Privacy policy

Last updated: 12 October 2026

Who we are

Connvai is a cloud business platform. We are the controller of the data we collect about website visitors and account holders, and a processor of the data our customers enter about their own customers and staff inside the apps.

Data we collect

Account data: name, email, mobile number and password (stored as a one-way hash).

Business and billing data: company name, tax number, address, subscription details and the invoices we issue to you.

App content: what you and your team enter — invoices, customers, items, conversations, articles and more.

Usage and device data: IP address, browser type, pages visited and security logs.

What you send us through contact forms.

Why we use it

To provide the service, run your account and keep your data in sync across apps.

To invoice and collect subscriptions and meet our legal and tax obligations.

To protect accounts and prevent fraud and abuse.

To answer your enquiries, provide support and send essential service messages.

To improve the products using aggregated usage statistics. We send marketing messages only with your consent, which you can withdraw at any time.

AI features

When you use the AI assistant or AI Employees, the questions and the data needed to answer them are sent to AI model providers acting on our behalf, only as far as needed and within the user's permissions. Under our contracts, these providers may not use your data to train their models.

Sharing

We do not sell personal data. We share it only with service providers acting on our behalf under contracts that require them to protect it (cloud hosting, email and messaging, payment gateways, AI models), or with authorities when the law requires it.

Transfers outside the Kingdom

Some service providers may process data outside the Kingdom. We do so only in the cases and with the safeguards allowed by the Personal Data Protection Law and the regulation on transferring data outside the Kingdom.

Retention

We keep account data and app content for the duration of the subscription, then delete or anonymise it within a reasonable period after the account is closed, unless the law requires us to keep it longer (such as accounting and tax records).

Your rights

You have the right to be informed about how your data is processed, to access it and obtain a copy, to ask for it to be corrected, completed or updated, to ask for it to be destroyed when no longer needed, and to withdraw your consent where it is the basis for processing.

To exercise your rights, contact us through the contact form on this website; we will reply within the statutory period. You may also file a complaint with the Saudi Data & AI Authority (SDAIA).

If your data was entered into one of our customers' accounts (such as a business you deal with), please send your request to that business first; we will help them fulfil it.

Security

We use encrypted connections, a separate database for each business, permissions that limit what each user sees, regular backups and continuous security monitoring. We will notify you and the competent authority of any incident affecting your data as the law requires.

Cookies

We use essential cookies for sign-in and to remember your country and language. We do not use advertising cookies on this website.

Children

Our services are for businesses; we do not knowingly collect data from people under 18.

Changes and contact

We may update this policy; we publish the new date at the top of the page and notify account holders of material changes. For any privacy question, contact us through the contact form.