Privacy and Data Protection Policy
This policy explains how Nawras ("we") collects, uses, and protects personal data through nawrastech.sa, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations.
1. Who we are and what this policy covers
Nawras is a Saudi technology company based in Riyadh, Saudi Arabia, and is responsible for processing the data you provide through this website. To contact us about your data: info@nawras.ai or +966 54 386 3466.
This policy covers only data collected through the nawrastech.sa website. Data that our customers enter and process inside the Nawras platform is governed by the service agreements signed with them and the platform's own policies.
2. The data we collect and why
We collect only the data you give us yourself, or that is needed to run and protect the website.
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| Demo request, free trial, or product enquiry | Name, company, email, phone, number of employees, sector, solution or product of interest, message | To contact you about your request and prepare the demo or trial | Your consent, and steps taken at your request before a contract |
| Meeting booking | The data above, plus the time and consultant | To schedule the meeting and send the invitation and link | Steps taken at your request |
| Chat with the assistant | Your questions, and any details you add when asking for a booking or request | To answer your questions and carry out what you confirm | Your consent |
| Customer portal (when launched) | Name, email, company, sign-in and download records | To give access to authorized guides and protect accounts | Performing the contract with your company |
| Browsing the website | Visit source and campaign links, and an anonymised form of your IP address | To know which campaign brought you, and to protect against abuse | Legitimate interest |
We do not ask for sensitive personal data (such as health, beliefs, or national ID number) through the website. Please do not enter it in messages or the chat.
3. Sharing your data
We never sell or rent your data. We may use trusted technology service providers to run the website and its services, such as hosting, email, meeting scheduling, and smart tools. These providers process data on our behalf, on our instructions, and only as far as needed, and are bound to keep it confidential and protected.
We may also disclose data where a law or an order from a competent authority in the Kingdom requires it.
4. Transfers outside the Kingdom
Some of the providers above store or process data outside Saudi Arabia. We transfer only the minimum needed, and rely on providers that commit to appropriate safeguards as required by the Regulation on Personal Data Transfer outside the Kingdom.
5. How long we keep data
| Data | Period |
|---|---|
| Demo, trial, and enquiry requests | 24 months from the last contact, unless you become a customer |
| Meeting records | 24 months from the meeting date |
| Assistant chats | Not stored by the website; only what you confirm (a request or booking) is saved |
| Anonymised address used for abuse protection | One hour |
| Customer portal data | The contract term, then 12 months |
When the period ends we destroy the data or make it no longer linked to you, unless a law requires us to keep it longer.
6. How we protect data
We use encrypted connections (HTTPS) on every page, limit access to requests to authorized staff, and keep the permissions of connected systems to the minimum needed. If an incident affects your data, we notify the competent authority and you as the law requires.
7. Your rights
The Personal Data Protection Law gives you these rights:
- To be informed: to know how and why we collect your data, as this policy explains.
- Access and a copy: to see the data we hold about you and receive a copy in a readable format.
- Correction: to have your data corrected, completed, or updated.
- Destruction: to have your data destroyed once it is no longer needed, unless a law requires us to keep it.
- Withdrawing consent: to withdraw your consent at any time, without affecting what was done before.
To exercise any right, email info@nawras.ai from the address you used. We verify your identity and reply within 30 days. If you are not satisfied with our reply, you may complain to the Saudi Data and AI Authority (SDAIA).
8. Cookies
The website uses only the cookies needed to run it, such as remembering your language. We use measurement or advertising cookies only after you agree.
9. Marketing messages
We send news or offers only if you explicitly agree, and you can unsubscribe at any time from the link in every message, or by contacting us.
10. Minors
The website is intended for organizations and businesses, and we do not knowingly collect data from anyone under 18.
11. Accuracy of data and external links
You are responsible for the accuracy and completeness of the data you give us, and for having the necessary authority when you provide data about your organization or other people.
The website may link to external websites or platforms. We are not responsible for their content or their privacy policies.
12. Changes to this policy
We may update this policy when our services or the law change. We publish the updated version here with its date, and tell you about material changes on the website or by email.
13. Contact us
Nawras, Riyadh, Saudi Arabia. Email: info@nawras.ai. Phone: +966 54 386 3466.
Last updated: October 2026