Privacy Policy

1. About this policy

This policy explains what personal data TurkiApp collects when you use this platform, why we collect it, who it is shared with, and the rights you hold over it. It covers browsing the site, creating an account, contacting a company, and listing a company.

TurkiApp is the party responsible for this data. By using the platform you accept the practices described here. If you do not accept them, please do not use the platform.

2. What this platform is — and what it is not

TurkiApp is a directory. Companies publish their products and services, and visitors browse them and contact the companies directly.

No sale, order or payment is processed on this platform. We therefore never ask for, never receive and never hold card numbers, bank details or any other payment information. Anything you agree with a company — price, delivery, payment, warranty — is a matter between you and that company.

3. Information you give us

We collect only what a particular action needs:

• Contacting a company about a product — your name, phone number, email address and message.
• The contact form — your name, email address, phone number, subject and message.
• Creating an account — your first and last name, username, email address, mobile number and a password. The password is never stored in a readable form.
• Saving an address — the national address fields you enter. If you choose to press "use my location", your browser asks your permission first and we store only the coordinates it returns.
• Applying to list a company — your name, email address and phone number, together with the company name, country and city.
• Managing a company listing — the company name, logo, description, contact email, phone, website, country and city, and the products and images published under it. This information is intended to be public.

4. Information collected automatically

• Your IP address and browser identification, recorded with messages you send and with actions taken in an account.
• A record that a product page was viewed, used to show companies how often their listings are seen.
• Failed sign-in attempts, stored as the email address used and the IP it came from, so that repeated attempts can be slowed down.
• An activity record of changes made from an account, kept so that an action can be traced if something goes wrong.

5. Why we use it

• To deliver your enquiry to the company you chose to contact, and to keep a copy so it is not lost if their email fails.
• To create and operate your account, sign you in, and send a verification code where you have enabled two-step verification.
• To show a company how its own listings are performing.
• To keep the platform secure — limiting repeated sign-in attempts and repeated messages, and investigating misuse.
• To reply to you when you write to us.
• To meet obligations placed on us by law.

We do not use your data to build advertising profiles, and we do not sell it.

6. Cookies and browser storage

This site sets one cookie, and it is strictly necessary:

• TURKIAPPSESSID — identifies your browsing session. It keeps you signed in and protects forms against being submitted from another site. It carries no personal information itself and expires when the session ends.

Your choice of light or dark appearance is kept in your browser's local storage. It stays on your device and is never sent to us.

We load no analytics, advertising or tracking scripts, and set no cookies for those purposes. There is nothing here to consent to beyond the session cookie, which the platform cannot work without.

7. Other services a page uses

• Google Fonts. Pages load their typefaces from Google's servers. To serve them, Google receives your IP address and basic browser information. We send Google nothing else, and no account data passes through this.
• Hosting and email providers. Our servers and the service that delivers our email process data on our behalf and under our instructions.
• Your browser's location service, used only on the address page and only after you press the button and your browser asks your permission. You can refuse, and the rest of the page still works.

8. Who your information is shared with

When you send an enquiry about a product, your name, phone number, email address and message are sent to that company, so that it can reply to you. That is the purpose of the form, and it is the only sharing that happens as a result of using the platform normally.

Beyond that, information is shared only with the service providers described above, and with a competent authority where we are required by law to do so.

We do not sell personal data, and we do not share it for advertising.

9. Transfers outside the Kingdom

Some of the services above operate servers outside Saudi Arabia — notably the font service, which receives your IP address as part of loading a page. Where personal data is transferred abroad, we do so only to the extent the Personal Data Protection Law permits and under the safeguards it requires.

10. How long we keep it

• Account information is kept for as long as the account exists.
• Enquiries and contact messages are kept as a record of the correspondence, so a company can return to a message it has not answered.
• Security records — sign-in attempts and the activity log — are kept for as long as they remain useful for protecting accounts.
• When a company is removed, its products, their images and the enquiries sent to it are removed with it.

We delete data when it is no longer needed for the purpose it was collected for, or when you ask us to and we have no obligation to keep it.

11. How we protect it

• Passwords are stored as a one-way hash. Nobody — including us — can read your password, which is why a forgotten one must be reset rather than looked up.
• Password reset links and verification codes are also hashed, expire after a short period, and can be used once.
• Two-step verification is available on every account and we recommend enabling it.
• The site is served over an encrypted connection, and forms are protected against submission from other sites.
• Repeated sign-in attempts and repeated messages from the same source are rate limited.
• Uploaded files are stored outside the public folder of the website and are served through a controlled route rather than being directly reachable.

No system can be guaranteed completely secure. If a breach occurs that is likely to affect you, we will act on it and notify as the law requires.

12. Your rights

Under the Personal Data Protection Law of Saudi Arabia, you have the right to:

• be told what personal data we hold about you and why;
• request a copy of it;
• ask us to correct anything inaccurate or incomplete;
• ask us to destroy it, where we have no lawful reason to keep it;
• withdraw a consent you have given, without affecting what was done before you withdrew it.

Much of this you can do yourself: your profile, address and password are editable from your account, and products and company details are editable from the company dashboard. For anything else, write to us using the details below. We will respond within the period the law allows.

If you believe we have handled your data improperly, you may complain to the Saudi Data and Artificial Intelligence Authority (SDAIA), the regulator for personal data in the Kingdom.

13. Children

This platform is meant for adults and for people acting on behalf of a business. It is not directed at children, and we do not knowingly collect their data. If you believe a child has given us personal information, contact us and we will remove it.

14. Changes to this policy

We may update this policy as the platform changes. The date at the top shows when it was last revised. Where a change materially affects how your data is handled, we will make that clear rather than relying on the date alone.

15. Contact us

For any question about this policy, or to exercise any of the rights above, write to us through the contact page.