Sign in Book a walkthrough
Legal

Privacy Policy

Last updated: 01/01/2026

Mosaic Elite (شركة موزايك إيليت), Commercial Registration 7052769945, operates Malek365 in compliance with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations, as overseen by the Saudi Data and Artificial Intelligence Authority (SDAIA).

This Privacy Policy explains what information we collect, why we collect it, how we protect it, and what rights you have.

1. Who We Are

  • Data Controller: Mosaic Elite, Jeddah, Saudi Arabia
  • CR No.: 7052769945
  • Privacy Contact: privacy@malek365.com · +966 59 363 6777

For data you upload about your tenants, we act as a Data Processor on your behalf. See our Data Processing section for details.

2. Information We Collect

From Subscribers (account holders):

  • Account information: name, email, phone, organization name, role.
  • Billing information: business name, VAT number, commercial registration number, billing address (collected for ZATCA-compliant invoicing).
  • Authentication data: hashed passwords, two-factor authentication credentials.
  • Usage data: log entries, IP address, browser type, actions taken in the application.
  • Support communications: messages, tickets, and any attachments you send us.

Uploaded by Subscribers (about tenants and properties):

  • Tenant identifiers (name, contact, ID/CR/VAT numbers where provided).
  • Lease contract terms and payment history.
  • Property details and uploaded documents.

We treat this content as belonging to the Subscriber. We process it only to provide the Service.

3. Why We Collect It

We use information to:

  • Provide and improve the Service.
  • Authenticate users and protect accounts.
  • Issue invoices and comply with tax (ZATCA) and accounting obligations.
  • Send service-related notifications (renewals, system updates, security alerts).
  • Respond to support requests.
  • Detect and prevent fraud or abuse.
  • Produce anonymized, aggregated insights for product improvement and market research. See Section 6.

4. Legal Basis for Processing

We process personal data on the following bases under PDPL:

  • Performance of a contract (delivering the subscribed Service).
  • Legal obligation (tax, regulatory, and record-keeping requirements).
  • Legitimate interest (security, fraud prevention, service improvement).
  • Consent (where required, such as marketing communications or participation in aggregated insights).

5. Data Sharing

We do not sell your personal data. We share information only with:

  • Service providers who help us run Malek365 (cloud hosting, email delivery, AI inference) under written confidentiality and data-protection obligations.
  • Government or regulatory authorities when required by Saudi law.
  • A successor entity in the event of a merger, acquisition, or reorganization, with continued protection of your data.

A current list of subprocessors is available on request.

6. Aggregated and Anonymized Data

We may use Subscriber data in anonymized and aggregated form to:

  • Improve the Service.
  • Produce industry benchmarks and market research.

Aggregated data is created so that no individual person, tenant, contract, property, or organization can be identified. It is generated only from Subscribers who have separately opted in to data aggregation in their account settings. See our Data Processing section.

We do not publish names, identifiers, contract values tied to specific parties, or any data that could reasonably re-identify a tenant, landlord, or property.

7. Data Storage and Security

  • Data is hosted on secure cloud infrastructure with industry-standard encryption in transit (TLS) and at rest where applicable.
  • Sensitive identifiers are protected with additional safeguards.
  • Access is restricted to authorized Mosaic Elite personnel on a need-to-know basis.
  • We follow reasonable technical and organizational measures to prevent unauthorized access, loss, or disclosure.

No system is perfectly secure. In the event of a personal data breach affecting your information, we will notify you and the competent authority in accordance with PDPL requirements.

8. Data Retention

We keep:

  • Active account data: for the duration of your subscription.
  • Billing and invoice records: for the period required by Saudi tax and commercial law (currently a minimum of 6 years).
  • Account data after cancellation: for up to 30 days for export, then deleted, except where retention is legally required.
  • Anonymized aggregated data: indefinitely (no longer personal data).

9. Your Rights

Under PDPL, you have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data, subject to legal retention obligations.
  • Object to or restrict certain processing.
  • Withdraw consent where processing is based on consent.
  • Receive your data in a portable format.
  • Lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

To exercise any of these rights, contact us at privacy@malek365.com. We will respond within 30 days.

10. International Transfers

Where data is processed or stored outside the Kingdom of Saudi Arabia, we ensure protections consistent with PDPL requirements through contractual safeguards with our service providers.

11. Cookies and Similar Technologies

Our website and application use cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings; disabling them may affect parts of the Service.

12. Children

Malek365 is a business tool not intended for use by anyone under 18. We do not knowingly collect personal data from minors.

13. Changes to This Policy

We may update this Policy from time to time. Material changes will be notified by email and posted on this page with a revised "Last updated" date.

14. Contact

Privacy questions, requests, or complaints:
privacy@malek365.com · +966 59 363 6777
Mosaic Elite, Al-Hasibi, Al-Baghdadiyah Al-Gharbiyah, Jeddah, Saudi Arabia