Privacy Policy

1. Data we collect

We collect account data (name, phone number or email, a hashed password), lawyer licence data (licence number, issue and expiry dates), request and message content tied to the legal service requested, and payment data (via a licensed payment gateway — we never store full card details on our own servers).

2. Basis and purpose of processing

We process your data to perform our contract with you (delivering the requested legal service), to comply with statutory obligations (such as tax invoicing), and for our legitimate interest in improving and securing the platform. Legal correspondence data is never used for marketing purposes.

3. Data sharing

Your request data is shared only with the lawyer assigned to that request. We use trusted service providers (payment gateway, cloud hosting, SMS provider) as data processors on our behalf, under data processing agreements, and we never sell your data to any third party for marketing purposes.

4. Data retention

We keep account data for as long as the account is active. After that, each kind of data has a period after which it is permanently deleted:

• Invoices, payments, refunds, ledger entries and transfers: 10 years from the end of the financial year, as Saudi tax and accounting regulation requires, even after account deletion.
• Requests, their attachments, chats and reviews: 5 years after the request is completed or cancelled; then attachments, messages and text are deleted and only the request number and amount stay for the financial records.
• Call recordings: 90 days after the call.
• Sign-in history and in-app notifications: one year.
• The log of admin actions: 5 years.
• What lets us recognise a deleted lawyer account (one-way hashes that reveal no data): 3 years after deletion, and for as long as any amount is owed to the platform.
• Details of people who agreed to receive win-back offers: two years from their consent, or until they unsubscribe, whichever comes first.
• Files uploaded but never attached to a request: 7 days.

Reasons for leaving the platform are kept without any personal data, for statistics.

5. Your rights

You can request access to or correction of your data from your account settings. You may also request full account deletion; your personal data is deleted immediately, except for records the law requires us to retain, such as tax invoices.

6. Data transfer outside the Kingdom

Some supporting technical systems (such as voice/video calling) are hosted on infrastructure with local data residency wherever possible, specifically because of the sensitivity of legal content. Any transfer of data outside the Kingdom is carried out under the terms permitted by the Personal Data Protection Law.

7. Contact us

For any privacy-related question, please reach us at the email listed in the page footer.