We protect your data and your clients' as we protect our own — a commitment, not a formality.
Last updated: 2026-08-27
This policy explains how Noaata (نقطة / Noaata) handles the personal data of platform users and their clients, in accordance with Saudi Arabia's Personal Data Protection Law (PDPL). This is a structural template subject to legal review before launch.
We collect account data (name, email, phone), firm data, and the case and document data you and your team enter. We do not access your case content except as necessary to operate the service.
We process your data to operate, improve, and secure the platform. We do not sell your data or share it with third parties for marketing purposes.
We use encryption in transit (TLS 1.2+) and at rest (AES-256), matter-level permissions enforced server-side, and a full audit trail. Access to client data is restricted and logged.
Under PDPL, you have the right to access, correct, and request deletion of your data. To exercise any of these rights, email us at the address below.
We offer in-Kingdom hosting options for firms that require local storage. We confirm the details with each firm before committing.
For any privacy question, email us at privacy@noaata.com.