Privacy Policy

Last updated: 2026-08-28

This is a plain-language draft describing how the platform actually works. It has not been reviewed by a lawyer and should be reviewed by qualified legal counsel before relying on it for real commercial use.

What data we collect

When you register your company, we collect: company name and commercial registration number (optional), company logo (if uploaded), and each user's personal data (name, email, and any optional fields you add to your profile such as phone or job title). We do not collect payment data in this version.

Documents you upload — never stored

This is the core design principle of Rushd: when you upload a document as governance evidence, its content is read automatically from temporary memory to verify it matches the requirement, then deleted immediately from our servers. We never keep a copy of the file itself in any form — only the analysis result (pass/fail, a text summary, and non-sensitive metadata such as file name, type, and size).

How we use data

We use your data to operate your account, calculate your governance maturity score, and produce the reports you request. We do not sell your data to any third party or use it for advertising.

Data isolation between companies

Every registered company is fully isolated from every other company in our database (isolation enforced on every single query) — no other company can ever access your data.

Retention and your rights

We retain your account data for as long as it remains active. You may contact us to request correction of your data or deletion of your account, consistent with data-subject rights under the Saudi Personal Data Protection Law (PDPL).

Contact

For any privacy-related question, contact your company owner (who holds administrative access) or the platform operator directly.