Privacy Policy

Effective Date: 24/09/2024

Introduction

Welcome to Stream (“we,” “our,” or “us”). We are committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly. This Privacy Policy explains how we collect, use, store, and disclose personal data in compliance with the Saudi Personal Data Protection Law (PDPL).

1. Data We Collect

We collect and process the following types of personal data:

1.1. Organization Information:

  • Name
  • Commercial ID
  • Email
  • VAT number (if available)

1.2. Organization User Information:

  • Email
  • Name
  • National ID (if provided)

1.3. End Customer Information:

  • Name
  • Phone number
  • Email (if necessary)

2. Purpose of Data Processing

We collect and process personal data for the following purposes:

2.1. Organization Information:

  • To present the organization to customers with complete information.
  • To link invoices with the correct organizational identity.

2.2. Organization User Information:

  • To manage user roles and access permissions.
  • To trace user actions, such as creating invoices.

2.3. End Customer Information:

  • To link payments and invoices accurately.
  • To notify customers of any due payments or ongoing transactions.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • User consent, as all data is voluntarily provided by the user.
  • Fulfillment of contractual obligations related to our services.

4. Data Retention

We keep personal data as long as reasonably necessary for it to serve the users purpose unless deletion is requested by the customer. Upon request, we will delete the data in compliance with the PDPL and our internal data management policies.

5. Data Sharing and Disclosure

We do not sell or share any personal data with third-party companies without the explicit approval of the customer, except where required by law or necessary to fulfill our contractual obligations. Our integrations, including Google Analytics and FullStory via Segment, adhere to this policy, ensuring that data sharing is limited to what isessential for providing the services you've requested.

6. Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, or disclosure. These measures include, but are not limited to:

  • Encryption of sensitive data.
  • Access controls and authentication measures.
  • Regular security assessments and audits.
  • All data is held within the Kingdom of Saudi Arabia.

7. Data Subject Rights

Under the Saudi PDPL, you have the right to:

  • Access your personal data.
  • Request correction or deletion of your personal data.
  • Object to or restrict the processing of your personal data.
  • Withdraw your consent at any time.

To exercise these rights, please contact us at info@streampay.sa.

8. Local Storage and Filters

We use technologies to enhance your user experience and collect information about your usage of our platform. This includes storing JWT tokens and UI-related data, such as filter values, in local storage to ensure a seamless user experience and to persist your settings as you navigate through the platform. These values are cleared when you log out to protect your privacy and security. While you can manage your local storage settings through your browser, please note that clearing storage may impact the functionality of our platform.

Data Transfers

We do not transfer your personal data outside of Saudi Arabia unless adequate protection measures are in place, in compliance with the PDPL.

10. Data Breach Notification

In the event of a data breach, we will notify the relevant authorities and affected individuals as required by the PDPL.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes through our website or other communication channels.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or our data handling practices, please contact us at:

Email:

info@streampay.sa

Address:

King Abdullah Financial District, Riyadh, Saudi Arabia