Privacy Policy
This Privacy Policy explains how MAIDAN collects, uses, stores, secures, and shares personal data in a manner intended to align with the Saudi Personal Data Protection Law (PDPL).
Controllers and scope
MAIDAN is operated jointly by Ting Establishment and Sweven Company. Depending on the service model, one or both entities may act as controller, processor, or joint controller.
This policy applies to personal data processed in connection with the platform, including accounts, uploads, generated assets, support requests, billing, analytics, and abuse prevention.
Categories of personal data
The platform may process account registration details, names, email addresses, phone numbers, company and billing details, authentication data, uploaded images and likenesses, prompts, generated assets linked to accounts, support communications, verification records, transaction metadata, usage logs, session information, device details, IP information, and security-event data.
Purposes of processing
- Providing and operating the platform and user accounts.
- Identity verification, fraud prevention, and abuse detection.
- Generating, storing, and delivering requested outputs.
- Customer support, billing, payment administration, and enterprise account management.
- Platform improvement, quality assurance, analytics, compliance, dispute handling, and enforcement.
Storage, security, and providers
Data may be stored on infrastructure operated by the company or by approved providers, including infrastructure hosted in the Kingdom of Saudi Arabia.
Reasonable technical and organizational safeguards may include access controls, encryption measures, authentication controls, logging, monitoring, and data minimization where feasible. No system can be guaranteed completely secure.
Retention and transfers
Data may be retained as long as reasonably necessary for service delivery, security, auditability, dispute resolution, legal obligations, and business continuity.
Personal data will not be transferred outside the Kingdom of Saudi Arabia except where permitted by applicable law and subject to any legally required safeguards or approvals.
User rights
Subject to applicable law and any legal exceptions, users may request access to personal data, correction of inaccurate or incomplete data, deletion where legally permitted, withdrawal of consent where consent is the lawful basis, and information about certain processing activities.
The company may request identity verification before fulfilling rights requests.
Sensitive use cases
Where a user uploads images, faces, or other identifiable personal material, that user is solely responsible for ensuring the upload, AI processing, and intended use are lawful and properly authorized.