Who We Are

Injaz is operated by Hulul Injaz Alraqamiya, a sole proprietorship registered in the Kingdom of Saudi Arabia.

Information We Collect

From You (Our Customer)

• Account information (name, email, encrypted password)
• Company details (business name, address)
• Tax and regulatory data required for invoicing (e.g., VAT number, ZATCA-related data)
• User and team member information and access permissions

From Your Clients (On Your Behalf)

You may choose to store data about your clients within the platform, such as:

• Names and contact information
• Addresses
• Service history
• Requests, quotes, jobs, invoices, payments, and notes

You are the controller of this data. We process it only to provide the service to you and based on your instructions.

Automatically Collected Data

• IP address
• Device and browser type
• Usage logs and activity within the platform

How We Use Information

We use data to:

• Operate and provide the Injaz platform
• Manage accounts and authenticate users
• Execute features you request, including sending messages via email, SMS, or WhatsApp
• Issue invoices and comply with regulatory and tax requirements when needed
• Maintain platform security, prevent abuse, and diagnose issues
• Improve and develop the product

WhatsApp and Messaging

We provide messaging features through the WhatsApp Business Platform operated by Meta, integrated through approved providers such as Twilio.

Messages are sent and received only on behalf of our customers and based on their settings and instructions. We do not message our customers' clients for our own purposes, nor do we use message content for any purpose outside of providing the service.

Customers are responsible for ensuring they have obtained the necessary consent from their clients to receive messages via WhatsApp or other channels.

Data Roles

Injaz acts as a data processor for data that our customers store about their own clients.

Our customers are the data controllers and are responsible for the lawfulness of collecting and using that data.

Information Sharing

We do not sell personal data.

We share data only with:

• Service providers necessary to operate the platform (hosting, messaging, email, error monitoring)
• Messaging partners such as Meta and Twilio
• Government or tax authorities when there is a legal obligation (such as ZATCA)
• Competent authorities if required by law or legal process

All service providers are bound by confidentiality and data protection agreements.

Data Storage

Data is stored on secure servers. We apply appropriate technical and organizational controls, including encryption and access management, to protect data during storage and transfer.

Data Retention

• We retain data as long as your account is active.
• Upon account closure, data is deleted or anonymized within up to 90 days, unless retention is legally required.
• Financial and tax records may be retained for longer periods to comply with applicable regulations.

Your Rights

You may:

• Request access to your data
• Request correction or deletion of data
• Request a copy or export of your data

Security

We apply reasonable administrative, technical, and organizational measures to protect data. However, no system is 100% secure.

In the event of a significant security incident, we will notify you appropriately as circumstances require.

You are responsible for keeping your login credentials confidential and notifying us immediately of any unauthorized use.

Changes to This Policy

We may update this Privacy Policy from time to time. If there are significant changes, we will notify you by email or within the platform.

Governing Law

This Privacy Policy is governed by the applicable laws of the Kingdom of Saudi Arabia.

For any privacy-related inquiries, please contact us at: support@getinjaz.com