1. Introduction
This policy explains how Munasek collects, processes, shares, and protects personal and technical data when you use the website or platform, and defines your rights over your data. By using the service, you consent to the processing practices described here. This policy may be updated periodically; the current version is published on this page with its effective date.
We act as a data controller for your data, and we define the purpose and means of processing with you through this policy and the agreements signed with our clients.
2. Data We Collect
Account & engagement data (provided by you): Name, email, phone, organization (company or office), role, and Saudi Council of Engineers license number where applicable.
Project data (when uploaded or generated): Title deeds, parcel and subdivision numbers, land boundaries, uploaded drawings and CAD files, audit results, and financial outputs generated within your project.
Automatic technical data: Device and browser type, IP address, login and in-platform usage logs, performance and error diagnostics — with no third-party advertising tracking.
3. How We Use Your Data
We process your data to:
- Operate the service: run audits, generate scenarios, power the CAD editor, and produce financing deliverables for your projects.
- Answer inquiries, provide technical support, and manage your subscription.
- Improve the platform and AI models, and tune the audit to Saudi regulatory requirements.
- Send account notices, service updates, and administrative communications.
- Comply with Saudi regulatory obligations, foremost those of SDAIA and related authorities.
4. Legal Basis for Processing
Our processing rests on the bases set out in Article 5 of the Saudi PDPL, including:
- Your explicit consent at registration or for specific requests such as trials, withdrawable at any time without affecting the lawfulness of processing prior to withdrawal.
- Contract performance: to deliver the service and manage subscriptions.
- Legitimate interest: to improve the service, secure the platform, and collect fees, without infringing your fundamental rights.
- Legal obligation: to respond to competent authorities under Saudi regulations.
5. Data Sharing
We never sell, rent, or exchange your personal data with advertising parties.
Data sharing is limited to the following cases:
- Approved technical providers (hosting, databases, AI models, email), under confidentiality and data-processing agreements committed to Saudi standards.
- Official and regulatory authorities upon lawful request, or within legal proceedings.
- Merger, acquisition, or restructuring scenarios, with data protection maintained under this policy.
- Parties you consent to share with, or where another legal basis applies.
Where processing requires transfer outside the Kingdom, we apply the transfer mechanisms and adequate protection safeguards required by SDAIA Executive Regulations, without prejudice to your right to know the transfer destination.
6. Data Security
We apply appropriate technical and organizational controls including: encryption in transit and at rest, role-based access controls following least-privilege principles, internal audit logging, periodic security reviews, and strict secrets management.
No system is fully secure; we therefore commit to reporting any security incident within the timelines and requirements set by the PDPL and its Executive Regulations.
7. In-Kingdom Data Hosting (Digital Sovereignty)
Project and drawing data is hosted inside the Kingdom of Saudi Arabia, or with providers offering protection equivalent to regulatory requirements, consistent with SDAIA cross-border rules and the digital sovereignty goals of Saudi Vision 2030.
8. Data Retention
We retain account and project data while your subscription is active, and thereafter only as required by law or pending disputes after account closure. You may request deletion of a specific project or your entire account anytime; the Company responds per the statutory timelines, retaining only what accounting or legal obligations require.
9. Your Rights
Under the Saudi PDPL you have the following rights:
- To be informed about your data and its processing.
- To access your data and obtain a copy in a clear, readable format.
- To request correction or completion of inaccurate or incomplete data.
- To request deletion or destruction of your data when its collection purpose is served.
- To withdraw consent at any time.
- To know the third parties with whom data is shared.
To exercise any right, contact us at info@munasek.com. We respond within thirty (30) days of the request, the statutory maximum under the PDPL.
11. Data Used for Model Development & Training
To improve audit and scenario accuracy, uploaded drawings, audit results, and aggregated usage data may be used to train and develop Munasek models, after anonymization and removal of identifying data. Directly identifying personal data is not used for training.
You may refuse training use of your project data anytime via info@munasek.com, without any effect on your account or its features.
12. Children's Privacy
The platform is directed at engineers, developers, and institutions. We do not target children and do not knowingly collect their data. If data of children below the legal age reaches us, we delete it as promptly as possible.
13. Changes to This Policy
We may update this policy. The updated version is published on this page with a revised effective date, and material changes are announced via the platform or email.
14. Contact Us
For privacy inquiries or rights requests: info@munasek.com — Riyadh, Kingdom of Saudi Arabia. If you are not satisfied with our response, you may file a complaint with the Saudi Data & AI Authority (SDAIA).