Privacy notice

1. Who is responsible

Alruaa Almutakamilah, established in the Kingdom of Saudi Arabia, is the controller of the personal data described in this notice. Its activity is the development of enterprise automation software under the product name IVAI OS.

Contact for any privacy question or request: admin@ivaios.com.

2. What this notice covers

This notice covers the ivaios.com website and correspondence sent to us. It does not describe how personal data would be processed within a customer deployment of IVAI OS; that is determined separately in the agreement for each engagement.

3. Personal data we process

Visitors to this website. This website does not use cookies, client-side analytics scripts, trackers, advertising pixels, forms, accounts or runtime JavaScript. We do not place identifiers on your device and we do not build profiles of visitors.

However, the site is hosted and protected by Cloudflare, and delivering and securing a website necessarily involves processing technical connection data at the network edge. That data can include your IP address, the address requested, the date and time of the request, and information your browser sends such as the user agent. Cloudflare may also make aggregate traffic statistics available to us at the network edge.

People who write to us. If you send us an email we process your email address, any name or organisation you provide, the content of your message and of our replies, and the technical metadata that email carries.

4. Purposes and legal basis

We process personal data for the following purposes:

• Making the website available and protecting it against abuse, misuse and attack. Our legal basis is our legitimate interest in operating and securing our own website.
• Responding to enquiries and continuing a conversation you started. Our legal basis is our legitimate interest in responding to people who contact us; where an exchange concerns a possible agreement, it is the steps taken at your request before entering into one.
• Keeping necessary business records of what was discussed and agreed. Our legal basis is our legitimate interest in maintaining accurate records, and compliance with any legal obligation that applies to us.

We do not use personal data obtained through this website or through correspondence for marketing, and we do not sell personal data or share it for advertising.

5. How the data is collected

Connection data is generated automatically by your browser when it requests a page. Everything else is provided directly by you when you choose to write to us. We do not obtain personal data about you from third parties.

6. Recipients and service providers

We do not disclose personal data to third parties for their own purposes. Personal data is processed by the following providers in order to deliver the service:

• Cloudflare — domain-name services and the planned hosting, content delivery and protection of ivaios.com.
• Zoho Mail — the mailbox used to send and receive correspondence at admin@ivaios.com.

Each provider processes the data under its own terms of service and privacy documentation. We may also disclose personal data where we are legally required to do so, or where it is necessary to establish, exercise or defend a legal claim.

7. Processing outside the Kingdom

A content delivery network serves pages from infrastructure near the visitor, and the email services described above may process mail and its metadata outside the Kingdom of Saudi Arabia. Personal data connected to website delivery and to correspondence should therefore be assumed to be processed outside the Kingdom.

Where you need a specific assurance about the location or handling of information before sending it, please ask us first at admin@ivaios.com and we will agree a suitable channel.

8. Retention and destruction

We keep personal data only for as long as it is needed for the purpose it was collected for. In practice:

• Correspondence is kept while the matter is live, and afterwards for as long as it is needed as a business record or to establish, exercise or defend a legal claim. Messages with no continuing relevance are deleted sooner.
• Connection data processed at the network edge is retained by the provider according to its own operational retention period. We do not maintain a separate copy.

When personal data is no longer needed it is securely deleted from the systems under our control.

9. Security

We apply technical and organisational measures appropriate to the limited personal data we hold, including access control on the mailbox and transport encryption for the website. No method of transmission or storage is completely secure. Ordinary email in particular should be treated as readable in transit — please do not send us sensitive personal data, credentials or confidential records by email.

10. Your rights

Subject to applicable law and its conditions, you have the right to:

• be informed of the legal basis for, and purpose of, collecting your personal data;
• access your personal data held by us;
• request a copy of your personal data in a readable and clear format;
• request that your personal data be corrected, completed or updated;
• request destruction of your personal data;
• withdraw consent, where our processing relies on consent.

To exercise any of these, write to admin@ivaios.com. We will respond within the period required by applicable law. We may need to ask a question to confirm the request comes from you, and we will ask for no more information than that requires.

You may also ask us to stop contacting you at any time, and we will.

11. Complaints

If you are not satisfied with our response, you are entitled to complain to the competent data protection authority in your jurisdiction. In the Kingdom of Saudi Arabia the competent authority for personal data protection is the Saudi Data and AI Authority (SDAIA).

12. Children

This is a business website addressed to a professional audience. It is not directed at children and we do not knowingly process children's personal data through it.

13. Changes to this notice

If this notice changes, the revised version is published here with a new review date. Any change that expanded what we collect would be described plainly rather than absorbed into a general clause.