Who is responsible for your data
SIF International (S I F International Company; commercial registration 7050213813, Riyadh) is responsible for the data collected through this website and for the setup and support services in the Kingdom. Xrero for Information Technology Network Services (Dubai) develops and hosts the system and processes workspace data on behalf of customers; it is also the party that contracts and bills the subscription today under xrero.com/terms, so it handles account and billing data as the contracting party. Trial registration takes place on xrero.com. You can reach both at info@xrero.com.
What data we collect
- Contact data when you fill in the website form or write to us: name, company, mobile number, email, subject and message.
- Account data when you register for the trial or subscribe: username, email, company details (name, commercial registration, VAT number, address).
- Billing data when you subscribe: the billed company's details, the payment method used, and the record of payments and refunds; the payment itself is governed by the policy of the payment method you choose.
- Workspace data that you or your team enter: customers, suppliers, products, invoices, journal entries and the like. It is yours and is processed on your instructions.
- Technical data recorded automatically: IP address, browser type, pages visited and time of visit, for security and to run the service.
- Conversations with the website assistant if you use it: your questions and the assistant's replies.
Why we use it
- To answer your requests, send quotes and arrange demos.
- To create, run and support your workspace and train your team.
- To issue and collect subscription invoices and to process refund requests.
- To transmit your electronic invoices to the Fatoora platform as ZATCA's regulations require.
- To protect the service from abuse and to detect and fix faults.
- To meet our legal obligations, including keeping tax documents for the required period.
Who we share data with
- The developer (Xrero, Dubai): contact and account data is shared between SIF International and the developer to provide the service, bill the subscription and answer your enquiries.
- The Zakat, Tax and Customs Authority (ZATCA): electronic invoice data is sent to the Fatoora platform for clearance or reporting; this is a legal requirement, not an option.
- The hosting provider: the service runs on cloud servers in Frankfurt (European Union) with daily backups, and data travels encrypted (HTTPS).
- The AI model provider: if you use the website assistant, your messages are processed by the model provider to generate the reply; do not enter sensitive data in the chat.
- Communication channels: WhatsApp and email when you contact us through them, each governed by its provider's policy.
- We do not sell or rent your data, and we do not share it with marketing parties.
Cookies
The website uses essential cookies only: to remember your language, to run the contact form and the assistant, and to protect forms from bots. We use no advertising trackers on this website.
Retention
- Contact data and requests: while the request is open and for a reasonable follow-up period, unless you ask us to delete it.
- Workspace data: for the life of the subscription, then available for export for 30 days after it ends, and deleted afterwards, except the tax documents described in the next point.
- Tax documents and electronic invoices: six years from their issue date as the regulations require, kept in the archive also after the subscription ends.
- Technical logs: a short period for security purposes, then deleted.
How we protect your data
- Encrypted connections (HTTPS) between your browser and the service.
- Two-factor login available to every user, and role-based access rights.
- An audit trail recording who changed what and when, and accounting period locks.
- Daily backups of your workspace data.
- Our team's access to your data is limited to what support requires, and only at your request.
Your rights
Under the Personal Data Protection Law of the Kingdom of Saudi Arabia you may ask to access, correct or delete your personal data, obtain a copy of it, and object to processing that is not needed to provide the service, subject to what the regulations require us to keep, such as tax documents. If your data is held in one of our customers' workspaces, address the request to that business, which controls its data; we act on its instructions. Write to info@xrero.com or call the number below; we reply the same working day and act within the statutory period.
Minors
The website and the service are intended for businesses and for people aged eighteen or over. We do not knowingly collect data from anyone younger.
Changes to this policy
Any update is published on this page with its effective date, and subscription customers are notified by email of any material change.
Contact
SIF International, Al Sulaimaniyah, Riyadh 12231, Saudi Arabia. Phone: +966 54 775 0700, WhatsApp: +971 55 776 9320, email: info@xrero.com.