Privacy Policy

1. Introduction

MUGDM ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our data wallet platform ("the Service").

2. Information We Collect

We collect the following types of information:

Personal Information

• Full name
• Email address
• Account authentication data

Business Documents

• Commercial Registration (CR) certificates
• Business license documents
• Compliance-related documents and deadlines

Financial Records

• Bookkeeping data and financial records you upload
• Transaction records and invoices

Usage Data

• Log data (IP address, browser type, pages visited)
• Feature usage patterns to improve the Service

3. How We Store Your Data

Your data is stored securely using Supabase, a trusted cloud infrastructure provider. We implement industry-standard security measures including:

• Encryption of data in transit (TLS/SSL) and at rest
• Row-level security policies to ensure data isolation between users
• Regular security audits and monitoring
• Secure authentication via magic link (passwordless) login

4. AI Processing

We use artificial intelligence services, including Claude by Anthropic, to provide document analysis, data extraction, and compliance insights. When your documents are processed by AI:

• Document content is sent to the AI provider solely for processing your request
• We do not use your data to train AI models
• AI processing is performed on-demand and data is not retained by the AI provider beyond the processing session
• You may opt out of AI-powered features where applicable

5. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process and analyze your uploaded documents
• Send compliance deadline reminders and notifications
• Improve the Service and develop new features
• Communicate with you about your account and the Service
• Comply with legal obligations

6. Data Sharing

We do not sell your personal information. We may share your data only in the following circumstances:

• With service providers who assist in operating the Service (e.g., Supabase for hosting, Anthropic for AI processing)
• When required by law or legal process in the Kingdom of Saudi Arabia
• To protect the rights, safety, or property of MUGDM, our users, or the public
• With your explicit consent

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data and uploaded documents within thirty (30) days, except where retention is required by law. Anonymized and aggregated data that cannot identify you may be retained indefinitely for analytical purposes.

8. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Withdraw consent for data processing where applicable
• Object to certain types of data processing

To exercise any of these rights, please contact us at contact@mugdm.com.

9. Cookies and Tracking

We use essential cookies required for the Service to function, including authentication session cookies. We do not use third-party advertising or tracking cookies.

10. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

12. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).

13. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at contact@mugdm.com.