Privacy Policy - Mobile App

Last updated: September 19, 2024

**Important Notice:** The Sdq Digital Signature Solution is designed for use by authorized individuals within client companies. User accounts are created and managed by company administrators, not through public sign-up.

Sdq is committed to protecting your privacy while providing a secure and efficient Digital Signature Solution. This Privacy Policy explains how we handle information when you use our Sdq Digital Signature Solution mobile app for creating, managing, and verifying digital signatures on documents.

1. Information We Handle in Our Digital Signature Solution

Our Digital Signature Solution processes the following types of information:
* User account information (managed by your company administrator)
* Documents and files you upload or sign using our Digital Signature Solution
* Digital signatures you create, including signature metadata, certificates, and timestamps
* Document workflow information, including approvals, rejections, and audit trails
* Usage data related to your interactions with the Digital Signature Solution
* Device information necessary for security and functionality
* Authentication credentials and access logs

2. How We Use Your Information in Our Digital Signature Solution

We use the information to:
* Provide and maintain the core functionality of our Digital Signature Solution, including signature creation, verification, and document management
* Process and manage digital signature workflows, ensuring the integrity and authenticity of signed documents
* Provide a more convenient user experience by saving and pre-filling form data for future uploads
* Authenticate your access and manage permissions within the Digital Signature Solution
* Store user input data (Upload Form) to improve your experience and ensure ease of use
* Process file uploads, including PDFs and images, securely
* Enable profile editing, including changing your profile picture
* Improve the performance and user experience of our Digital Signature Solution
* Comply with legal obligations related to digital signatures and enforce our terms of service
* Maintain audit trails for legal compliance and security purposes

3. Legal Basis for Processing

We process your information based on:
* Contractual necessity for providing our digital signature services
* Legal obligations under applicable e-signature laws and regulations
* Legitimate business interests in maintaining service security and functionality
* Consent, where specifically required by law

4. Information Sharing and Storage in Our Digital Signature Solution

Your information within our Digital Signature Solution:
* Is stored securely on our servers located in Saudi Arabia
* Uses encryption to protect the integrity of your digital signatures and documents
* May be shared with other authorized users within your company as necessary for document signing workflows
* Is not sold or shared with third parties for marketing purposes
* May be accessed by our service providers who assist in operating and maintaining our Digital Signature Solution, under strict confidentiality agreements
* May be disclosed if required by law or to respond to legal process, particularly in matters related to the validity of digital signatures

5. Data Security and Retention

**Security Measures:**
* Industry-standard encryption for data in transit and at rest
* Secure certificate management and storage
* Regular security audits and monitoring
* Access controls and authentication protocols
* Tamper-evident storage of signed documents

**Retention Periods:**
* Signed documents and audit trails: As required by applicable laws and your company policies
* User account information: For the duration of your company's contract with us

6. Digital Signature Compliance

Our solution complies with:
* Saudi Arabia's electronic transaction regulations
* International e-signature standards
* Digital signature timestamp requirements
* Electronic evidence preservation standards
* Cross-border signature validity requirements where applicable

7. Your Rights and Choices

You have the right to:
* Request access to your personal data
* Request correction of inaccurate data
* Request deletion of your data (through your company administrator)
* Object to certain data processing
* Export your data in a portable format
* Clear saved form data within the app settings

To exercise these rights, contact your company administrator or reach out to us directly.

8. iOS Specific Provisions

Our app:
* Does not collect or use IDFA (Apple's Identifier for Advertisers)
* Allows users to delete locally stored data through app settings
* Requires permissions only necessary for core functionality
* Does not share data with third parties for tracking purposes
* Complies with Apple's App Store guidelines for privacy and data handling

9. Additional Important Information

* Cookies and Local Storage: We use local storage only for essential app functionality and user preferences
* Children's Privacy: Our service is for business use only and not intended for users under 18
* International Transfers: Data is primarily stored and processed in Saudi Arabia
* Third-Party Services: We use essential service providers for infrastructure and security, bound by strict confidentiality agreements
* Changes to This Policy: We will notify users of significant changes through the app

10. Contact Us

If you have any questions about this Privacy Policy or our Digital Signature Solution, please contact us at:

Sdq  
Email: Info@sdq.sa  
Address: Building No. 3379, Nahdat Al Sharq Street, Al-Salama District  
P.O.Box 23437  
Jeddah - Saudi Arabia (SA)