Privacy Policy
Last updated: February 21, 2026
At Modarhem, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your personal and business information.
1. Information We Collect
Account information: name, email address, phone number (optional). Organization information: company name, address, tax registration numbers. Financial data: chart of accounts, journal entries, invoices, payments, and related accounting records. Usage data: login timestamps, feature usage patterns, and device information. Technical data: IP addresses, browser type, and operating system.
2. How We Use Your Information
To provide and maintain the accounting platform services. To process subscription payments through Moyasar. To send transactional emails (invoices, password resets, weekly reports). To improve the Platform based on usage patterns. To comply with legal obligations including ZATCA reporting requirements. To detect and prevent fraud and security threats.
3. Data Storage & Security
All data is stored on secure servers hosted by DigitalOcean in the Frankfurt (EU) region. Data is encrypted at rest and in transit using industry-standard encryption. Multi-tenant isolation is enforced through PostgreSQL Row-Level Security (RLS). Regular backups are performed daily with 30-day retention. Access to production systems is restricted to authorized personnel only.
4. Data Sharing
We do not sell your personal or business data to third parties. We may share data with: payment processors (Moyasar) for transaction processing, email service providers (SendGrid) for transactional emails, and law enforcement when required by valid legal process. All third-party providers are bound by data processing agreements.
5. Data Retention
Active account data is retained for the duration of your subscription. After account deletion, all data is permanently removed within 30 days. Audit logs are retained for 7 years to comply with Saudi commercial law requirements. Payment transaction records are retained as required by financial regulations.
6. Your Rights
You have the right to access all data associated with your account. You may export your data at any time through the Platform's export features. You may request correction of inaccurate personal information. You may request deletion of your account and associated data. You may withdraw consent for optional data processing at any time.
7. Cookies & Tracking
We use essential cookies for authentication and session management only. We do not use third-party tracking cookies or advertising cookies. Session tokens are stored securely in Valkey with automatic expiration. No cross-site tracking is performed.
8. Children's Privacy
The Platform is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.
9. International Data Transfers
Your data may be processed on servers located in the European Union (Frankfurt, Germany). We ensure appropriate safeguards are in place for any international data transfers in compliance with applicable data protection regulations.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Users will be notified of material changes via email. The date of the last update is displayed at the top of this page.
For privacy inquiries, contact us at [email protected].