Privacy Policy

Bilingual document. English version first; the Arabic version follows below. In case of any conflict or difference in interpretation, the Arabic version prevails.

Website: https://mehani.work Last updated: 28 October 2026

1. Introduction

1.1 This Privacy Policy explains how Mehani.work (the "Platform") collects, uses, stores, shares, and protects your personal data. It forms part of the Platform's Terms of Use.

1.2 The Platform is owned and operated by an individual, Fadi Alghamdi, residing in Riyadh, Kingdom of Saudi Arabia (the "Operator", "we", "us"). The Operator is the "Controller" of your personal data. The Platform is not operated by a registered company.

1.3 We process personal data in accordance with the Saudi Personal Data Protection Law and its Implementing Regulations (the "PDPL") and other applicable laws of the Kingdom of Saudi Arabia.

1.4 By registering or using the Platform, you confirm that you have read this Policy and consent to the processing of your personal data as described in it.

2. Who May Use the Platform

The Platform is available only to Saudi citizens who reside in the Kingdom and are at least 18 years old. We do not knowingly collect personal data from anyone who does not meet these conditions. If we learn that we have collected data from such a person, we will delete it.

3. Personal Data We Collect

3.1 Data you provide at registration (required):

• Email address
• Password (stored only in encrypted/hashed form; we cannot see your actual password)
• First name, middle name, and last name

3.2 Data you choose to provide (optional):

• A profile picture
• Ratings, reviews, comments, and text you write
• Images you upload within your ratings

3.3 Data you send us: information you include when you contact us through the contact form (https://mehani.work/en/contact), such as your name, email, and the content of your message.

3.4 Technical data collected automatically: Such as IP address, browser type, device type, pages visited, and date and time of access. This data is generated by our hosting infrastructure and used for security and troubleshooting.

3.5 Cookies: We use only essential cookies or similar technologies needed to keep you logged in and to remember your language preference (Arabic or English). We do not use advertising cookies.

3.6 What we do not collect: we do not ask for your national ID number, phone number, home address, date of birth, or payment information.

3.7 Image metadata: images may contain hidden metadata (such as location or device details). We recommend removing it before upload.

4. Why We Use Your Data

We use your personal data only for the following purposes:

• creating and managing your account, and verifying your login;
• displaying your ratings, reviews, images, and profile as part of the Platform's features;
• operating, maintaining, securing, and improving the Platform;
• reviewing and moderating content, and handling complaints or removal requests;
• responding to your messages and requests;
• sending you service-related emails (such as account verification or password reset);
• preventing fraud, abuse, and violations of the Terms of Use, including enforcing the eligibility conditions;
• complying with legal obligations and requests from competent Saudi authorities.

We do not sell your personal data, and we do not use it for third-party advertising.

5. Legal Basis

We process your data based on: (a) your consent, which you give when you register and which you may withdraw at any time; (b) the need to provide the services you request; (c) our legitimate interests in securing and operating the Platform, where these do not override your rights; and (d) compliance with legal obligations.

6. What Others Can See

6.1 Your ratings, reviews, and uploaded images are published on the Platform and may be visible to other users or the public.

6.2 Your name and profile picture may be displayed next to your content. Your email address and password are never displayed publicly.

6.3 Please do not include in your content any personal data of other people or confidential information. Content you publish may be copied or shared by others outside our control.

7. Sharing Your Data

We do not sell or rent your personal data. We may share it only in these cases:

• Service providers: companies that help us operate the Platform, such as hosting, storage, and email delivery providers. They may process data only on our instructions and for the purposes of providing their services.
• Authorities: competent Saudi government, regulatory, or judicial authorities, when required by law, regulation, or an official or judicial order.
• Protection of rights: where necessary to establish, exercise, or defend legal claims, or to protect the safety and rights of users or others.
• With your consent or at your request.

8. Transfer of Data Outside the Kingdom

Our hosting or service providers may store or process data on servers located outside the Kingdom of Saudi Arabia. Where this happens, we will transfer data only as permitted by the PDPL and its regulations, and we take reasonable steps to ensure an appropriate level of protection for your data.

9. Data Retention

• Account data: kept while your account is active.
• Content (ratings, images): kept while your account is active, or until you or we delete it.
• After account deletion: we delete or anonymize your personal data within [90] days, except where we must keep certain data for legal reasons, to resolve disputes, to prevent abuse, or in backups that are overwritten on a regular schedule [UP TO 120 DAYS].
• Contact messages: kept for up to [12] months, unless needed longer to handle a complaint or legal matter.

When data is no longer needed, we delete it or irreversibly anonymize it.

10. Data Security

We apply reasonable technical and organizational measures to protect your personal data, including encrypted password storage, secure connections (HTTPS), and restricted access. However, no system is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential and for using a strong, unique password.

In the event of a data breach that is likely to harm you or your data, we will notify you and the competent authority as required by the PDPL.

11. Your Rights

Under the PDPL, you have the right to:

• be informed about how your personal data is collected and used;
• access your personal data and obtain a copy of it;
• request correction of inaccurate or incomplete data;
• request deletion of your data and your account;
• withdraw your consent at any time (this does not affect processing carried out before withdrawal, and may mean you can no longer use the Platform);
• object to or request restriction of certain processing, where permitted by law;
• file a complaint with the competent authority (currently the Saudi Data and Artificial Intelligence Authority, SDAIA).

To exercise any right, contact us through the contact form. We may ask you to verify your identity first, and we will respond within the period required by law. Some requests may be refused or limited where the law permits or requires, and we will explain the reason.

12. Deleting Your Content

Deleting your account removes your profile and your content from public view, subject to Section 9. If you want a specific rating or image removed, you may delete it yourself where the Platform allows it, or contact us.

13. Third-Party Links

The Platform may contain links to other websites. We are not responsible for their privacy practices, and we encourage you to read their policies.

14. Changes to This Policy

We may update this Policy from time to time. The updated version will be published on the Platform with a new "Last updated" date. Where changes are material, we will take reasonable steps to notify you, such as by email or a notice on the Platform. Continued use of the Platform after publication means you accept the updated Policy.

15. Governing Law

This Policy is governed by the laws of the Kingdom of Saudi Arabia. Any dispute is subject to the competent courts in Riyadh, as set out in the Terms of Use.

16. Language

This Policy is available in Arabic and English. If there is any conflict or difference in interpretation, the Arabic version prevails.

17. Contact Us

For any privacy question or request, please use the contact form:

• English: https://mehani.work/en/contact
• العربية: https://mehani.work/ar/contact