Privacy Policy

1. Introduction

Bilytica ("we", "our", "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store and protect your information under the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19 of 1443H) and its implementing regulations. Where we process personal data of individuals outside Saudi Arabia, we also observe the relevant international data protection requirements that apply to that processing.

Bilytica is a Saudi Data & AI Company headquartered at Al Nahrwani District, Riyadh, Saudi Arabia. For data protection inquiries, contact us at privacy@bilytica.com.

2. Data We Collect

We may collect the following categories of personal data:

• Identity Data: Full name, job title, company name
• Contact Data: Email address, phone number, postal address
• Technical Data: IP address, browser type, device information, cookie identifiers
• Usage Data: Pages visited, time on site, referral source
• Communication Data: Content of messages sent via our contact forms

3. How We Use Your Data

We process personal data for the following purposes:

• Responding to inquiries and providing customer support
• Delivering AI consulting, analytics, and automation services
• Sending relevant communications about our services (with consent)
• Improving our website and user experience
• Complying with legal obligations under Saudi law

4. Legal Basis for Processing under PDPL

We process personal data based on:

• Consent: When you submit a contact form or subscribe to communications
• Legitimate Interest: For business analytics and service improvement, where permitted under PDPL
• Contractual Necessity: To deliver services you have engaged us for
• Legal Obligation: To comply with PDPL, its implementing regulations, and NDMO requirements

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, typically no longer than 3 years after your last interaction with us. Data required for legal compliance may be retained longer as required by Saudi law.

6. Data Sharing & Cross-Border Transfers

We do not sell your personal data. We may share data with:

• Service Providers: Cloud hosting, analytics, and communication platforms that process data on our behalf
• Legal Authorities: When required by Saudi law or court orders
• Business Partners: Only with your explicit consent for joint engagements

Personal data of Saudi residents is stored within Saudi Arabia by default. Any transfer outside Saudi Arabia is made only where PDPL's cross-border transfer conditions are met, including an adequate level of protection, and only for data whose classification permits such a transfer.

7. Data Security

We implement industry-standard security measures including encryption (TLS 1.3), access controls, regular security audits, and ISO 27001 / ISO 27701 certified information security practices to protect your data.

8. Your Rights

Under PDPL, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, contact us at privacy@bilytica.com.

9. Cookies

Our website uses essential cookies for functionality and optional analytics cookies to improve user experience. You can manage cookie preferences through your browser settings. We do not use cookies for advertising or tracking across third-party sites.

10. Saudi PDPL Compliance and Data Residency

As a Saudi-headquartered company, we comply with the Saudi Personal Data Protection Law (Royal Decree M/19, 1443H) and its implementing regulations. Our data governance practices align with National Data Management Office (NDMO) standards. Data is classified and hosted according to that classification, with Saudi-resident personal data stored within Saudi Arabia unless the cross-border transfer conditions under PDPL are met.

11. Children's Privacy

Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated revision date. We encourage you to review this page regularly.

13. Governing Law and Language

This Privacy Policy is governed by the laws of the Saudi Arabia. Where this policy is published in both Arabic and English, the Arabic text is the governing reference in the event of any discrepancy.

14. Contact Us

For privacy-related inquiries or to exercise your data rights:

• Email: privacy@bilytica.com
• Phone: +966 54 597 3047
• Address: Bilytica, Al Nahrwani District, Riyadh, Saudi Arabia