Política de privacidad

These policies cover QT-POS, provided by Qayd Altnfyth Company LLC (Q-TANFEETH, CR 7054946186). By using or subscribing to the system you agree to them. If the Arabic and English texts differ, the Arabic governs.

1. Scope

How we handle personal data in QT-POS under the Personal Data Protection Law and its regulations. We are the controller for client accounts and their users, and a processor of the store’s customer data on the store’s behalf.

2. What we collect

Account holder and user details (name, email, mobile, hashed password, role), store details (name, CR, VAT number, national address), details of the devices registered to the account (device identifier, maker and model, device name) to manage device licences and secure the account, and technical logs (IP address, browser, sign-in time) for security. We do not collect card details; card payments happen on the bank’s terminal.

3. Why

To provide and run the service, support, billing, security and fraud prevention, legal obligations, and contacting you about your subscription. We never sell data or use it for advertising.

4. Live support (QT Bridge)

When you ask for live support, our team sees your page in the system to help you. Whatever you type in fields shows to us as stars; the session starts at your request, ends with the “End” button, and its recording is deleted when it ends. Our team opens your store’s screens for a preview only when the store owner personally ticks the permission on an open support ticket. The permission covers that ticket only, lasts 7 days, and the owner may withdraw it at any time. We see items, sales, and customers’ names and invoices, read-only; customers’ and suppliers’ phones and emails stay masked, and the store’s files, contracts, team page and staff papers stay locked. The owner is notified when we enter and leave, and every entry and exit is logged.

5. Who sees it

Only authorised staff, as needed, and service providers working for us under confidentiality: hosting, and email for notifications. Linked stores send invoices to ZATCA. Barcode lookups send only the barcode number to open product databases, nothing about you.

6. Where it is kept

The service is hosted on servers inside the Kingdom (Oracle Cloud, Riyadh region). An encrypted daily backup is kept with a hosting provider outside the Kingdom (OVH), with appropriate safeguards.

7. Security

Encrypted connections (HTTPS), securely hashed passwords, two-step sign-in for our staff, encrypted daily backups, a firewall with automatic blocking of attacks, and a log of every sensitive access.

8. How long

Account data for the life of the subscription, then 30 days for export, then deleted. Security logs for 12 months, and the record of store previews and owners’ permissions for 24 months. Anything the law requires us to keep longer, only for that period.

9. Your rights

To be informed, to access and get a copy of your data, to correct it, to ask for its destruction where the law allows, and to withdraw consent. Email info@qtanfeeth.com and we reply within 30 days. You may also complain to the Saudi Data & AI Authority (SDAIA).

10. Children

The system is for businesses, not children.

11. Contact

Q-TANFEETH, Saudi Arabia. info@qtanfeeth.com, +966 55 879 0332.