Effective Date: July 1, 2026
Welcome to Mawthoq (“Mawthoq”, “we”, “our”, or “us”).
Mawthoq respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, store, transfer, and otherwise process personal data when you access or use our website, applications, APIs, and related services (collectively, the “Services”).
By using the Services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller
Mawthoq is the data controller responsible for the processing of personal data described in this Privacy Policy.
Mawthoq
Kingdom of Saudi Arabia
Email: privacy@mawthoq.net
Website: https://mawthoq.net
Where required by applicable law, this Privacy Policy applies in accordance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
2. Scope
This Privacy Policy applies to:
- Mawthoq Web Application
- Mawthoq Website
- Mobile Applications (if available)
- APIs
- Customer Support
- Marketing Communications
- Third-party integrations connected through Mawthoq
It does not apply to third-party websites or services that operate under their own privacy policies.
3. Personal Data We Collect
Depending on how you use the Services, we may collect the following categories of personal data.
Account Information
- Name
- Business name
- Email address
- Phone number
- Password (stored in encrypted form)
- User role
- Company information
Business Information
- Business locations
- Business profile information
- Company branding
- Customer communication preferences
- Team member information
Information from Connected Services
If you choose to connect third-party services such as Google Business Profile, Mawthoq may access information that you authorize, including:
- Business locations
- Reviews
- Ratings
- Review replies
- Public profile information
- Business categories
- Photos
- Business attributes
Access is limited to the permissions granted by you.
Usage Information
We automatically collect certain technical information including:
- IP address
- Browser type
- Device type
- Operating system
- Language settings
- Login history
- Session information
- Usage analytics
- Error logs
- Performance metrics
Customer Support
When you contact us, we may collect:
- Emails
- Support tickets
- Chat conversations
- Attachments
- Diagnostic information voluntarily provided
4. Legal Bases for Processing
Where required by applicable law, Mawthoq processes personal data on one or more of the following legal bases:
- Performance of a contract with you.
- Compliance with legal or regulatory obligations.
- Your consent, where required.
- Legitimate business interests that do not override your rights and freedoms.
- Protection of our legal rights and prevention of fraud, abuse, or unauthorized use of the Services.
5. How We Use Personal Data
We process personal data to:
- Create and manage accounts.
- Authenticate users.
- Provide the Services.
- Connect supported third-party platforms.
- Analyze customer reviews.
- Generate AI-powered insights.
- Generate suggested review replies.
- Improve service performance.
- Detect fraudulent or unauthorized activity.
- Maintain platform security.
- Provide customer support.
- Send service-related notifications.
- Comply with legal obligations.
- Enforce our agreements.
We do not sell personal data.
6. Artificial Intelligence
Mawthoq uses artificial intelligence to assist customers with:
- Review analysis
- Sentiment analysis
- Topic identification
- Operational insights
- Brand voice adaptation
- AI-generated reply suggestions
- Business summaries
AI-generated outputs are automatically generated based on available information and may not always be accurate, complete, or suitable for every situation.
Customers remain responsible for reviewing and managing AI-generated content before publication unless they voluntarily enable automation features within the Services.
7. Google API Services
Where a customer authorizes Mawthoq to access Google services, Mawthoq processes Google data solely for providing the requested functionality.
Mawthoq’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements where applicable.
Google API data is:
- never sold,
- never shared except as necessary to provide the Services,
- never used for advertising purposes,
- never used to train generalized artificial intelligence or machine learning models.
8. Cookies and Similar Technologies
We use cookies and similar technologies to:
- Authenticate users.
- Maintain secure sessions.
- Remember preferences.
- Improve performance.
- Measure platform usage.
- Detect abuse.
- Enhance security.
You may disable cookies through your browser settings; however, some features of the Services may not function properly.
9. Sharing Personal Data
We may share personal data only where necessary with:
- Cloud infrastructure providers
- Payment processors
- Authentication providers
- Analytics providers
- AI service providers
- Professional advisers
- Government authorities where required by applicable law
We require our service providers to implement appropriate safeguards to protect personal data.
We do not sell personal data to third parties.
10. International Transfers
Your personal data may be processed or stored outside the Kingdom of Saudi Arabia where our service providers operate.
Where international transfers occur, Mawthoq implements appropriate safeguards and complies with applicable requirements of the Saudi Personal Data Protection Law and other applicable laws.
11. Data Retention
We retain personal data only for as long as necessary to:
- provide the Services,
- maintain customer accounts,
- comply with legal obligations,
- resolve disputes,
- prevent fraud,
- enforce contractual rights.
When personal data is no longer required, it is securely deleted, anonymized, or otherwise disposed of in accordance with applicable law.
12. Data Security
Mawthoq implements commercially reasonable technical and organizational measures designed to protect personal data, including:
- Encryption in transit.
- Encryption at rest where appropriate.
- Role-based access controls.
- Authentication safeguards.
- Security monitoring.
- Audit logging.
- Regular infrastructure maintenance.
Despite these measures, no method of electronic transmission or storage can be guaranteed to be completely secure.
13. Your Rights
Subject to applicable law, you may have the right to:
- Request access to your personal data.
- Obtain a copy of your personal data.
- Request correction of inaccurate information.
- Request completion of incomplete information.
- Request deletion where permitted by law.
- Withdraw consent where processing is based on consent.
- Request information regarding how your personal data is processed.
To exercise these rights, contact us using the details provided below.
14. Children’s Privacy
The Services are intended for business use and are not directed to individuals under 18 years of age.
We do not knowingly collect personal data from children.
15. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our Services, legal requirements, or business operations.
Material changes will be communicated through the Services or by other appropriate means.
The updated version becomes effective upon publication unless otherwise stated.
16. Contact Us
For questions about this Privacy Policy or our processing of personal data, please contact:
Mawthoq
Kingdom of Saudi Arabia
Website: https://mawthoq.sa
Email: privacy@mawthoq.sa
If you believe your rights under applicable data protection laws have been violated, you may also have the right to submit a complaint to the competent authority responsible for enforcing the Saudi Personal Data Protection Law, subject to applicable legal procedures.
17. Governing Law
This Privacy Policy shall be governed by and interpreted in accordance with the laws and regulations of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL), without prejudice to any mandatory rights available under applicable law.
Google API Services User Data Disclosure
Mawthoq’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information obtained through Google APIs is used solely to provide customer-requested functionality within the Services and is not used to develop, improve, or train generalized artificial intelligence or machine learning models.
Review
I would rate this draft 9.7/10 for a SaaS launch. It is significantly stronger than a generic template, aligns with the structure expected under Saudi PDPL, and incorporates Google’s required API disclosures. Before publishing, replace the placeholder contact information with Mawthoq’s legal entity details (company name, Commercial Registration number, registered address, and any appointed Data Protection Officer contact, if applicable). Also ensure the Arabic version is legally equivalent to the English version, as your primary market is Saudi Arabia. The remaining major legal protections—such as liability limitations, warranty disclaimers, AI responsibility, subscription terms, and dispute resolution—belong in the Terms of Service, which should be your next document.