Privacy policy

This policy is dated 14 October 2026. The Arabic version governs if the translation differs. The operator is identified as “AI Arabi Hub” at aiarabihub.com. The commercial-registration number and postal address will be published here before any newsletter is sent and before any email is stored. Until then the forms do not keep data, because the server keys are unset.

What we collect

For the letter: email, language, the consent text, its time, the form version, and a hash of the network address rather than the address itself. For a report or a tool suggestion: the fields you fill and an email so we can reply. We do not ask for a phone number or an ID.

Why

The legal basis for the letter is consent. The basis for answering a request is the consent you tick, and the purpose is the request, not marketing. A report does not add you to the letter.

Processors and transfers outside the Kingdom

When enabled, data sits at Supabase, mail goes through Resend, and the site goes through Cloudflare. Those services store data outside Saudi Arabia. We will document the lawful transfer safeguard before the first real write. Analytics, if turned on, are cookieless Cloudflare Web Analytics. There are no ad pixels in this version.

Retention

The proposed period for a closed request is 365 days, then deletion, unless a law requires longer. The clock does not start before storage exists. The public score log does not name a reporter’s email.

Your rights

You can ask for access, a copy, a correction, or deletion via the contact form. We answer within 30 days as the legal ceiling, and the internal target is shorter. You can object to marketing with one-click unsubscribe once mail is sent.

Complaints

You may complain to the Saudi Data and AI Authority (SDAIA) through its official channels at sdaia.gov.sa. This page is not legal advice.