Privacy Policy — Raai Platform

1. Introduction

Raai Platform respects the privacy of its users and is committed to protecting personal data processed through its websites, applications, and related digital services.

This Privacy Policy explains what personal data we may collect, why we process it, how it may be used or shared, how long it may be retained, and the rights available to users in relation to their personal data.

Personal data is processed in accordance with applicable laws and regulations in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its implementing regulations where applicable.

2. Scope of This Policy

This Policy applies to personal data processed when users:

• Visit the Raai website.
• Create an account.
• Accept an invitation.
• Sign in to or use the Platform.
• Create or manage a Marah.
• Add or manage Marah members.
• Communicate with support or Platform administrators.
• Use Platform features and services.
• Subscribe to paid services where available.
• Use applications or digital services associated with Raai.

3. Personal Data We May Process

Depending on how the Platform is used, we may process the following categories of data.

A. Identity and Account Information

This may include:

• Arabic first and last name.
• English first and last name, when provided.
• Email address.
• Phone number and country calling code.
• Country and city.
• Preferred language.
• Preferred currency.
• Account identifier.
• Account role and permissions.

B. Authentication and Security Information

This may include:

• Account-verification information.
• Email-confirmation status.
• Multi-factor authentication information where applicable.
• Login and session records.
• Failed login attempts.
• Password-recovery activity.
• Security information required to detect unauthorized access or abuse.

Passwords are not stored in readable plain text and are handled through dedicated authentication systems.

C. Marah and Livestock Data

This may include:

• Marah information.
• Animal records.
• Identification numbers.
• Breed, gender, age, and acquisition details.
• Pen or location information.
• Feeding information.
• Photographs.
• Ownership and association records.
• Breeding and offspring records.
• Sale, exclusion, and mortality records.
• Operational or financial records where those services are available.

D. Livestock Health and Veterinary Data

This may include:

• Diseases and injuries.
• Diagnoses.
• Treatments.
• Quarantine records.
• Preventive programs.
• Recorded medicines or veterinary services.
• Notes entered by users or veterinary professionals.

These records generally relate to livestock rather than the user's personal health information, although they may identify the individual who recorded or performed a related activity.

E. Device and Usage Information

This may include:

• IP address.
• Browser type.
• Device information.
• Operating system.
• Language settings.
• Pages and screens used.
• Time and date of access.
• Error logs.
• Performance information.
• Security logs.
• User-Agent.
• Session identifiers where required.

F. Communications

We may retain information submitted when users:

• Contact customer support.
• Submit an enquiry.
• Report a problem.
• Submit an account or privacy request.
• Provide feedback or complaints.

G. Consent Records

We may maintain records showing:

• The legal document accepted.
• The version accepted.
• Date and time of acceptance.
• Language used.
• Source of acceptance, such as open registration, invitation acceptance, or first-login consent.
• Email address associated with the account at the time of acceptance.
• IP address and User-Agent where available.

4. Sources of Personal Data

Personal data may be obtained from:

• The user directly.
• Another authorized user who invites or adds the individual.
• Raai Platform administrators.
• Technical systems and service providers used to operate the Platform.
• Data generated automatically through use of the Platform.

Where a user submits personal data relating to another individual, that user is responsible for having the appropriate authority or lawful basis to provide that information.

5. Purposes of Processing

Personal data may be processed for purposes including:

• Creating and managing user accounts.
• Verifying email addresses and account identity.
• Enabling login and account recovery.
• Managing roles and permissions.
• Enabling users to create and manage Marahs.
• Providing livestock-management functionality.
• Managing invitations and memberships.
• Carrying out user-requested transactions and operations.
• Communicating about the account or service.
• Sending operational and security notifications.
• Providing technical support.
• Improving Platform reliability and performance.
• Diagnosing errors and technical problems.
• Detecting and preventing fraud or unauthorized access.
• Maintaining audit and security records.
• Complying with legal, regulatory, or judicial requirements.
• Managing subscriptions and payments where paid services are offered.
• Analyzing Platform usage and improving user experience, subject to applicable consent and legal requirements.

6. Lawful Basis for Processing

We process personal data based on the lawful basis applicable to each activity.

Depending on the circumstances, this may include:

• The user's consent where consent is required.
• Performance of an agreement or service requested by the user.
• Compliance with a legal obligation.
• Protection of legitimate operational or security interests where permitted by law.
• Any other lawful basis recognized under applicable data-protection laws.

7. Sharing and Disclosure

Raai does not sell users' personal data.

Personal data may be shared, where necessary, with parties such as:

• Hosting and infrastructure providers.
• Authentication service providers.
• Email and messaging providers.
• Monitoring and security providers.
• Payment providers where paid services are introduced.
• Government, regulatory, judicial, or law-enforcement authorities where disclosure is legally required.
• Other service providers necessary to operate the Platform.

Data sharing will be limited to what is reasonably necessary for the relevant purpose and subject to appropriate legal and contractual safeguards where required.

8. International Data Transfers

The Platform may use technical services or providers that result in certain personal data being processed or transferred outside the Kingdom of Saudi Arabia.

Where this occurs, such transfers will be handled in accordance with applicable Saudi data-protection requirements governing transfers of personal data outside the Kingdom.

Before final launch: this section must be reviewed against the actual production hosting architecture, service providers, processing locations, and applicable transfer safeguards.

9. Data Retention

Personal data is retained only for as long as reasonably necessary for the purpose for which it was collected or where retention is required or permitted by law.

Retention periods may vary depending on the type of information, including:

• Account information.
• Operational records.
• Security and audit logs.
• Consent records.
• Financial transactions.
• Customer-support records.
• Backups.

Detailed retention periods should be finalized through the Platform's formal data-retention policy before production launch.

10. Deletion and Destruction of Data

When personal data is no longer required for a legitimate operational or legal purpose, it may be deleted, destroyed, or anonymized in accordance with applicable procedures.

Deleting an account may not result in the immediate deletion of every record.

Certain information may be retained where required or permitted for:

• Legal compliance.
• Accounting obligations.
• Security purposes.
• Fraud or abuse investigations.
• Evidence of previous consent or activity.
• Protection of the lawful rights of Raai or its users.

11. Data Security

Raai applies technical and organizational measures designed to protect personal data against:

• Unauthorized access.
• Unauthorized alteration.
• Loss.
• Disclosure.
• Misuse.
• Unlawful destruction.

Measures may include, where appropriate:

• Secure authentication.
• Multi-factor authentication for sensitive operations.
• Role-based and permission-based access controls.
• Row Level Security.
• Encrypted communications.
• Audit logging.
• Security monitoring.
• API protections.
• Backup processes.
• Restricted administrative access.

No electronic system can guarantee complete elimination of all security risks.

12. Data Subject Rights

Subject to applicable law, users may have rights including:

• Right to be informed about the lawful basis and purpose of processing.
• Right of access to personal data.
• Right to obtain personal data in a clear and readable form where applicable.
• Right to correction of inaccurate, incomplete, or outdated information.
• Right to request destruction of personal data where legal requirements are satisfied.
• Right to withdraw consent where processing is based on consent, subject to applicable legal consequences.

13. How to Exercise Your Rights

Privacy-related requests may be submitted through:

Email: info@raai.farm

We may request additional information to verify the identity of the requester before processing a request, in order to protect users' information.

Requests will be handled in accordance with applicable legal requirements and timeframes.

14. Children and Minors

The Platform is not currently designed for independent use by children.

Where use of the Platform or processing of personal data relating to a person lacking full legal capacity requires approval from a guardian or legal representative, such data will be handled in accordance with applicable legal requirements.

15. Cookies and Analytics

The Platform may use cookies, local storage, or similar technologies for purposes including:

• Authentication and session management.
• Security.
• Remembering user preferences.
• Analytics.
• Performance measurement.

Where user consent is required for non-essential analytics or tracking, the Platform provides an appropriate mechanism for the user to provide, reject, or withdraw such consent.

Further details are provided in the Platform's Cookie Policy.

16. Notifications and Communications

Contact information may be used to send:

• Verification messages.
• Password-recovery messages.
• Security alerts.
• Account notifications.
• Operational notifications relating to Marahs or services.
• Subscription or payment notices where applicable.

If marketing communications are introduced in the future, they will be handled in accordance with applicable legal requirements and user preferences.

17. Automated Recommendations and Intelligent Features

The Platform may in the future use automated rules, indicators, or intelligent technologies to provide alerts, recommendations, or operational insights.

Where automated processing of personal data may have a material effect on a user, applicable legal and transparency requirements will be assessed and this Policy updated where necessary.

Automated livestock-health or management tools are not a substitute for appropriate professional or veterinary judgment.

18. Changes to This Privacy Policy

This Policy may be updated where:

• New services are introduced.
• Data-processing practices change.
• New service providers are added.
• Legal requirements change.
• The Platform's technical architecture changes.

The current version number and effective date will be displayed in the Policy.

Where a material update requires renewed consent, users may be asked to review and accept the updated Policy before continuing to use some or all services.

19. Complaints

Users may contact Raai first regarding any complaint or concern about the processing of personal data.

Users may also have the right to raise complaints with the competent data-protection authority in the Kingdom of Saudi Arabia in accordance with applicable law.

20. Contact Us

For privacy and personal-data enquiries:

Raai Platform

Email: info@raai.farm

Website: raai.farm