1
Data we collect
- Account data: name, email address, mobile number, company name and job title.
- User and access-permission data within the company account.
- Customer and sales-opportunity data entered into the platform by the customer.
- Project, property unit, reservation, broker and financing-application data.
- Usage data: sign-ins, activity within the platform, technical errors and system logs.
- Payment and invoice data through Moyasar. We do not store full bank card details.
2
How we use data
- Create and manage customer and user accounts.
- Operate Enkorix products and provide CRM, AI and financing-management services.
- Manage subscriptions, invoices, payments and free trials.
- Improve platform performance and user experience.
- Provide technical support and respond to enquiries.
- Send operational notifications and service-related messages.
- Protect the platform and prevent misuse.
- Comply with applicable legal and regulatory requirements.
3
Legal basis for processing
- We process personal data under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
- This includes processing needed to provide services, perform contractual obligations and comply with legal duties.
- Where required, some processing is based on the data subject's consent.
4
External service providers
Vercel
Application hosting and operations
Neon
PostgreSQL database
Moyasar
Payment processing — Saudi Arabia
Resend
Email delivery
Anthropic
Artificial intelligence services
Upstash
Caching and messaging
Sentry
Error monitoring and stability improvements
5
AI and input processing
- When using Aria AI Agent or another intelligent feature, user-entered text may be processed to generate replies or analysis.
- Customers should avoid entering unnecessary sensitive data into AI tools.
6
Data sharing
- We do not sell customer or user data to any party.
- We may share data with service providers needed to operate the platform.
- We may disclose data to competent authorities as required by applicable law.
- We may share data to protect the rights of Enkorix or its users, or prevent misuse.
7
Data protection
- Isolation between each company's data within the platform (multi-tenant isolation).
- Role-based user permissions (RBAC).
- Encryption in transit (TLS/HTTPS).
- Password protection using bcrypt.
- Error monitoring and system logs.
- Internal data access restricted to what is needed.
8
Data retention
- We retain data for the customer's subscription period or as required for legal compliance.
- Data may be exported for 30 days after the subscription ends.
- After 30 days, data is permanently deleted or de-identified.
- Visitor conversations that have not become leads are automatically deleted 90 days after their last message.
- Sign-in tokens and password-reset links are deleted within days of expiry.
9
Data subject rights
- Request access to your personal data.
- Request correction of inaccurate data.
- Request deletion subject to applicable legal requirements.
- Request restriction of, or object to, certain processing.
- Withdraw consent where processing is based on consent.
- To exercise these rights: support@enkorix.ai
10
Aria conversations on the Enkorix website
- When you speak to Aria on our website, by text or voice, we save the conversation transcript and any name and mobile number you provide.
- Purpose: respond with relevant information and offers, and improve Aria's replies.
- These conversations are between the visitor and Enkorix. They are not linked to a customer company's account.
- You may request deletion of your conversation and data at any time through support@enkorix.ai.
Contact us about privacy
Enkorix Tech Solutions · CR: 7043652606 · Riyadh, Saudi Arabia