Privacy Policy · Tabadul

1. Scope

This policy applies to data we collect through the Tabadul website, mobile apps, and APIs in the course of providing workforce-procurement services in KSA and the GCC.

2. Data We Collect

Account data (name, email, phone, job title), company data (CR Number, entity name, sector, city, size), compliance documents (CR, VAT, GOSI, Saudization, WPS, Chamber of Commerce, Classification), payment data, and platform-usage logs (IP, user-agent, audit events).

3. How We Use Data

To verify your identity and your company, to operate the marketplace, to enforce compliance, to send transactional notifications, to detect and prevent fraud, and to meet our regulatory obligations to Saudi authorities.

4. Data Sharing

Counterparties see only the data needed to act on your request (entity name, trust score, public profile). We never sell personal data. We may share data with Saudi regulators when legally required.

5. Storage & Security

Data is stored on servers located in the Kingdom of Saudi Arabia and is encrypted at rest. Compliance documents are scanned for malware and stored behind short-lived signed URLs.

6. Your Rights

You may request access to, correction of, or deletion of your personal data by writing to privacy@tabadul.sa. Some data must be retained to satisfy regulatory recordkeeping (see Retention).

7. Retention

Audit logs and contract records are retained for the minimum period required by Saudi labor and tax law. Account-level personal data is deleted within 30 days of a verified deletion request, subject to that retention floor.

8. Contact

For privacy questions or to exercise your rights, contact privacy@tabadul.sa.