Privacy Policy

Last updated: 2026-05-05

This Privacy Policy explains how RasedPro (“we”, “our”, or “us”) collects, uses, and protects your personal data when you use the RasedPro web application, mobile app, and related services (the “Service”). By using the Service, you agree to the practices described here.

1. Who we are

RasedPro is the data controller for personal data processed by the Service. Our primary jurisdiction is the Kingdom of Saudi Arabia, and our processing is governed by the Saudi Personal Data Protection Law (PDPL) and applicable regulations issued by the Saudi Data & AI Authority (SDAIA).

2. Data we collect

We collect the following categories of personal data:

• Account data: name (English and Arabic), email address, hashed password, role assignments, and authentication tokens.
• Employment data (employees only): employee number, national ID or Iqama number and expiry, nationality, hire date, job title, department, manager, salary components, contract details, and employment status.
• Contact data: phone number, personal email, work email, emergency contact, date of birth, bank account / IBAN.
• Attendance and location data: clock-in and clock-out timestamps. If your device permits and you choose to enable location services, approximate GPS coordinates at clock-in and clock-out are collected for attendance verification.
• Leave and HR records: leave requests, approvals, and balances; performance reviews; payroll items; signed documents and e-signatures.
• Notifications: device push tokens (when you enable mobile push notifications) and notification read state.
• Operational data: audit logs (who did what, when), IP address, user agent, and timestamps. These help us secure and troubleshoot the Service.

3. How we use your data

We use personal data to:

• provide the Service's core HR, payroll, attendance, leave, and approval workflows;
• authenticate users and protect your account from unauthorized access;
• send transactional emails (account invitations, password resets, leave updates, notifications);
• send mobile push notifications when you enable them;
• comply with Saudi labor law obligations (e.g., end-of-service calculations, GOSI), and other applicable legal requirements;
• maintain audit trails required by your employer's internal compliance and by regulators;
• improve the Service's reliability, security, and user experience.

4. Legal basis (PDPL Article 6)

Where Saudi PDPL applies, we process your data based on: (a) a contract between your employer (the tenant) and RasedPro; (b) compliance with legal obligations such as Saudi labor law and tax/social-security regulations; (c) the legitimate interest of your employer in operating an HR system; and, where applicable, (d) your consent (for optional features such as mobile push notifications and location-based attendance).

5. Who we share data with

We do not sell your personal data. We share data only with parties that need it to deliver the Service:

• Your employer (the tenant organization): HR managers and authorized administrators within your organization can access your employment data, attendance, leave, and audit records.
• Email delivery: Resend (resend.com) processes outbound transactional emails on our behalf.
• Push notifications: Expo (expo.dev) delivers mobile push notifications to your device.
• Hosting: our infrastructure runs on cloud hosting providers operating within or near the Middle East region. Database backups (when configured) are encrypted at rest.
• Legal authorities: when compelled by valid Saudi legal process or to protect rights, property, or safety.

6. Data retention

We retain personal data for as long as your employer's tenant remains active. Specifically:

• Account data: retained while your account is active. After self-service deletion or deactivation, your login is disabled and we soft-delete the user record. HR records (employment history, attendance, leave, payroll) are preserved on the employer's tenant for the period required by Saudi labor law (typically a minimum of 5 years after end of employment).
• Audit logs: retained for at least 12 months for security and compliance.
• Invitation tokens: deleted automatically 90 days after consumption or revocation.

7. Your rights

Under Saudi PDPL and applicable laws, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data through your employer's HR admin or by contacting us.
• Delete your account: you can self-delete from Settings → Danger zone on the web app, or More → Delete account on the mobile app. Self-deletion disables your sign-in, removes role assignments, and unlinks you from your employee record. HR records remain in the tenant per item 6.
• Withdraw consent for optional features such as push notifications and location-based attendance.
• Object to certain types of processing, where permitted by law.
• Lodge a complaint with SDAIA or the relevant supervisory authority if you believe your data is mishandled.

To exercise any right, email privacy@rasedpro.com.

8. International transfers

Where personal data is transferred outside the Kingdom of Saudi Arabia, the transfer is governed by Saudi PDPL Article 29 and any binding regulations issued by SDAIA. We require receiving parties to provide appropriate safeguards.

9. Children

The Service is intended for adult employees of organizations that have contracted withRasedPro. We do not knowingly collect data from anyone under the age of 18. If you believe a child's data has been collected, contact us at privacy@rasedpro.com and we will delete it.

10. Security

We use industry-standard technical and organizational measures to protect personal data, including encryption in transit (TLS/HTTPS), bcrypt password hashing, role-based access control, audit logging, and least-privilege deployment practices. No system is perfectly secure; if you suspect unauthorized access to your account, contact us immediately.

11. Cookies and similar technologies (web)

The web application uses essential cookies to maintain your authenticated session. We do not use third-party advertising, analytics, or tracking cookies in the Service.

12. Changes to this policy

We may update this Privacy Policy. The “last updated” date above will change. Material changes will be communicated via email or in-app notification.

13. Contact us

Privacy questions: privacy@rasedpro.com
General support: support@rasedpro.com