Privacy Policy
Your privacy matters to us. Learn how Gray House protects your personal and financial data in compliance with Saudi Personal Data Protection Law (PDPL) and international standards.
Effective Date: January 1, 2026
Introduction
Gray House Fintech Solutions LLC ("Gray House", "we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, applications, and services (collectively, the "Services").
We operate in accordance with the Saudi Personal Data Protection Law (PDPL) issued by Royal Decree No. M/19 dated 09/02/1443H, as well as applicable international data protection regulations including the General Data Protection Regulation (GDPR) for our European users.
By using our Services, you consent to the collection and use of information in accordance with this Privacy Policy. If you do not agree with this policy, please do not use our Services.
Information We Collect
Personal Information
- Full name and contact details (email, phone number, address)
- National ID or Iqama number (for identity verification)
- Date of birth and nationality
- Job title and employer information
- Account credentials and authentication data
Financial Information
- Bank account and transaction details
- Tax identification numbers (CR, VAT number)
- Invoice and payment information
- Financial statements and accounting records
- Credit card information (processed securely via PCI-compliant providers)
Usage and Technical Information
- IP address and device identifiers
- Browser type and operating system
- Pages visited and time spent on our platform
- Cookies and similar tracking technologies
- Log files and error reports
How We Use Your Information
Service Delivery
To provide, maintain, and improve our bookkeeping, tax, and CFO services.
Security & Compliance
To verify identity, prevent fraud, and ensure ZATCA compliance.
Communications
To send service updates, tax deadline reminders, and marketing communications.
Analytics & Improvement
To analyze usage patterns and enhance our platform functionality.
Data Sharing and Disclosure
We do not sell or rent your personal information to third parties. We may share your data only in the following circumstances:
Service Providers
We engage trusted third-party service providers for payment processing, cloud hosting, and customer support. These providers are bound by strict confidentiality agreements and data protection requirements.
Legal Requirements
We may disclose information when required by law, including to ZATCA, Saudi authorities, or to protect our legal rights and the safety of our users.
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity with appropriate safeguards.
With Your Consent
We may share information with third parties when you have given explicit consent for specific purposes.
Data Security
We implement industry-leading security measures to protect your data:
Encryption
AES-256 encryption for data at rest and TLS 1.3 for data in transit.
Access Controls
Multi-factor authentication and role-based access controls.
Regular Audits
Annual SOC 2 Type II audits and continuous security monitoring.
Data Localization
Saudi customer data stored within the Kingdom, complying with PDPL requirements.
Your Rights
Under the Saudi Personal Data Protection Law and GDPR, you have the following rights:
Right to Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data under certain circumstances.
Right to Object
Object to processing of your data for direct marketing purposes.
To exercise your rights, please contact us at privacy@Gray House.com or through your account settings.
We will respond to all requests within 30 days in accordance with PDPL requirements.
Questions About Privacy?
If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer.
Gray House Fintech Solutions LLC | Riyadh, Kingdom of Saudi Arabia