Privacy Policy

We collect information about you in the following ways:

Information you provide directly:

• Contact details — your name, email address, phone number, and company name when you submit our contact form or communicate with us directly.
• Business information — details about your organization, use case, or project scope that you share when inquiring about our services.
• Any other information you voluntarily provide in written communications.

Information collected automatically:

• Log data — IP address, browser type and version, operating system, referring URLs, pages visited, and the date and time of each visit.
• Usage data — how you interact with our website, including clicks, scroll depth, and session duration, collected through analytics tools.
• Device information — hardware model, unique device identifiers, and network information.
• Cookies and tracking technologies — small data files stored on your device (see Section 5 below).

Information from third parties:

• We may receive limited information about you from business partners, referral sources, or publicly available databases for the purpose of understanding your business needs.

We process your information only for specific, legitimate purposes:

• To respond to your inquiries — we use your contact details to reply to messages and provide information about our products and services.
• To deliver our services — when you engage us, we use the information you provide to scope, build, and deliver the agreed-upon AI products and services.
• To send updates and marketing communications — with your consent where required by law, we may send you information about new products, services, or events.
• To improve our website — usage and analytics data helps us understand how our site performs and identify areas for improvement.
• To comply with legal obligations — we process data where required by applicable Saudi Arabian law or other regulations we are subject to.
• To protect our rights — we may use information to detect, prevent, and respond to fraud, security incidents, or other potentially harmful activities.

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects on you.

You have the right to request that we delete the personal information we hold about you. To submit a deletion request:

• Email us at privacy@sandrock.ai with the subject line “Data Deletion Request.”
• Include your full name and the email address associated with your inquiry or account so we can locate your records.

We will acknowledge your request within 5 business days and complete the deletion within 30 days, unless we are required by law to retain certain information. We will notify you once the deletion is confirmed or explain any exceptions that apply.

Please note that deletion of your data may limit our ability to provide services to you or respond to future inquiries.

We do not sell, trade, or rent your personal information. We may share your information only in the following limited circumstances:

• Service providers — trusted third-party vendors (e.g., hosting, analytics, email services) who process data on our behalf under strict confidentiality agreements.
• Legal requirements — when required by applicable law, regulation, court order, or governmental authority.
• Business transfers — in connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset with appropriate notice to you.
• With your consent — for any other purpose where you have given explicit permission.

Our website uses cookies and similar technologies (such as web beacons and pixels) to enhance your experience and gather analytics data. Cookies are small text files stored in your browser.

• Essential cookies — required for the website to function properly and cannot be disabled.
• Analytics cookies — help us understand visitor behavior so we can improve our site.

You can configure your browser to refuse cookies or alert you when cookies are being sent. Disabling cookies may affect the functionality of certain parts of our website.

We retain personal information only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Specifically:

• Contact form submissions are retained for up to 2 years to allow us to follow up on business inquiries.
• Client engagement data is retained for the duration of the engagement plus any legally required retention period.
• Analytics and log data are retained for up to 12 months.

When data is no longer needed, we securely delete or anonymize it. You may request earlier deletion at any time (see Section 3).

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit (TLS), access controls, and regular security reviews.

However, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to use strong, unique passwords and contact us immediately if you suspect unauthorized access to your data.

Depending on your location, you may have rights under applicable data protection laws, including:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate or incomplete data.
• Deletion — request erasure of your personal data (see Section 3 for how to submit this request).
• Objection — object to certain types of processing.
• Portability — request a machine-readable copy of your data for transfer to another service.
• Withdrawal of consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of these rights, email us at privacy@sandrock.ai.

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

Our website and services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 16, we will promptly delete it. If you believe we have collected such information, contact us at privacy@sandrock.ai.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will update the “Last updated” date at the top of this page when changes are made. Your continued use of our website after any update constitutes acceptance of the revised policy. For significant changes, we will make reasonable efforts to notify you directly.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

For data deletion requests, see Section 3 above for the full process.