Effective Date: 30 July 2026
Mojarrb ("the Platform") is a product owned and operated by Nasbase Company for Investment ("the Company"), which is the data controller for the purposes of this policy. The Platform is not a separate legal entity. Data Controller: Nasbase Company for Investment CR No.: 7054602649 Address: Building 5573, Al Iskan 107 St, Al Iskan District, 62435, Khamis Mushayt, Kingdom of Saudi Arabia Official Email: info@Mojarrb.com
1.1 Nasbase Company for Investment, which owns and operates the Mojarrb platform (hereinafter "the Company", "we", "us", or "our"), is committed to protecting the privacy and security of the personal data of our Users (Clients and Experts). 1.2 This Privacy Policy describes how we collect, use, disclose, and protect your personal information in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and other relevant digital regulations.
We collect several types of information from and about users of our Platform, including: • Identity Data: Full name, National ID or Residency (Iqama) number, and professional titles. • Contact Data: Email address, phone number, and physical business address. • Verification Data: Identity verification results obtained through the National Single Sign-On (Nafath) or other government-linked verification services. • Professional Data (Experts only): CVs, educational qualifications, certifications, work history, and portfolio of deliverables. • Financial Data: Bank account details for payouts, IBAN, and transaction history. • Technical Data: Internet Protocol (IP) address, browser type, cookies, and usage patterns on the Platform. • Business Documents: Files you choose to upload during a diagnostic session — such as financial statements, sales and expense reports, price lists or menus — together with the figures and facts extracted from them. • Diagnostic Content: Your answers during a session, the conversation record, and the findings, signals and Business Intelligence Score (BIS) derived from them.
3.1 Identity Verification: To verify the authenticity of Users via Nafath to ensure a secure professional environment. 3.2 Contract Fulfillment: To manage the registration of Users and facilitate the professional assignments between Clients and Experts. 3.3 Financial Operations: To process service payments, issue tax invoices, and facilitate payouts to Experts. 3.4 Legal Compliance: To comply with statutory obligations under the laws of the Kingdom of Saudi Arabia. 3.5 Platform Security: To detect and prevent fraud, cyber-attacks, or any unauthorized use of the Platform.
We do not sell your personal data to third parties. We only share data with authorized entities as follows: 4.1 Government Authorities: Such as SDAIA (Nafath) for identity verification or ZATCA for tax auditing. 4.2 Service Providers: Licensed third-party vendors such as payment gateways and cloud hosting providers under strict confidentiality agreements. 4.3 Legal Mandate: When required by law, court order, or a government decree.
4A.1 Nature of the Service: The Platform’s core service is an AI-led business diagnostic. The information you provide during a session — your answers and any documents you upload — is processed by artificial intelligence models in order to extract figures, identify findings, compare them against sector reference ranges, produce the Business Intelligence Score (BIS), and generate a prioritized action plan. 4A.2 AI Service Providers: This processing is carried out with the assistance of third-party AI service providers (currently Google) acting as data processors on our behalf, under contractual obligations of confidentiality and security. 4A.3 No Training on Your Data: Your business documents, your answers and your diagnostic content are NOT used to train artificial intelligence models, whether ours or those of any third-party provider. They are processed solely to produce your own assessment. 4A.4 Automated Assessment: Your assessment, score and plan are generated automatically. They are informational outputs intended to support your own decision-making, and are not a substitute for professional financial, legal, tax or accounting advice. You may contact us at any time to request that a person review any finding produced about your business. 4A.5 Confidentiality: Your diagnostic content is private to your account. It is not published, sold, or shared with other Users, except as described in Section 4B.
4B.1 If you access the Platform through an enterprise or team account, the authorized administrators of that organization may be able to view sessions and reports conducted under that account. 4B.2 If a session is conducted with an Expert affiliated with an enterprise organization through the Platform, the details of that session may be accessible to that organization’s authorized team members.
4C.1 Some of our service providers — including cloud hosting and artificial intelligence providers — operate infrastructure outside the Kingdom of Saudi Arabia. As a result, your personal data and diagnostic content may be transferred to, and processed in, countries outside the Kingdom. 4C.2 Where such a transfer takes place, we carry it out in accordance with the Personal Data Protection Law and its Implementing Regulations, transfer only what is necessary for the purpose, and bind each provider by contract to confidentiality, security and data protection obligations no less protective than those set out in this Policy.
5.1 We implement advanced technical and organizational security measures to protect your personal data from accidental loss, unauthorized access, alteration, or disclosure. 5.2 All financial transactions and identity verification processes are encrypted using SSL technology.
6.1 We will only retain your personal data for as long as necessary to fulfill the purposes for which it was collected. 6.2 Financial and tax-related records are retained for a minimum of ten (10) years as required by Saudi Commercial and Tax Laws.
Under the Saudi Personal Data Protection Law (PDPL), you have the following rights: • Right to be Informed: To know why and how your data is being processed. • Right of Access: To request a copy of the personal data we hold about you. • Right to Rectification: To request the correction of inaccurate or incomplete data. • Right to Destruction: To request the deletion of your data when it is no longer needed. • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
7A.1 In the event of a personal data breach that may cause harm to your data or conflict with your rights and interests, we will notify the Saudi Data & AI Authority (SDAIA) and, where required, affected Users without undue delay and in accordance with the Personal Data Protection Law. 7A.2 How to Exercise Your Rights: Submit your request to the contact address below. We will respond within thirty (30) days of receiving a verifiable request, free of charge. 7A.3 The Platform is intended for business owners and professionals aged eighteen (18) or over. We do not knowingly collect personal data from anyone under 18.
The Platform uses "Cookies" to enhance user experience and analyze traffic. You can choose to disable cookies through your browser settings, although this may affect the functionality of certain parts of the Platform.
The Company reserves the right to update this Privacy Policy at any time. Significant changes will be notified via the registered email or a prominent notice on the Platform.
For any questions regarding this Privacy Policy or to exercise your data rights, please contact our Data Protection Officer (DPO) at: Email: info@Mojarrb.com Address: Khamis Mushait, Saudi Arabia.