Privacy Policy

Almasar — almasarerp.com · Last updated: 27 August 2026

This policy explains how Almasar collects, uses and protects your data when you use our cloud accounting and e-invoicing platform and our website.

1 Data we collect

• Account data — name, email, phone, company name, VAT registration number.
• Accounting data — invoices, journal entries, customers, suppliers, inventory.
• Billing data — subscription history and amounts. We do not store card numbers; a licensed payment gateway processes them.
• Technical data — IP address, browser type, access logs.
• Marketing measurement data — Google click identifier (GCLID), traffic source, collected with your consent.

2 How we use it

To operate the platform, provide support, bill subscriptions, improve the product using aggregated non-identifying analysis, measure the performance of our own advertising, and meet Saudi regulatory obligations including ZATCA e-invoicing requirements.

3 Google data we access

We use the Google Ads API to manage only our own Almasar advertising account, through an internal tool operated solely by the account owner.

• We do not access advertising accounts belonging to clients or any third party.
• We do not offer this tool to third parties and do not resell access to it.
• Data received from Google is used exclusively for internal reporting and optimising our own ad spend.
• Google data is never shared externally and is never used for third-party targeted advertising.
• Our use of Google user data adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• Offline conversions uploaded to Google Ads are matched by GCLID only, with no personally identifiable customer information transmitted.

4 Cookies

We use strictly necessary session cookies and optional measurement cookies. Declining the optional ones does not affect platform functionality.

5 Sharing

We share the minimum necessary with our hosting provider, our payment gateway, and ZATCA where e-invoicing integration applies. Each is contractually bound to protect the data and use it only to deliver the service.

6 Retention

Accounting records are retained for the period Saudi regulations require (not less than six years for tax records). After a subscription ends, your data remains available for export for 90 days, then is deleted or anonymised.

7 Security

TLS in transit, encrypted periodic backups, least-privilege access control, and credentials stored as server environment variables — never in source code.

8 Your rights

You may access, correct, export or request deletion of your data, and withdraw consent to optional processing. Contact [email protected]; we respond within 30 days.

9 Children

Our services are for businesses and are not directed at anyone under 18. We do not knowingly collect their data.

10 Changes

We may update this policy; the date at the top reflects the latest version. Material changes are notified by email.

11 Contact

Terms of Service →