Privacy Notice

1. Who we are and scope

ArabData is a platform for discovering stores and small and medium-sized businesses that fit what you sell across Arab markets. This notice applies to website visitors, account and workspace users, and individuals whose professional information may appear in ArabData.

2. Categories of data we process

• Account data: name, work email, authentication and session information.
• Workspace data: membership, roles, lists, saved searches, reveals, exports, and credit usage.
• Business profile data: company name, domain, website, sector, category, country, and professional metadata.
• Professional contact data: email, phone, and WhatsApp associated with a business or professional role.
• Usage and security data: technical logs and security events needed to protect the service and prevent abuse.
• Privacy requests, support requests, and legal communications.

3. Sources of business and professional contact data

We may obtain business and professional contact information from company websites and publicly accessible business sources, public registries or directories where lawful, public professional pages, information submitted directly to ArabData, and our verification and update processes.

Public availability does not by itself remove information from data-protection law. We apply the requirements of applicable law to collection, use, and disclosure.

4. Why we use data and lawful basis

We use data to provide the service, secure accounts, operate search and filtering, verify business and contact information, prevent duplication and fraud, perform authorized reveals, manage billing and credits, respond to requests, comply with law, and improve accuracy.

The lawful basis depends on jurisdiction and context and may include performance of a contract, legal obligation, valid consent where required, legitimate interest or legitimate purpose where permitted, or another basis allowed by law. We do not use “legitimate interest” as a substitute where applicable law requires consent.

5. Customer access is not marketing consent

6. How data is disclosed

• To authorized workspace members according to roles and permissions.
• To ArabData customers when an authorized professional-contact reveal is performed.
• To service providers acting for us under appropriate data-protection obligations.
• Where required by law or valid legal process.

Customer access does not authorize resale or republication of the ArabData database. Those uses are governed by the Terms and Acceptable Use Policy.

7. International data transfers

The service may involve cross-border processing or storage. Where cross-border transfer rules apply, we use the mechanism or safeguards required by law and assess localization, protection level, necessity, and proportionality before transfer.

8. Retention and accuracy

We retain data only as long as needed for stated purposes, legal and security obligations, and dispute resolution. We also work to correct or remove inaccurate professional data when an error is verified and may retain a limited suppression record to prevent re-adding information for a person who requested removal.

9. Sensitive data and minors

ArabData is not designed to collect or commercialize health, biometric, genetic, racial, religious, political, criminal, sexual-life, government-ID, or personal financial data, and the service is not directed to minors. If such information is detected in the contact-data pipeline, it must be isolated or removed according to law and policy.

10. Your rights

Depending on applicable law, your rights may include access, correction, deletion or erasure, objection, restriction, withdrawal of consent, portability, information about processing, and complaint to a regulator.

You may exercise these rights even if you do not have an ArabData account. See Data Rights & Removal.

11. Security and breaches

We use technical and organizational controls to protect data, including workspace isolation, access controls, auditability, and protection of contact information from unauthorized access. Where a breach triggers notification duties, we follow applicable reporting requirements.

12. Cookies and local storage

The site uses necessary cookies to operate the service, authentication, session and workspace management, and to store your consent and language preferences. We also use Google Analytics with your explicit consent to measure traffic and trial/subscription milestones with pseudonymous measurement identifiers, without sending form inputs or contact values. Linking results to ads requires a separate optional choice in cookie settings. You can manage your preferences or withdraw consent at any time via the “Cookie settings” link in the website footer. See the Cookie Policy for the complete inventory and details.

13. Optional ArabData AI assistant

When you submit a message to ArabData AI Assistant, your message and limited conversation context are sent to Google Gemini to generate a reply. No separate consent popup is displayed before sending; using the assistant is optional. This optional assistant is for general product and subscription questions only; private account and payment records are not automatically sent. ArabData does not create a new permanent chat-history table, but Google may process and retain the submitted content under its own terms and privacy policy.

Under the free Gemini service tier, submitted prompts and replies may be used to improve Google products and may be reviewed. Do not enter personal information, secrets, payment card data, or confidential financial details. Technical screening reduces risk but cannot reliably detect all sensitive data. Pricing and regular support remain available without using the AI assistant.

14. Changes and contact

We may update this notice as the service or law changes. We will display the updated effective date and provide additional notice where required.

For privacy questions or data rights requests, you can contact us directly at info@arabdata.net.