BrainSAIT ← Back to Home

Privacy Policy

Last updated: May 25, 2026 · PDPL & GDPR Compliant

1. Who We Are

BrainSAIT LTD ("BrainSAIT", "we", "us") provides AI-native healthcare automation and business verification services through brainsait.org and related domains. We are headquartered in the Kingdom of Saudi Arabia.

2. Data We Collect

  • Account data: Name, email, phone, company name, API keys.
  • Usage data: API calls, request timestamps, IP addresses, browser metadata.
  • Verification data: Commercial Registration numbers, national IDs (when submitted for verification).
  • Analytics data: Page views, session duration, referral source (via Cloudflare Web Analytics — no cookies by default).

3. How We Use Your Data

  • Provide and improve our services (Wathq API, TrustOS, Trust Layer).
  • Process verification requests against Saudi government APIs (Wathq, Etimad).
  • Send service-related communications (not marketing without consent).
  • Comply with Saudi legal requirements (NCA, PDPL, SDAIA guidelines).

4. Data Sharing

We do not sell your data. We share data only with:

  • Government APIs: Wathq, Etimad, NPHIES — as required to fulfill verification requests.
  • Cloud infrastructure: Cloudflare (data processed in Saudi Arabia and UAE regions).
  • Legal authorities: When required by Saudi law or court order.

5. Data Retention

  • API logs: 90 days.
  • Account data: Duration of account + 3 years after closure.
  • Verification records: As required by Saudi commercial regulations.
  • Analytics: Aggregated only, no individual tracking beyond 12 months.

6. Your Rights (PDPL)

Under the Saudi Personal Data Protection Law, you have the right to:

  • Access your personal data.
  • Request correction of inaccurate data.
  • Request deletion (subject to legal retention requirements).
  • Withdraw consent for data processing.
  • File a complaint with the Saudi Data & AI Authority (SDAIA).

7. Cookies

We use minimal cookies:

  • Essential only: Session management, security.
  • Analytics: Cloudflare Web Analytics (cookie-free by default).
  • Cookie consent: Stored in localStorage to remember your choice.

8. Security

We implement industry-standard security measures: TLS 1.3, API key authentication, access controls, encrypted storage, and regular security audits. All data is processed in compliance with NCA ECC-1:2022.

9. Contact

For privacy inquiries: [email protected]

For data subject requests: [email protected]