Last updated: July 2026
This policy describes how Majarrah collects, uses, and protects the data of its users. It applies to all buyers, brokers, sellers, and visitors. By using our services you agree to this policy.
Majarrah is a Saudi real-estate AI platform, operated by Majarrah, a company registered in the Kingdom of Saudi Arabia. Our data protection officer is reachable via the email address below for any question about this policy.
We collect the following categories of data:
We process your data for the following purposes:
We rely on: (a) performance of our contract with you when you subscribe to the service, (b) regulatory obligations imposed on real-estate platforms in Saudi Arabia, (c) your explicit consent where required (such as marketing communications), and (d) our legitimate interest in protecting and improving the platform.
We use trusted cloud infrastructure that meets international security standards. Database and files are stored in certified data centers within the European Union, with encryption in transit and at rest. Backups are encrypted with restricted access. We do not sell your data to any third party.
We share the minimum necessary data with categories of trusted service providers under data processing agreements:
We do not sell or rent your data to any marketing or advertising party.
We keep your data as long as your account is active. When you delete your account we delete personal data within 30 days, except what we must keep for legal or accounting purposes (invoices are retained for 10 years per Saudi law). Security logs related to sign-in attempts are retained for a shorter period, for investigation purposes only.
To exercise any of these rights, email privacy@majarrah.io. We respond within 30 days at most.
We use essential cookies to run your session, keep you signed in, and remember your language choice; functional cookies to remember preferences; and anonymized analytics to measure performance. We do not use advertising cookies and do not sell browsing data.
We follow standard security practices: TLS in transit, encryption at rest, role-based access limitations, audit logs, periodic permission reviews, and two-factor authentication on admin accounts. No system is 100% secure, but we commit to handling any incident transparently.
The service is intended for adults (18+). We do not knowingly collect data from minors. If we discover a minor's account, we will close it and delete the data.
We may send offers or educational content based on your consent. You can unsubscribe at any time via the link at the bottom of each email or from your account settings. Operational messages (account confirmations, invoices, security alerts) cannot be unsubscribed from while the account is active.
Some of our service providers process data outside Saudi Arabia (mainly in the European Union). We transfer data under agreements that ensure a level of protection equivalent to what Saudi PDPL requires.
If a breach may affect your rights, we will notify you within 72 hours of becoming aware, notify the competent authorities as required by law, and describe the mitigation measures we have taken.
We may update this policy from time to time. We will notify you of material changes by email or in-app notice at least 30 days before they take effect. Continued use of the service after that is deemed acceptance of the updated version.
For any question about this policy or to exercise your rights: privacy@majarrah.io. For general contact: hello@majarrah.io.
