We Protect Your Data
and Respect Your Privacy

We collect only the data necessary to operate the platform and deliver our services at the highest quality.

• ✓ Account data: Full name, email address, phone number, username, and BCrypt-encrypted password.
• ✓ Business data: Store name, brands, branches, commercial registration, tax number, and location addresses.
• ✓ Subscription & payment data: Plan details, invoices, payment history, and contract data.
• ✓ Usage data: Login logs, IP addresses, device type, operating system, and preferred language.
• ✓ Images & documents: Profile photos, brand logos, uploaded business documents and contracts.
• ✓ Employee data: Employee names, job roles, departments, and their login credentials.

We use your data exclusively for legitimate purposes related to operating the platform and delivering its services.

• ✓ Operating the platform and delivering all its services and features correctly.
• ✓ Managing your account, employee permissions, and configuring job roles.
• ✓ Processing subscriptions, issuing invoices, and tracking payment records.
• ✓ Sending important operational notifications such as subscription renewals and security alerts.
• ✓ Improving platform performance and resolving technical faults and software issues.
• ✓ Complying with applicable legal and regulatory requirements in Saudi Arabia.

We never sell your personal data. We share it only in the narrow cases specified below.

• ✓ Technical service providers: Trusted partners who help operate the platform (cloud hosting, email services, payment gateways), all bound by strict confidentiality agreements.
• ✓ Legal requirements: When a formal legal request or court order is issued by a competent government authority under applicable Saudi law.
• ✓ Rights & safety protection: When strictly necessary to defend the rights of the company or its users, or to protect their safety.
• ✓ Business transfer: In the event of a merger or acquisition, users are notified in advance and data protection continues under this policy.

We apply a multi-layered security system to ensure your data is protected at all times.

We retain your data as long as your account is active or as long as necessary to provide our services to you.

Saudi Arabia's Personal Data Protection Law (PDPL) grants you full rights over your data.

We use only essential cookies for login session management and saving preferences. We do not use marketing tracking cookies.

• ✓ Session cookies: Maintain your login state and expire automatically when the browser is closed.
• ✓ Preference cookies: Store your settings such as preferred language and interface appearance.

Ecomflow is intended exclusively for business entities and adults (18 years and older).

We do not knowingly collect children's data. If you discover that a child has submitted data without a guardian's permission, please contact us immediately at support@ecomflowksa.com and we will delete that data promptly.

We may update this policy periodically. We will notify you of material changes before they take effect.

• ✓ Material changes are notified via registered email 30 days before taking effect.
• ✓ Update notifications appear in-app on first login after the modification.
• ✓ Continued use of the platform after the effective date constitutes explicit acceptance of the revised policy.

For any questions about your privacy or data, our team is ready to help.