HomePrivacy Policy
Privacy Policy
1. Who we are
Clevrops ("we", "us") provides AI solutions, automation, websites and online presence services for businesses in Saudi Arabia, the Gulf and Jordan. Clevrops is operated by Mamdouh Almhed in the Kingdom of Saudi Arabia.
We are responsible for the personal data described in this policy. For any privacy question or request, contact us at [email protected].
This policy follows the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.
2. What data we collect
When you contact us (website form, email or WhatsApp): your name, company, country, email address, WhatsApp number, the service you are interested in, and your message. If you send a voice note, we keep its transcript with the conversation.
When you become a client: the details we need to deliver the service, such as your business information, logo and photos you send us, your domain details, billing details and the history of our work together. We do not store card numbers. Card payments are handled by our payment provider.
Public business information: to offer our services to local businesses, we review information that businesses publish themselves on public platforms such as Google Maps: business name, category, location, public business phone number, rating and public reviews. We use it only to prepare a free audit and to contact the business once about our services.
Website usage: basic technical data needed to run and protect the website (for example, data processed by our hosting provider to block attacks). If we enable analytics, we use privacy-friendly tools that do not build advertising profiles.
We do not collect: health data, government ID numbers, passwords to your personal accounts, or data about children.
3. How we use your data
- To reply to your inquiry and provide the service you asked for
- To prepare audits, proposals and preview websites for your business
- To deliver client work, send reports and handle billing
- To contact a business about our services through its publicly listed business number or email (see section 5)
- To keep our services secure and meet legal obligations
We do not sell your data, and we do not use one client's data for another client.
4. AI tools
We use AI tools to help us prepare audits, build websites, draft review replies and answer messages quickly. Messages you send us may be processed by these tools to prepare a reply. Important actions (such as payments and anything published publicly for a client) follow our approval rules. If you ask whether you are talking to an AI system, we will always tell you the truth.
5. Contacting businesses and your right to stop
We may send a business one short message about our services, using the business contact details it has made public. We do not send repeated messages to anyone who does not reply.
You can stop all messages from us at any time by replying "stop" or "إيقاف", or by emailing [email protected]. We will stop immediately and keep only your number or email on a "do not contact" list so we never contact you again.
6. Managing your Google Business Profile (clients)
If you are a client, you may add our business account as a Manager on your Google Business Profile. We never ask for your Google password. We use this access only to do the work you paid for (such as replying to reviews and updating your profile), and you can remove our access at any time with one click.
Our review replies never include a customer's personal details. For clinics, replies never mention any treatment or health information.
7. Who we share data with
We share data only with service providers that help us run Clevrops, and only as needed:
- Website hosting and security (Cloudflare)
- Email (Zoho)
- Messaging (WhatsApp Business Platform by Meta)
- Payments (our payment provider, or your bank for transfers)
- AI and automation tools that help us prepare and deliver our work
- Scraping and data tools used to read public business listings
We may also share data when the law requires it.
8. Data outside Saudi Arabia
Some of our service providers process data outside the Kingdom of Saudi Arabia. When this happens, we use providers that apply appropriate security and contractual protections, and we transfer only the data needed for the service, in line with the PDPL rules on cross-border transfers.
9. How long we keep data
| Data | How long |
|---|---|
| Inquiries that did not become clients | Up to 12 months, then deleted |
| Businesses we contacted that did not reply or said no | Up to 90 days, then deleted (except the "do not contact" list) |
| Preview websites not purchased | Deleted after 14 days |
| Client data | For the duration of the service, then as long as the law requires for invoices and records |
| "Do not contact" list | Kept for as long as needed to respect your request |
10. Your rights
Under the PDPL, you have the right to:
- Know how your data is collected and used
- Access your data and receive a copy
- Correct inaccurate data
- Ask us to delete your data when we no longer need it
- Withdraw your consent at any time
Email [email protected] to use any of these rights. We will reply within 30 days. If you are not satisfied with our reply, you can file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
11. Security
We protect data with access controls, two-factor login on our accounts, encrypted connections (HTTPS) and limited access for the people and tools that need it. No system is perfectly secure, but if a breach affects your data, we will notify you and the authorities as the law requires.
12. Children
Our services are for businesses. We do not knowingly collect data from anyone under 18.
13. Changes to this policy
We may update this policy. The "Last updated" date at the top shows the latest version. Important changes will be announced on this page.
14. Contact
Clevrops, Kingdom of Saudi Arabia
Email: [email protected]