Skip to content

Privacy Policy

Last Updated: February 2026

PDPL Compliant

1. Data Collection

We collect the following categories of personal data: account information (name, email, phone number, company name), business data (CR number, VAT number, shipping records), usage data (feature usage, access logs), and payment information (processed securely through Stripe and Moyasar). We do not collect data beyond what is necessary to provide our services.

2. Purpose of Processing

Your data is processed for the following purposes: providing and improving Jistix services, generating ZATCA-compliant e-invoices, preparing SABER and FASAH documentation, processing payments, communicating service updates, and complying with Saudi regulatory requirements.

3. Data Sharing

We share data only with: payment processors (Stripe, Moyasar) for transaction processing, cloud infrastructure providers for hosting, and Saudi government authorities when required by law. We never sell personal data to third parties. All third-party processors are contractually bound to protect your data.

4. Data Storage

All data is stored in secure cloud infrastructure. We implement encryption at rest and in transit. Data retention follows Saudi regulatory requirements. Business records are retained for the minimum period required by Saudi law (typically 5-10 years for financial records). You may request deletion of non-regulatory data at any time.

5. User Rights

Under the Saudi PDPL, you have the right to: access your personal data, correct inaccurate data, request deletion of your data (subject to regulatory retention requirements), object to data processing, data portability, and withdraw consent. To exercise these rights, contact us at privacy@jistix.com.

6. Cookies

We use essential cookies to operate the platform and optional analytics cookies to improve our services. For detailed information about our cookie practices, please refer to our Cookie Policy.

7. International Transfers

Your data may be processed by cloud infrastructure providers located outside the Kingdom of Saudi Arabia. We ensure that any such transfers comply with the Saudi PDPL and that adequate safeguards are in place to protect your data, including contractual data protection agreements with all third-party processors.

8. Contact

For privacy-related inquiries, contact our Data Protection Officer at privacy@jistix.com or write to: Borderless Distribution Network (Pylox), Jeddah, Kingdom of Saudi Arabia.