Legal

Privacy Policy

Version 2.4 · Last updated: 14 October 2026

Who we are

The General Manager and Developer is ABDULHAKIM AHMED FALLATAH, the owner of the Muqtarah platform, under freelance document No. FL-525221446, address: Madinah, Saudi Arabia. For privacy questions: support@muqtarah.app.

Data we collect

  • Account data: name, email, phone number, and business name.
  • Google sign-in data, if you choose it: the name, email, and profile photo in your account.
  • Brand data: your logo, colors, fonts, and sender details.
  • Work content: the documents, line items, and client details you enter yourself.
  • Payment data: cards are processed entirely by the payment gateway and we never store your card number; we keep only the transaction reference and the last 4 digits to display back to you.
  • Consent records: the version of the terms and policy you accepted, the time, your IP address, and your browser type.
  • Technical data: your IP address and browser type when you use the platform, for security and to prevent abuse.
  • Usage data: anonymous visit statistics and, once you agree, analytics events and session recordings to improve the product.
  • Document visits: when your client opens a document link, we record that it was opened, the device type, where the visit came from as one word (such as WhatsApp or email) and the time spent, under an anonymous identifier that changes every day. We use no cookies for these statistics, we use the IP address only for a moment to make that identifier and do not keep it in this record, and only the document’s owner sees the results.
  • Access to restricted documents: when a document’s owner limits its link to email addresses they invite, we store those addresses, send a one-time code to the email a visitor types if it is invited, and keep the confirmation (the email and its time) for the session, 30 days at most.

Required and optional data

Your name and email are required to create an account; without them we cannot provide the service. Other data, such as your logo, phone number, and VAT number, is optional.

Why we use it, and on what basis

PurposeLegal basis
Creating your account, running the service, creating documents, and the client portalPerforming our contract
Payments, billing, and keeping billing recordsPerforming our contract and legal obligations
Analytics with cookies and session recordingYour consent through the cookie banner
Anonymous visit statistics without cookiesLegitimate interest
Showing a document’s owner how the document was opened and usedPerforming our contract and legitimate interest
Launch updates and marketing messagesYour explicit consent in your account settings
Security, fraud prevention, and abuse preventionLegitimate interest

Artificial intelligence

When you write a request, such as a project description or a change to a document, the app sends that request with the document data it needs to an AI model provider, which creates or updates the document and returns the result to you. We make no automated decisions with legal or similarly significant effects on you: you review the document and decide whether to send it.

Service providers and transfers outside the Kingdom

We rely on service providers that process data on our behalf, each only for the stated purpose:

Provider typePurpose
Hosting and running the appRunning the platform and serving its pages
Database, storage, and sign-inKeeping your account, documents, and files, and managing sign-in
EmailSending account, subscription, and document emails
Payment gatewayProcessing payments and cards
AnalyticsUnderstanding and improving how the platform is used
Artificial intelligenceCreating and updating documents at your request
Document exportConverting documents to PDF and images
Bot protectionProtecting the sign-in and sign-up pages

Some of your data is processed by providers outside the Kingdom of Saudi Arabia. We limit each purpose to the minimum data it needs, and rely on these providers’ contractual safeguards in line with the Personal Data Protection Law and the Regulation on Personal Data Transfer outside the Kingdom. We never sell your data, and we share the current list of providers on request at support@muqtarah.app.

Your clients’ data

For the client data you enter, you are the controller and we are the processor acting on your behalf. We process it only on your instructions to provide the service.

Retention

DataRetention
Account data and documentsFor as long as your account is active. When you delete your account it is disabled right away and its data is locked; you can restore it within 30 days, after which it is permanently deleted.
BackupsDeleted automatically within 90 days of the account deletion.
Payment recordsWe keep a short financial ledger that is not linked to your account (transaction number, amount, date, and plan) for accounting, and the payment gateway keeps its own record of the transaction under its legal obligations.
Analytics dataUp to 12 months, linked to your account ID rather than your name or email. Session recordings are deleted after 30 days.
Consent recordsFor as long as your account is active, and deleted with it.
Access codes and restricted-document sessionsCodes end after 10 minutes and sessions after 30 days; both are deleted a day after they end.

Security

Data is encrypted in transit over HTTPS and stored with providers that apply high security standards, with row-level access controls in the database ensuring every user can only reach their own data. If a breach that could harm you occurs, we notify the competent authority within 72 hours of learning of it, and notify you without delay with the steps we suggest to protect yourself.

Cookies

  • Essential: your sign-in session, language and display preferences, demo mode, bot protection on the sign-in and sign-up pages, saving your choice in the cookie banner, and the session that opens a document its owner restricted, after the email is confirmed.
  • Analytics: set only after you agree. Before you agree, or if you decline, we only count anonymous visits that store nothing on your device.
  • Advertising: we do not use them.

You can change your choice at any time from “Cookie settings” at the bottom of the page.

Your rights

You have the right to access your data, get a copy of it in a readable format, correct and update it, ask us to destroy it, and withdraw your consent at any time. We reply to your request within 30 days of receiving it, and may ask to verify your identity first. You can correct your data and delete your account directly from Settings; for anything else, email us at support@muqtarah.app.

Withdrawing consent

You can withdraw your consent to analytics from “Cookie settings” at the bottom of the page, and to marketing messages from the unsubscribe link in any message or from Settings. Withdrawing consent does not affect processing that took place before it.

Children

The service is intended for people aged 18 or older, and we do not knowingly collect data from anyone younger.

Changes

We notify you of material changes by email or inside the platform 14 days before they take effect.

Contact

For any privacy or data question, email us at the address below.

Questions about this page?

Email us and our team will get back to you.

support@muqtarah.app
Privacy Policy | Muqtarah