Privacy Policy

This Privacy Policy describes how Laeq365 ("we", "us", "our") collects, uses, and shares information about you when you use our website, mobile applications, and related services (collectively, the "Service").

We are committed to handling personal data responsibly and transparently, in line with applicable data-protection laws including Saudi Arabia's PDPL and, where relevant, the EU GDPR.

Depending on how you interact with the Service, we may collect the following categories of data:

• Account data — name, email, phone number, role, company, and billing details.
• Usage data — log data, device identifiers, browser type, IP address, and pages visited.
• Content you submit — checklists, tasks, reports, signatures, uploaded files, and inspection records.
• Communication data — messages you send through support channels or in-app forms.

We use your data only for the following purposes:

• Providing, maintaining, and improving the Service.
• Authenticating accounts and protecting against fraud or abuse.
• Processing payments and issuing invoices.
• Sending essential service notifications and, when permitted, product updates.

We use cookies and similar technologies to keep you signed in, remember preferences, measure performance, and enhance security. You can disable cookies in your browser settings, but parts of the Service may stop working as expected.

We do not sell your personal data. We share data only with the following categories of recipients:

• Trusted service providers (hosting, payments, email delivery, analytics) under strict confidentiality and data-protection obligations.
• Authorities or regulators, when required by law or to protect our legal rights.
• A successor entity in the context of a merger, acquisition, or sale of assets.

To run Laeq365 reliably we rely on a small number of carefully vetted third-party providers. These providers act as data processors on our behalf, are contractually bound by data-protection obligations, and may only use your data for the specific purpose listed below.

All data exchanged with these providers is transmitted over encrypted (TLS) channels, and sensitive fields (such as phone numbers) are stored in encrypted form.

• Google Cloud Storage — secure cloud storage for uploaded files such as inspection PDFs, signature images and report attachments.
  Provider region: Kingdom of Saudi Arabia — Google Cloud, Dammam . Customer data is stored in this region. Encryption: at-rest and in-transit by default.
• Google OAuth (Sign-in with Google) — optional sign-in via your Google account. We receive only your name, email and Google profile ID — never your Google password.
  Provider region: Global (Google LLC). Authentication is performed end-to-end over HTTPS.
• Google Workspace (Gmail SMTP) — delivery of transactional emails such as welcome messages, invoices and account notifications.
  Provider region: Global (Google LLC). All messages are sent over authenticated TLS.
• Google Gemini API (Generative AI) — powering the in-app AI Quality Assistant: the conversation and the relevant problem context (such as report scores, weak sections and existing actions) are sent to generate analysis and replies.
  Provider region: Global (Google LLC). Sent over HTTPS; not used to train the provider's models.

We review this list periodically and will update it before adding any new subprocessor that handles personal data.

When you use the in-app AI assistant ("Q"), we process the content of your chat together with the context needed to answer it.

• Data processed includes your messages, the problem under discussion, related report scores and section breakdowns, existing corrective actions, and the branch/site context.
• This content is sent to our AI provider (Google Gemini) solely to generate the assistant's analysis and replies. It is not used to train third-party models, and credentials or passwords are never sent.
• Chat messages are stored in your account so you can revisit the conversation, and are deleted when you or your administrator delete the chat or the account.
• The assistant does not learn from or train on your data, does not store or transmit it beyond what is needed to answer a request, cannot access passwords, encrypted, or other sensitive fields, and cannot decrypt protected data. It operates strictly within your account's authorized zone, and the confidentiality of your information is preserved at all times.

The assistant acts only within your own account's scope and limits. Any action it performs (such as creating an action or requesting an inspection) is recorded and attributed to your account. AI usage is metered: each reply the assistant generates consumes one AI token from your plan's allowance.

Please avoid entering unnecessary personal or sensitive information into the chat.

We apply industry-standard technical and organizational measures to protect your data. This includes TLS encryption for all data in transit, AES-based encryption for sensitive fields at rest (such as phone numbers and credentials), hashed and salted passwords, role-based access control, single-session enforcement, and regular security audits. While we follow these best practices, no method of transmission or storage is 100% secure.

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, subject to our legal retention obligations.
• Withdraw consent or object to certain processing activities.

We retain personal data only as long as needed to provide the Service or to meet legal, accounting, or reporting requirements. Once you delete your account, your operational data is fully removed within 60 days unless you restore the account during that period. Invoices and financial-transaction records are kept beyond that period where required for legal, tax, and accounting compliance, detached from your other data.

Laeq365 is not directed to children under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can remove it.

Your data is primarily stored and processed in Google Cloud data centers located in the Kingdom of Saudi Arabia (Dammam region). Where a limited operation requires processing outside this region, we take appropriate safeguards to ensure your data continues to receive a level of protection consistent with this policy and applicable law.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and notify you in-app or by email where appropriate.

For any privacy-related questions or to exercise your rights, please contact us at info@laeq365.com