828 Box privacy notice

Who we are

828 AI Solutions, in Riyadh, is responsible for your data on the interest list and in your account.

Legal name

[not added yet]

Commercial registration

[not added yet]

Address

[not added yet]

Contact

[not added yet]

Privacy e-mail

[not added yet]

Who may sign up

The list is for adults: you must be 18 or older.

What we keep when you sign up

• The e-mail address you enter.
• Your consent record: the consent text you agreed to, with its version, and the time you agreed.
• The language of the page you signed up from.
• The button you pressed to sign up, and the campaign that brought you, if any, from a fixed list (such as a link from a friend).
• How many times you signed up with this e-mail.
• Your optional answers after you sign up: your city, the place (home, office or both), and up to three jobs you care about.

We do not ask for your name, phone number, ID, address or card.

What we keep when you create an account

• Your e-mail address, the language of our messages to you, the version of this notice when you created the account, and when you created it and last signed in.
• The campaign that brought you, if your e-mail is on the interest list with one.
• Sign-in sessions: for each browser you sign in from, a session with when it started and when it was last used, without your IP address or device details. A session ends when you sign out, or after 30 days without use.
• Sign-in codes: we keep neither the code nor your e-mail with it, only a fingerprint that cannot be turned back into them. A code works for 10 minutes, and we delete it within a day after it expires.
• Your account log: sign-ins, sign-outs, subscribing, canceling, data downloads and deletion, who did them (you, or our team with the reason) and when, with a fingerprint of the IP address that cannot be turned back into it.

We do not ask for your name or phone number to create the account.

Payments and your subscription

You pay on the payment provider's own page, so your card number never reaches us and we never store it. From your payments and subscription we keep:

• For each payment: when it was made and its kind (a new subscription or a renewal), the amount, the VAT and the currency, its status (paid, failed or refunded) and any amount refunded, the invoice number and link, the card type and its last 4 digits, and the provider's id for the payment.
• For your subscription: the plan and its status, the start and end of the current period and the grace days after a failed payment, whether you asked to cancel the renewal and when it ended, and the provider's ids for it.
• The messages the payment provider sends us about your payments; we erase their details after 30 days.

Payment provider

[not added yet]

Page statistics

We record statistics about how the page is used: the pages and sections shown and the buttons pressed, from fixed lists, with the language, the kind of device (phone or computer), the campaign and a session number, a random number made for each tab that stays in your browser until you close it. The statistics never hold your e-mail or anything you type, and we keep them for 90 days.

If your browser sends Do Not Track or Global Privacy Control, we record nothing.

What stays in your browser

Your browser keeps your choice of theme (light or dark) and the session number above. We use no cookies, no advertising tools and no tracking tools from other companies.

If you sign in to your account, this tab keeps the sign-in token until you sign out or close it; it is never kept in a cookie.

Preventing abuse

To limit repeated requests we compute codes from your IP address that cannot be turned back into it, and we keep those codes for 2 days. The list itself never holds your IP address.

Why we keep it

• Your e-mail and consent record: to send you news about 828 Box (the price, the launch date and the launch). The basis is your consent, which you can withdraw any time.
• Your optional answers: to plan the launch, such as the cities and jobs to start with.
• Your account and subscription: to sign you in, provide the subscription you asked for, and send you sign-in codes and payment receipts. The basis is providing what you asked for.
• Payment records: because tax law requires us to keep them.
• The account log and the IP fingerprints: to protect your account from abuse and know what happened to it.
• The statistics: to learn which parts of the page help visitors.

Who sees it

We do not sell your data or share it for advertising. The 828 AI Solutions team that runs the list and the accounts can see it, as can the service providers below as far as their work needs, and public authorities when the law requires it.

Where it is kept and where it travels

Where the data is stored

France

We keep the list and the accounts on a server we rent in France, outside the Kingdom, and the site's pages reach you from that same server. SendGrid sends our e-mail from the United States so your e-mail address passes through it, and the payment provider takes your payment details on its own page. Each keeps technical logs, such as the IP address and the time of a request.

If we later use a tool to send the news, we will name it here before we use it.

How long we keep it

• We keep it until you remove your e-mail from the list, 12 months after the box goes on sale in Saudi Arabia, or 24 months after you signed up, whichever comes sooner.
• If the product is dropped, we delete it within 30 days.
• Statistics for 90 days; the abuse-prevention codes for 2 days.
• Your account until you delete it. Sign-in sessions for 30 days after their last use or after you sign out, sign-in codes for a day after they expire, and the account log for 12 months.
• Payment records for the period tax law requires. Once you delete your account they stay without your e-mail, with only a fingerprint of it that cannot be turned back into it, so we can answer tax questions.
• Deleted data can stay in our backups for up to 30 days.

Your rights

You may ask what we keep about you, ask for a copy, a correction or deletion, and withdraw your consent. Every message from us has a “Remove my e-mail” link that deletes your data from the list, and you can write to the privacy e-mail.

If you have an account, your account page lets you download a copy of your data and delete your account yourself.

If our answer does not satisfy you, you may complain to the Saudi Data and AI Authority (SDAIA).

Changes to this notice

If we change this notice, we raise its version and give its date here.