Privacy policy

1. Scope: This policy explains how Qaimah collects, uses, retains and protects the data of its users and of the entities processed through it.

2. Data we collect: (a) account data — name, email address, role and firm name; (b) service data — the trial balance, uploaded files, and the classifications and financial statements derived from them; (c) operational data — sign-in records, IP address and an audit log, for security and accountability; (d) correspondence — whatever you send through the contact form on this site.

3. Purpose of processing: Data is processed solely to deliver the contracted service — preparing and exporting draft financial statements, and operating the wallet and its invoices — and for security, abuse prevention and legal compliance.

4. What we do not do: We do not sell or rent your data, and we do not use your clients' entity data for marketing. Your data is not used to train any third party's AI models.

5. Artificial intelligence: AI is used inside the platform to suggest and classify only — proposing how accounts map to line items — and never produces or alters any figure in the financial statements. Only the account names and the limited context needed for a suggestion are sent to the model provider, and every invocation is logged.

6. Sub-processors: We rely on hosting, payment and email providers to deliver the service. Each is contractually bound to confidentiality and to processing data only on our instructions.

7. Retention: Engagement data is retained while the account is active and for as long as Saudi law and professional working-paper retention requirements demand, after which it is deleted or anonymised.

8. Security: Data is encrypted in transit, sensitive credentials are encrypted at rest, access is restricted by role and by firm, and every sensitive action is written to an append-only audit log.

9. Your rights: You may request access to, correction of, deletion of, or export of your data by contacting us, save for what must be retained by law.

10. Cookies: This marketing site uses functional cookies only (your language preference). The application uses session cookies that are strictly necessary for signing in. We use no advertising cookies.

11. Changes and contact: This policy may be updated; the effective version carries its own date. For any question, use the contact page on this site.

12. Governing law: This policy is governed by the laws of the Kingdom of Saudi Arabia.