Saudi BC — Smart Business Cards
Login Start Free
Transparency

Privacy Policy

Last updated: 22 April 2026 — At Saudi BC, we believe your privacy is a fundamental right. This policy explains how we handle your data.

1. Data we collect

When you register your company, we collect: company name, email, phone, commercial registration (optional), and admin details (name and password). When you add employees: names, positions, contact methods, and photos.

When a QR is scanned: we record timestamp, approximate country/city (from IP), and device type. We do not collect the visitor's personal identity.

2. How we use your data

  • Operating the platform: showing your company and employee pages to clients scanning your QR.
  • Providing you with real-time analytics on your cards' performance.
  • Processing payments via secure gateways (Moyasar/Stripe).
  • Communicating with you about your account and new features.

We never sell your data. We don't share it with third parties except for operational needs (infrastructure, payment gateways) or under legal order.

3. Data protection

  • Passwords are stored as secure hashes (non-reversible), using ASP.NET Identity standards.
  • All connections are encrypted over HTTPS/TLS 1.2+.
  • Complete isolation between company tenants.
  • Daily encrypted backups.
  • Data access is limited to a restricted team under NDAs.

4. Cookies

We use essential cookies only: login session (httpOnly, secure) and language preference. We don't use tracking or ad cookies.

5. Your rights

Under the Saudi Personal Data Protection Law (PDPL), you have the right to:

  • Access your stored data and request a copy.
  • Correct any inaccurate data.
  • Delete your account and all associated data.
  • Restrict or object to data processing.
  • Withdraw consent at any time.

To exercise any of these rights, contact us at info@saudibc.com . We respond within 30 days at most.

6. Data retention

  • Active account data: retained for the duration of your subscription.
  • After cancellation: your data is fully deleted within 90 days.
  • Billing records: retained for 10 years as required by ZATCA regulations.

7. Children

Our platform is business-oriented only. We don't knowingly collect data about anyone under 18.

8. Changes to this policy

We may update this policy. We'll notify you of material changes by email at least 30 days before they take effect.

9. Contact us

If you have any privacy questions or concerns: