Privacy Policy

1. Introduction

This Privacy Policy explains how Sawda ("Sawda," "we," "us," or "our") collects, uses, shares, and protects personal information when you use Sawda OS and related websites, applications, and services (the "Service").

By using the Service, you acknowledge this Policy. If you do not agree, please do not use the Service. Our Terms of Service govern use of the Service.

If you use Sawda through an organization account, your organization may control Customer Data in the workspace and act as the primary controller for that data. In those cases, we process Customer Data on the organization's instructions as a service provider / processor, except where we process information for our own business purposes described below.

2. Information we collect

We may collect the following categories of information:

• Account and profile information — name, email address, authentication identifiers, organization membership, role, and preferences.
• Customer Data you submit — trade and CRM records, contacts, documents, messages, notes, planner items, integration content, and other business data you or your organization store in the Service.
• Usage and device information — IP address, browser type, device identifiers, pages viewed, feature usage, approximate location derived from IP, and diagnostic logs.
• Communications — messages you send to support or feedback channels.
• Cookies and similar technologies — session, authentication, preference, and analytics cookies needed to operate and improve the Service.

3. How we use information

We use personal information to:

• Provide, operate, secure, and maintain the Service.
• Authenticate users, manage organizations, and enforce access controls.
• Process Customer Data as instructed by your organization to deliver product features.
• Communicate about the Service, including security alerts, product updates, and support responses.
• Monitor performance, debug issues, prevent abuse, and improve reliability and usability.
• Comply with legal obligations and enforce our Terms.

We do not sell personal information. We do not use Customer Data to train public AI models for unrelated third parties.

4. How we share information

We may share information with:

• Service providers — hosting, authentication, email delivery, analytics, error monitoring, and similar vendors who process data on our behalf under contractual confidentiality and security obligations.
• Organization administrators and members — according to roles and permissions configured in your workspace.
• Third-party integrations — when you or your organization connect services such as email, messaging, or cloud storage; those providers process data under their own policies.
• Legal and safety recipients — when required by law, legal process, or to protect the rights, safety, and security of Sawda, our users, or the public.
• Business transfers — in connection with a merger, acquisition, financing, or sale of assets, subject to appropriate confidentiality protections.

5. International transfers

We may process and store information in countries other than where you are located. Where required, we use appropriate safeguards for cross-border transfers, such as contractual protections with our processors.

6. Retention

We retain personal information for as long as needed to provide the Service, fulfill the purposes described in this Policy, meet legal and accounting requirements, and resolve disputes. Organization administrators may delete or export Customer Data subject to product capabilities and retention settings. Residual copies may remain in backups for a limited period.

7. Security

We implement administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, or alteration. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for using strong credentials and appropriately configuring organization access.

8. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or export personal information, or to object to or restrict certain processing. To exercise rights related to your account profile, contact us using the details below. For Customer Data controlled by your organization, please contact your organization administrator first.

You may also update certain profile information in the Service, and you can control cookie preferences through your browser settings (noting that disabling necessary cookies may affect functionality).

9. Children's privacy

The Service is intended for business users and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date and may provide additional notice for material changes. Continued use of the Service after an update becomes effective constitutes acceptance of the revised Policy.

11. Contact

Privacy questions or requests can be sent to privacy@sawda.app.