Last updated:
This policy explains how "Codavert Company for Telecommunications and IT" (CR 7055290436) ("Eshada", "we") collects, processes and protects personal data when you use the Eshada platform, in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its regulations.
Account data (name, email, hashed password), organization data (name, sector, branches, team), operational data entered by the organization or its customers through the complaint portal (complaint text, attachments, contact details the customer chooses to provide), and technical data (network address, browser type, access logs).
Providing and operating the service, managing complaints, compensation and satisfaction follow-up on behalf of the subscribing organization, protecting the platform from unauthorized use, and meeting legal requirements.
For data of a subscribing organization's customers, the organization is the controller and Eshada acts as processor under its instructions and the data processing agreement. For user account data, Eshada is the controller.
We do not sell personal data. We may use service providers (hosting, infrastructure) bound by confidentiality. No integration with external platforms is enabled without the organization's authorization and verification of its validity.
We retain data for the subscription term and as long as needed afterwards to meet legal obligations, then delete or anonymize it. Detailed retention periods are defined in the subscription agreement according to each category of data.
You may access, correct, request deletion or restriction of, and object to the processing of your data as provided by law. To submit a request, contact us via the official email info@codavert.com.
We apply technical and organizational controls including transport encryption, per-organization data isolation, role-based access and an audit log of sensitive operations.
We may update this policy. The updated version is published on this page with its last-updated date.
