Privacy Policy

Who is responsible

Ijtimaa is run by its operator, who is responsible for your data on this service (the “controller” under the Personal Data Protection Law). You can reach us at https://ijtimaa.chat.

When a business uses Ijtimaa to meet its own clients, that business decides what it does with its clients’ details; we process them on its behalf.

What we collect

• Account details: name, email, password (stored only as a one-way hash), time zone, language, and your two-step login settings if you turn it on.
• Booking details that guests give: name, email, time zone, notes and answers to the host’s questions.
• Meetings: times, titles and the room link. Audio and video pass through our server live and are not stored unless the host presses Record.
• Recordings, made only when a host presses Record. Everyone in the meeting sees a “Recording” sign while it runs.
• Meeting chat, poll answers and the whiteboard, saved so the host can see them afterwards.
• Calendar links you connect, and your calendar’s busy times (not event titles or details).
• Technical data needed to run the service safely: IP address, browser type and sign-in times. We use them to stop abuse and keep the service working.

Why we use it

• To provide the service you asked for: booking pages, meetings, emails, reminders and recordings. This is needed to perform our agreement with you.
• To keep accounts and meetings secure, and to prevent fraud and abuse.
• To meet legal obligations.
• We do not sell personal data, show advertising, or use tracking or analytics cookies.

Cookies

We use only the cookies needed to work: one that keeps you signed in, and one that remembers your language. No advertising or tracking cookies.

Where your data is kept

Everything is stored on our own server. We do not use outside cloud storage, analytics or advertising services. Emails are sent through our mail provider, and browser notifications go through your browser maker’s push service (for example Google, Apple, Mozilla or Microsoft) in encrypted form.

Only if you choose to: when you give a mobile number for reminders, the message goes through WhatsApp (Meta) or our SMS provider; when a host connects a Google or Microsoft calendar, we read their busy times from it and add their meetings to it. AI meeting notes are made on our own server; recordings are not sent to any outside AI service. A business that uses webhooks or our API receives the details of bookings made with it in its own systems.

If your data is stored or processed outside the Kingdom of Saudi Arabia, we do so in line with the PDPL rules on transfers and keep the protections described here.

How long we keep it

• Recordings: deleted automatically after 30 days, or sooner when the host deletes them.
• Meeting chat, polls and whiteboards: deleted after 90 days.
• Bookings and meetings: kept while the account exists, so hosts can see their history.
• Accounts: until you delete your account. Database backups are kept for up to 14 days.

Your rights

Under the PDPL you can ask to know what data we hold about you, get a copy, have it corrected, and have it deleted when it is no longer needed. You can withdraw consent where we rely on it. Signed-in users can change their details and delete their account themselves in Account settings. Guests can cancel a booking from the link in their email. For anything else, write to https://ijtimaa.chat and we will reply within 30 days.

You can also complain to the Saudi Data & AI Authority (SDAIA).

Security

Connections are encrypted (HTTPS). Passwords are stored as one-way hashes. Two-step login is available. Access to the server is restricted, and workspaces cannot see each other’s data. If a breach affects your data, we will notify you and the authorities as the law requires.

Children

Ijtimaa is not meant for children under 18. We do not knowingly collect their data.

Changes

If we change this policy in a way that matters, we will say so on this page and, for big changes, by email.