1. Data Controller and Jurisdiction
The Smart Professional Passport platform operates in the Kingdom of Saudi Arabia. Personal data is collected and processed under the provisions of the Saudi Personal Data Protection Law (PDPL).
Privacy Notice
How Smart Professional Passport handles your personal data under the Saudi Personal Data Protection Law (PDPL).
Provisional NoticeThis provisional notice reflects current Gate A architecture. The final bilingual legal privacy notice will be reviewed by the DPO and legal counsel prior to Gate B production release.
2. Lawful Basis and Purpose-Bound Processing
Data is processed strictly according to your explicit, granular consent. Core service consent is required to maintain your account; additional features such as AI parsing and marketing are independently selectable and withdrawable at any time.
3. AI Processing and Pseudonymisation
AI extraction tools operate on pseudonymised data through a secure orchestration layer. AI models never make automated verification decisions or assign verified status.
4. Data Retention and Account Lifecycle
Personal data is retained only as long as necessary for the platform's stated purposes. Deactivated accounts remain in a protected state for 6 months before scheduled permanent deletion.
5. Your Rights as a Data Subject
You retain full rights under the PDPL to access your data, request rectification, withdraw optional consents, or request account deactivation.