This policy applies to SmartBase websites, applications, and cloud services, including hosting, cybersecurity, Odoo development, and system integrations.

• Identity & contact data: name, email, phone, company address.
• Transaction data: orders, contracts, invoices (where applicable).
• Technical data: IP address, browser type, logs, cookies.
• Support interactions: tickets, calls, and email messages.

• Delivering, operating, and improving our services.
• Communications regarding orders, support, and updates.
• Security, compliance, and fraud prevention.
• Marketing with prior, opt‑out consent.

Processing relies on one or more of: (a) contract performance; (b) legitimate interests balanced against your rights; (c) legal obligations; (d) explicit, withdrawable consent.

• Service providers under data processing agreements and security controls.
• Regulatory or legal authorities when required by law.
• Business transfers or mergers under appropriate safeguards.

We implement ISO 27001‑aligned controls: asset classification, access control, encryption in transit and at rest where feasible, backups, monitoring, and periodic penetration testing.

• Access, rectification, and erasure.
• Restriction of processing and objection.
• Data portability where applicable.
• Withdraw consent without affecting prior lawful processing.

We use necessary, functional, and analytics cookies. You may manage preferences via your browser. Disabling cookies may affect features.

We may transfer data to providers outside your country with appropriate safeguards (e.g., standard contractual clauses or equivalents).

We retain data only as long as necessary for processing purposes and in line with internal retention policies and applicable laws.

Our services target businesses and are not intended for children. If underage data was collected without proper consent, we will delete it.

We may update this policy. Any changes will be posted here with a revised date.

By using SmartBase websites and services, you agree to these terms.

• No misuse, disruption, or unauthorized access attempts.
• Compliance with applicable local and international laws.

All trademarks, logos, and content are owned by SmartBase and may not be used without prior written permission.

We are not liable for any direct or indirect damages arising from service use to the maximum extent permitted by law.

These terms are governed by the laws of the Kingdom of Saudi Arabia, with jurisdiction in Jeddah courts.

We may update these terms from time to time and post the revised date above.