Privacy Policy

We collect three categories: (1) Account data, your name, email, and verified phone number; (2) Listing data, anything you publish on Mazhool, including photos, prices, and locations; (3) Usage data, pages you visit, searches you run, and devices you use, so we can improve the service and detect abuse. We never sell raw personal data.

We use your data only to (a) deliver the service you signed up for, showing your listings, sending messages, processing payments; (b) keep the platform safe, verifying identities, blocking fraud; (c) improve the product, aggregated, anonymised analytics; and (d) communicate with you about your account, with marketing only when you have explicitly opted in.

Mazhool complies with the Saudi Personal Data Protection Law (PDPL) issued by SDAIA. Our data is hosted on infrastructure with PDPL-grade controls, we have a Data Protection Officer reachable at privacy@mazhool.sa, and we honour every right granted by the PDPL: access, correction, deletion, portability, and consent withdrawal. Requests are handled within 30 days.

We share data only with vetted processors required to operate the service: payment providers (Stripe), SMS providers (Twilio), email providers, and cloud infrastructure (Cloudinary, MongoDB Atlas). Each processor is bound by a Data Processing Agreement and PDPL-compatible safeguards. We never share data with advertisers or data brokers.

Account data is retained while your account is active and for up to 90 days after deletion (so you can recover an accidentally deleted account). Listing data is retained as long as the listing is published. Anonymised analytics may be retained indefinitely. You can request earlier deletion at any time.

You have the right to: access your data, correct inaccurate data, delete your account, export your data in a portable format, and withdraw consent at any time. Email privacy@mazhool.sa to exercise any of these rights, we'll respond within 30 days.

Mazhool is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has registered, contact privacy@mazhool.sa and we'll close the account.