Privacy Policy

Last updated: [DATE]

Template prepared for the SAHA platform. Replace the highlighted fields and have it reviewed by a UAE-qualified lawyer before launch. This is not legal advice.

1. Who we are

SAHA is operated by [Company legal name], licence no. [licence], [registered address, emirate / free zone] (“we”, “us”). We are the controller of the personal data described here. Contact our privacy team at [privacy@yourdomain].

2. What we collect

• Account data — name, email, password (stored only as an Argon2id hash), company, job title, industry, a short description of your work, optional photo and bio.
• Location — the area you choose or, if you allow it, your device GPS position. Other members only see an approximate distance (rounded to about 1 km); exact coordinates are never shown to them. You can turn location sharing off at any time.
• Content — posts, comments, rooms you open or join, chat messages and reports you file.
• Wallet & payments — top-ups, fees, transfers and payouts. Card and PayPal details are entered directly on PayPal’s PCI-DSS certified checkout; we never receive or store card numbers. For payouts we store your PayPal email or IBAN in encrypted form.
• Technical data — IP address, browser type, sign-in times and security logs, used to protect accounts and prevent fraud.

3. Why we use it

• To provide the service: show your profile, connect you with people nearby, notify you of rooms, run chats and the wallet (performance of our contract with you).
• To keep SAHA safe: fraud prevention, moderation, security monitoring and audit logs (legitimate interest and legal obligations).
• To comply with law, including financial record keeping.
• To send optional news, only if you opted in (consent — withdraw any time in Account settings).

4. Who we share it with

Other members see your public profile (name, company, title, work, area, approximate distance). We share data with service providers who process it for us under contract: our hosting provider [host name, country], PayPal (payments and payouts), and our email provider [SMTP provider]. We do not sell personal data. We disclose data to authorities only when legally required.

5. International transfers

Some providers (e.g. PayPal) may process data outside the UAE. Where that happens we rely on the safeguards permitted under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and its implementing rules.

6. How long we keep it

• Profile and content: while your account is active. Deleting your account erases them.
• Financial records: kept in anonymised form for [5] years for accounting and legal compliance.
• Security and audit logs: up to 3 years.

7. Security

Passwords are hashed with Argon2id; payout details and payment credentials are encrypted at rest; all traffic uses HTTPS; staff access requires two-factor authentication, is limited by role and is logged. If a breach affects your data we will notify you and the UAE Data Office as required by law.

8. Your rights

You can access, correct, download (portability), restrict or delete your data, object to processing and withdraw consent. Most of this is self-service in Account & privacy; for anything else email [privacy@yourdomain]. We reply within 30 days.

9. Cookies

We only use strictly necessary cookies: a session cookie that keeps you signed in and a security token that protects forms (CSRF). No advertising or tracking cookies.

10. Age

SAHA is for professionals aged 18 and over. We do not knowingly collect data from minors.

11. Changes

We will notify you in the app before material changes take effect.