سياسة الخصوصية وحماية البيانات Privacy Policy & Data Protection

This policy describes how Okta Educational Management Platform collects, uses, and protects your personal data when you use our services.

By accessing or using the platform, you agree to the terms set out in this policy. If you do not agree with any provision, please discontinue use of the platform.

We collect the following types of data:

• Identity data: Full name, national ID number or student number.
• Contact data: Email address, mobile number, educational institution address.
• Usage data: Login logs, in-platform activity, IP addresses, browser and device type.
• Educational data: Grades, attendance records, timetables, and academic reports.
• Payment data: Subscription information (credit card details are never stored directly).

We use the collected data for the following purposes:

• Delivering and operating platform services efficiently and securely.
• Creating user accounts and managing access permissions.
• Generating academic and administrative reports for educational institutions.
• Sending platform-related notifications and alerts.
• Improving services and developing new features based on usage patterns.
• Complying with legal and regulatory requirements in Saudi Arabia.

We do not sell your personal data to any third party. We may share data only in the following cases:

• Technical service providers: Cloud hosting and email service partners bound by strict privacy policies.
• Legal requirements: When a court order or official request from a competent government authority is issued.
• Rights protection: To protect the rights of the platform or users in cases of fraud or serious violations.

We apply strict technical and organisational measures to protect your data, including:

• In-transit data encryption using TLS/SSL protocol.
• Encryption of sensitive data at rest in databases.
• Multi-level permission system controlling data access.
• Regular security audits and penetration testing.
• Scheduled backups and disaster-recovery plans.
• Two-factor authentication (2FA) for administrator accounts.

Under the Saudi Personal Data Protection Law, you have the following rights:

• Right of access: Request a copy of your personal data stored with us.
• Right of rectification: Correct any inaccurate or incomplete data.
• Right of erasure: Request deletion of your data where permitted by law.
• Right to object: Object to the processing of your data for direct marketing purposes.
• Right to data portability: Receive your data in a machine-readable format.

To exercise any of these rights, contact us at: privacy@tahdir.sa

We retain your personal data throughout your active subscription period, and for up to 5 years thereafter, or as required by applicable law.

You may request deletion of your data before this period expires, provided there are no legal obligations requiring its retention.

For enquiries or complaints regarding our privacy policy, please contact us via:

• Email: privacy@tahdir.sa
• Phone: +966 920000000
• Address: Riyadh, Kingdom of Saudi Arabia

We will respond to your enquiry within 5 business days.