Privacy Policy | YBIX

Privacy Policy

Effective Date: May 1, 2026
Last Updated: May 1, 2026

1. Introduction

Welcome to YBIX. We respect your privacy and are strictly committed to protecting your personal data. This Privacy Policy outlines how YBIX ("we," "our," or "us") collects, uses, discloses, and safeguards your information when you access our website and use our services.

As an entity registered in the Kingdom of Saudi Arabia (KSA) with a global user base, this policy is designed to comply with the KSA Personal Data Protection Law (PDPL), enforced by the Saudi Data & Artificial Intelligence Authority (SDAIA), and the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect the minimum amount of personal data necessary to provide and improve our services. This includes:

  • Identity & Contact Data: Name, email address, phone number, and professional details provided during account registration, service inquiries, or newsletter subscriptions.
  • Technical Data: Internet Protocol (IP) address, browser type and version, time zone setting, browser plug-in types, operating system, and platform used to access our website.
  • Usage Data: Granular information regarding how you interact with our website, pages visited, and service features utilized.

3. Purpose of Processing

We process your personal data strictly for the following purposes:

  • To register you as a new user or client.
  • To deliver our services and fulfill contractual obligations.
  • To manage our relationship with you, including notifying you about changes to our terms or services.
  • To administer and protect our business and website (including troubleshooting, data analysis, testing, and system maintenance).
  • To use data analytics to improve our website, services, marketing, and user experience.

4. Legal Basis for Processing

In accordance with the KSA PDPL and global privacy standards, our legal grounds for processing your data are:

  • Explicit Consent: We primarily rely on your explicit, freely given, and specific consent to process your personal data. You reserve the right to withdraw this consent at any time.
  • Contractual Necessity: Processing is required to perform a contract we are about to enter into or have entered into with you.
  • Legal Obligation: Processing is necessary to comply with a legal or regulatory obligation under KSA law or other applicable jurisdictions.

5. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may only disclose your data to:

  • Authorized Service Providers: Third-party vendors who provide IT, system administration, and hosting services required to operate YBIX. These parties are bound by strict confidentiality agreements.
  • Regulatory Authorities: Law enforcement agencies, regulators, or public authorities (including SDAIA) if required by law, to protect our legal rights, or to comply with a judicial proceeding.

6. International Data Transfers

As a KSA-registered entity serving a global and Middle Eastern market, your data may be processed or stored outside of your country of residence.

  • KSA Compliance: Any transfer of data outside the Kingdom of Saudi Arabia is conducted in strict compliance with SDAIA regulations, ensuring an adequate level of protection that meets or exceeds the standards established by the PDPL.
  • Global Compliance: For users in the European Economic Area (EEA), transfers are safeguarded by Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms.

7. Data Retention and Destruction

We retain your personal data only for as long as reasonably necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, tax, or accounting requirements. Once the data is no longer required, or upon a valid user request, it will be securely and permanently destroyed in accordance with PDPL guidelines.

8. Your Data Protection Rights

Under the KSA PDPL and GDPR, you possess the following rights regarding your personal data:

  • The Right to Know/Access: To be informed about the data we collect and to request a copy of your personal data.
  • The Right to Request Correction: To request the correction of any incomplete or inaccurate data we hold about you.
  • The Right to Request Destruction/Erasure: To ask us to delete or remove personal data where there is no legal basis for us continuing to process it.
  • The Right to Withdraw Consent: To withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
  • The Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format.

To exercise any of these rights, please contact us using the details provided in Section 10. We will respond to all legitimate requests within the legally mandated timeframes.

9. Data Security and Breach Notification

We have implemented robust technical and organizational security measures to prevent your personal data from being accidentally lost, used, accessed in an unauthorized way, altered, or disclosed. In the event of a suspected or actual personal data breach that poses a risk to your rights, we will notify you and the relevant regulatory authorities (including SDAIA) within the timelines required by KSA law.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at:

  • Entity: YBIX
  • Registered Office: [Insert KSA Office Address / City, Kingdom of Saudi Arabia]
  • Privacy/Compliance Email: privacy@ybix.ai
Scroll to Top