Privacy Policy

Last updated: 3 October 2026 - applies to kamanjat.com and all of its services, pages and official channels

We process your personal data lawfully, transparently and only for the purposes for which it was collected, in accordance with the Saudi Personal Data Protection Law, its implementing regulations and the rules of the competent authority, and in line with the card-data protection standards required by payment service providers. The Arabic version prevails in case of any discrepancy.

1. Controller and definitions

Controller: the provider of the Kamanjat.com service, as identified in the commercial disclosure section of the Compliance page ("we", "the site").
Contact for personal-data matters: admin@kamanjat.com or live chat on the site.
"User" or "you": any visitor, registered user or subscriber.
"Personal data": any data, whatever its source or form, that identifies an individual or makes it possible to identify them directly or indirectly.
"Processing": any operation on personal data by any means, including collection, recording, storage, modification, retrieval, use, disclosure, transfer, blocking and destruction.
"Payment provider": the independent payment service provider or merchant of record that processes a payment, depending on the payment method and country.

2. Data we collect and how

We follow data minimisation and collect only what is needed to provide the service:

Category	Examples	Source
Account data	Name, username, e-mail, mobile number (optional), city/region, password (stored with a one-way hashing mechanism)	You, at registration
Subscription and transaction data	Plan, period, start and end dates, upgrade history, amount and currency, transaction reference, country of payment	The site and the payment provider
Usage and technical data	IP address, browser and device type, operating system, pages and tools used, login times, security and error logs	Automatically during use
Preferences	Favourite stocks, alerts, settings	You, during use
Correspondence	Support, live-chat and e-mail messages	You, when contacting us

Card and bank data: the site does not collect or store full card numbers, card security codes or bank account details. They are entered directly on payment pages hosted by the payment provider, which complies with the Payment Card Industry Data Security Standard (PCI DSS). The site receives only what is needed to confirm the transaction, such as its status, reference, amount, currency, payer e-mail and country of payment.

We do not collect sensitive data (such as health, religious, credit or biometric data) and do not request identity documents unless required by law or by a payment provider for verification, in which case we explain the purpose first.

3. Purposes and legal basis

Purpose	Legal basis
Creating and managing your account, login, providing tools and alerts according to your preferences	Performance of the contract
Activating subscriptions and upgrades, issuing receipts, handling refunds	Contract; legal obligations
Support and handling enquiries and complaints	Performance of the contract
Protecting accounts and detecting credential sharing, fraud and misuse	Legitimate interest, without prejudice to your rights
Tax and accounting requirements and lawful requests	Legal obligations
Improving performance and producing aggregated, non-identifying statistics	Legitimate interest
Marketing messages	Your explicit consent, which you may withdraw at any time

We do not use your data for purposes incompatible with the above. Your personal data is not used to generate the outputs of the analysis and forecasting tools; the AI models work on market data only and their outputs are the same for all users. We may use automated systems to detect fraud and account sharing, and you may object to any action taken on your account and ask for it to be reviewed.

4. Sharing and disclosure

We do not sell, rent or trade your personal data. We share it only as necessary with:

Payment providers: to complete and verify payments, prevent fraud and handle refunds and disputes. A payment provider acting as merchant of record also processes data under its own policy.
Technical service providers: such as hosting, e-mail, analytics and security tools, under contractual confidentiality and purpose-limitation obligations.
Competent government and judicial authorities: where required by law, court order or official request.
A legal successor: if the business is transferred, with continued compliance with this policy and notice to you.

5. Place of processing and transfers outside the Kingdom

Some technical services or payment operations may require limited data to be processed outside the Kingdom of Saudi Arabia. Any international transfer or disclosure is carried out in accordance with applicable legal requirements, including the Regulation on Personal Data Transfer outside the Kingdom, limited to the minimum necessary, and after applying the appropriate basis and safeguards for the transfer as the case requires.

6. Cookies

We use essential cookies to run the site (such as keeping your login session and protecting forms) and analytics cookies to measure usage and improve performance; payment pages may use their own cookies for fraud prevention. You can set your browser to refuse or delete non-essential cookies; disabling essential cookies may prevent login or checkout.

7. Security

HTTPS encryption of connections to the site.
Passwords stored with a one-way hashing mechanism, never in clear text.
Automatic verification of payment notifications by digital signatures before any subscription is activated.
Need-based restriction of administrative access and extra protection layers for control panels.
Monitoring of abnormal use and unauthorised access.

No transmission over the internet can be guaranteed to be completely secure. If a breach affects your data we will take corrective action and notify the competent authority and you within the legal time limits and procedures.

Warning: the site and its staff will never ask for your card details, security code, password or one-time codes sent to your phone. If anyone asks, do not respond and report it to us immediately.

8. Retention and destruction

Data type	Retention period
Account data and preferences	While the account exists, then 12 months after closure or a deletion request
Security and login logs	12 months from creation
Support correspondence	24 months from the last message
Transaction data and accounting and tax records	The statutory period for keeping accounting and tax records
Marketing data	Until consent is withdrawn

After the period ends, data is securely destroyed or anonymised so that it can no longer be linked to you. A minimum of data may be kept longer where needed for an existing dispute or legal procedure, and only for as long as required.

9. Your rights

Under the Personal Data Protection Law you have the right to:

Be informed of the legal basis and purpose of collecting your data.
Access your data and obtain a copy in a clear format.
Rectification of inaccurate, incomplete or outdated data.
Destruction of your data when it is no longer needed, unless there is a legal ground to retain it.
Withdraw consent at any time where consent is the basis of processing, without retroactive effect.
Complain to us first, and to the competent personal-data protection authority in the Kingdom.

To exercise your rights, e-mail us from your registered address at admin@kamanjat.com. We handle requests within thirty days of a complete request; this may be extended by an equal period where the regulations allow, with notice to you of the reason. We may ask for what is needed to verify your identity to protect your account. Exercising your rights is free of charge.

10. Minors

The service is intended for persons aged 18 or over with full legal capacity. We do not knowingly collect data from younger persons and will destroy it if we become aware of it.

11. External links

The site may contain links to or content from third-party sites; we are not responsible for their privacy practices and recommend reviewing their policies.

12. Changes

We may update this policy to reflect legal or service changes and will announce material changes on the site or by e-mail a reasonable time before they take effect. Where a change requires your consent by law, we will ask for it.

13. Contact

For any privacy or personal-data question: admin@kamanjat.com or live chat on the site.