records | For as long as your account is active, and deleted with it. |
| Access codes and restricted-document sessions | Codes end after 10 minutes and sessions after 30 days; both are deleted a day after they end. |
Security
Data is encrypted in transit over HTTPS and stored with providers that apply high security standards, with row-level access controls in the database ensuring every user can only reach their own data. If a breach that could harm you occurs, we notify the competent authority within 72 hours of learning of it, and notify you without delay with the steps we suggest to protect yourself.
Cookies
- Essential: your sign-in session, language and display preferences, demo mode, bot protection on the sign-in and sign-up pages, saving your choice in the cookie banner, and the session that opens a document its owner restricted, after the email is confirmed.
- Analytics: set only after you agree. Before you agree, or if you decline, we only count anonymous visits that store nothing on your device.
- Advertising: we do not use them.
You can change your choice at any time from “Cookie settings” at the bottom of the page.
Your rights
You have the right to access your data, get a copy of it in a readable format, correct and update it, ask us to destroy it, and withdraw your consent at any time. We reply to your request within 30 days of receiving it, and may ask to verify your identity first. You can correct your data and delete your account directly from Settings; for anything else, email us at support@muqtarah.app.
Withdrawing consent
You can withdraw your consent to analytics from “Cookie settings” at the bottom of the page, and to marketing messages from the unsubscribe link in any message or from Settings. Withdrawing consent does not affect processing that took place before it.
Children
The service is intended for people aged 18 or older, and we do not knowingly collect data from anyone younger.
Changes
We notify you of material changes by email or inside the platform 14 days before they take effect.
Contact
For any privacy or data question, email us at the address below.
Questions about this page?
Email us and our team will get back to you.
Your next document writes itself