Privacy policy
Draft for review by SMART National Solutions legal. Effective date to be set on publication.
This policy explains what personal data SMART National Solutions ("we", "us") processes when you use Faheem Code (the "Service"), why, and the rights you have. It is written to align with the Saudi Personal Data Protection Law (PDPL).
1. What we collect
| Category | Examples | Source |
|---|---|---|
| Account data | name, e-mail address, organisation, sign-in identifiers | you, or your identity provider |
| Usage data | conversations with the agent, prompts, files you upload, repositories you connect, settings | you |
| Technical data | IP address, browser type, timestamps, error logs | your device |
| Integration tokens | access tokens for source-code hosts and other services you connect | you, via the provider's consent screen |
We do not collect payment card details in the Service.
2. Why we process it
- To provide the Service: running agents, storing your conversations and settings, connecting to services you authorise.
- To secure the Service: authentication, abuse prevention, incident investigation, backups.
- To support you: answering requests and diagnosing problems you report.
- To improve the Service: aggregate, non-identifying usage statistics. We do not train models on your content.
The legal basis is the performance of our agreement with you or your organisation and, for security and improvement, our legitimate interest in operating the Service.
3. Where data is processed
The Service is hosted on cloud infrastructure in the United Arab Emirates (Azure UAE North). Prompts and context are sent to the large language model provider configured for your organisation, which may process them outside the Kingdom; the provider does not retain them for training under our agreement with it. Your organisation may instead configure a model endpoint of its choice.
4. Who can see it
- Our operations staff, on a need-to-know basis, to run and support the Service.
- Service providers acting on our instructions: cloud hosting, model providers, e-mail delivery.
- Services you connect, which receive only what the agent sends to them on your instruction.
- Authorities where the law requires it.
We do not sell personal data.
5. How long we keep it
Account and usage data is kept for as long as your account is active. When an account is closed we delete its data within thirty days. Backups expire on a thirty-five-day cycle. Security logs are kept for up to one year.
6. How it is protected
Data is encrypted in transit (TLS) and at rest. Agents run in isolated sandboxes. Access to production systems is limited to named staff with multi-factor authentication, and administrative actions are logged. Backups are stored in a separate, access-controlled location.
7. Your rights
Subject to the PDPL, you may ask to access, correct, or delete your personal data, to restrict or object to its processing, or to receive a copy in a portable format. Write to privacy@faheemcode.ai; we respond within thirty days. Where processing is based on consent you may withdraw it at any time.
8. Cookies and local storage
The Service uses strictly necessary cookies for sign-in and session security, and browser storage for your interface preferences (such as theme and language). It does not use advertising cookies. Product analytics, where enabled by your organisation, is first-party and does not track you across other sites.
9. Children
The Service is intended for professional use and not for anyone under eighteen.
10. Changes
We may update this policy. Material changes are notified to account owners before they take effect.
11. Contact
Data protection contact: privacy@faheemcode.ai — SMART National Solutions, Riyadh, Kingdom of Saudi Arabia.