🔹 Privacy Policy
At Xstructure (“we”, “our”, or “us”), your privacy and data security are of the highest importance. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website, products, and related services (“Service”).
By accessing or using Xstructure, you agree to this Privacy Policy and consent to our collection and processing of information in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia.
1. Information We Collect
We collect only the information necessary to provide our services and improve your experience.
a. Information You Provide
Account details: name, email address, and password.
Payment information: billing details required to process transactions (via third-party gateways such as Moyassar).
Content and uploads: data, files, or materials you create or store within your Xstructure account.
Support requests: messages or attachments you submit through our contact forms or help channels.
b. Automatically Collected Information
When you use our Service, we may automatically collect:
Device and browser information
IP address and general location
Usage logs (e.g., login times, actions, feature interactions)
Cookies and session tokens to maintain secure authentication and improve site functionality.
2. How We Use Your Information
We use collected data for the following purposes:
To create, verify, and maintain your account.
To process payments, manage subscriptions, and deliver purchased services.
To send you transactional or account-related notifications.
To improve, personalize, and secure our platform.
To comply with applicable laws, regulations, or law enforcement requests.
To detect and prevent fraud, abuse, or unauthorized access.
We never sell, rent, or trade your personal data to third parties.
3. Payment Processing
All payments are securely handled by authorized third-party payment gateways (e.g., Moyassar) under SAMA and Saudi Central Bank regulations.
We do not store your full payment card information.
Sensitive payment data (like card numbers or CVV codes) are encrypted and processed only by the payment gateway.
We may store payment references, transaction IDs, or billing details for invoicing and verification.
4. Data Retention
We retain user data only as long as necessary to provide our Service or comply with legal obligations.
Upon account deletion, we will delete or anonymize your personal data within 30 days, unless retention is required for legal, accounting, or regulatory reasons.
5. Data Security
We employ strong security measures to protect your information:
HTTPS encryption across the entire platform.
Encrypted storage for sensitive data.
Role-based access controls and internal audit logs.
Continuous monitoring for unauthorized access or data leaks.
Despite these measures, no system is completely secure, and you acknowledge that you use Xstructure at your own risk.
6. Your Rights Under Saudi PDPL
As a user residing in or accessing from the Kingdom of Saudi Arabia, you have the right to:
Access your personal data and request a copy.
Request correction of inaccurate or incomplete information.
Request deletion of your personal data (subject to regulatory retention requirements).
Withdraw consent for specific processing activities, where applicable.
All such requests can be submitted through our Contact Us
page.
7. Cookies and Tracking Technologies
We use cookies and similar technologies to:
Keep you logged in securely.
Analyze site usage and improve performance.
Remember your language and preferences.
You may choose to disable cookies via your browser settings, but this may limit functionality of certain features.
8. Sharing and Disclosure
We may share limited data only in the following cases:
With service providers or contractors assisting in platform operations (under confidentiality agreements).
With payment processors for transaction verification.
When required by law enforcement, court order, or government regulation.
In connection with a business transfer, merger, or acquisition (with notice given to users).
9. International Transfers
While our servers are hosted in secure data centers, your data may be processed outside your country for operational or technical purposes.
We ensure such transfers comply with PDPL and applicable data protection standards.
10. Third-Party Links and Integrations
Our Service may include links or embedded content from third-party websites or APIs (such as analytics, payment gateways, or external tools).
We are not responsible for the privacy practices or content of such third parties, and users are encouraged to review their respective policies.
11. Children’s Privacy
Our Service is not intended for children under 18 years of age.
We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, it will be deleted immediately.
12. Updates to This Policy
We may modify or update this Privacy Policy from time to time to reflect changes in laws, regulations, or our practices.
Any updates will be posted on this page with a new “Effective Date.” Continued use of the Service constitutes acceptance of the updated policy.
13. Contact Information
If you have any questions, complaints, or data access requests, please contact us through our Contact Us
page or via email at support@xstructure.ai.
Effective Date: 01/10/2025
Location: Riyadh, Kingdom of Saudi Arabia