Privacy and Data Protection Policy

1. Scope

This Policy applies to all users of the Platform, including website visitors, account holders, subscribers, and users of our digital services.

2. Data We Collect

• Identity Data: name, username, organization name, or identifiers provided by you.
• Contact Data: email address, mobile number, and address where required.
• Account Data: login details, account settings, plan type, subscription status.
• Payment Data: billing details, payment status, transaction reference. We do not store full card details.
• Usage Data: login records, usage time, device type, browser type, IP address, and features used.
• Input Content: prompts, messages, files, documents, questions, or data uploaded or submitted by the User.
• Generated Outputs: responses, analysis, or results generated by the Platform based on User inputs.
• Support Data: complaints, support requests, correspondence, and feedback.

3. Purposes of Processing

• Creating and managing accounts.
• Providing the Platform and subscription services.
• Processing payments and invoices.
• Improving service quality and user experience.
• Providing technical support and customer service.
• Protecting the Platform from fraud, cyber threats, and misuse.
• Complying with legal and regulatory obligations.
• Sending service notifications and important updates.

4. Legal Basis for Processing

• User consent.
• Performance of a contract or subscription.
• Compliance with legal or regulatory obligations.
• Legitimate interests that do not override User rights.
• Protecting Platform security and preventing fraud or misuse.

5. Data Sharing

We do not sell Users' personal data. We may share data only where necessary with hosting and cloud service providers, payment and billing providers, technical support and analytics providers, governmental authorities when legally required, and AI model providers necessary to operate the Services.

6. Cross-Border Data Transfers

Some technical or cloud services may require processing or storing data outside the Kingdom of Saudi Arabia. In such cases, we will apply appropriate safeguards.

7. Data Security

We implement appropriate administrative, technical, and organizational measures to protect personal data against unauthorized access, loss, damage, or unlawful disclosure.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected.

9. User Rights

• The right to be informed of the purpose and legal basis for collecting personal data.
• The right to access personal data.
• The right to request correction, completion, or updating of inaccurate data.
• The right to request a readable and clear copy of personal data.
• The right to request deletion or destruction of personal data subject to legal requirements.
• The right to withdraw consent where processing is based on consent.
• The right to submit a complaint to the competent authority.

10. Cookies

The Platform may use cookies or similar technologies to improve user experience.

11. Children's Data

The Platform is not directed at children. If we become aware that we have collected a child's personal data without the required consent, we may delete the data or restrict the account.

12. Payment Data Confidentiality

Payments are processed through authorized payment providers. Users should not share card details outside the secure payment channels provided within the Platform.

13. Marketing Communications

We send marketing communications only where permitted by applicable law and, where required, based on User consent.

14. Data Security Incidents

In the event of a security incident affecting personal data, we will take appropriate measures to investigate, mitigate, and address the incident.

15. Privacy Contact

Email: admin@rogerai.net

Website: www.rogerai.net

16. Updates to This Policy

We may update this Policy from time to time. The updated version will be posted on the Platform with the latest update date.