Privacy Policy

Last updated: 5 October 2026

SeebawayhGPT respects your privacy. This policy explains how we collect, use, store, and share personal data when you visit our website, join early access, contact us, or use our educational services. It is written for visitors in the Kingdom of Saudi Arabia and the wider Gulf, in line with the Saudi Personal Data Protection Law (PDPL) and the role of the Saudi Data and AI Authority (SDAIA).

By using the site or giving us your data, you acknowledge this policy. Where the law requires explicit consent, we process that data only after you give it.

1. Who we are

The controller of personal data is SeebawayhGPT, a digital service for classical Arabic, iʿrāb, and naḥw, offered through this website and the related product.

If we later appoint a dedicated data-protection officer or a registered entity in the Kingdom, we will update this section at once.

2. Scope

This policy covers:

  • The marketing site and its pages (including the blog, FAQ, and pricing)
  • Early-access and newsletter forms
  • The contact form
  • Cookies, language preference, and consent choice
  • Seebawayh services once accounts launch (parsing, proofreading, the Academy, Researcher mode), to the extent we process your data to provide them

It does not cover third-party sites we link to. Read those parties' policies before you give them your data.

3. Data we collect

We collect the least data needed for the purpose. We do not sell your data, and we do not collect sensitive data on purpose.

Data you give us

  • Name, if you enter it on the contact form
  • Email address, when you subscribe or write to us
  • The message you send
  • The interface language you choose (Arabic or English)
  • Arabic text you submit in the product after launch (for grammatical analysis, proofreading, or lessons)

Data collected automatically

  • IP address, in a limited way, to prevent abuse and apply rate limits
  • Browser, device, and pages viewed, if you accept optional cookies
  • The time of a subscription or message, and whether delivery succeeded

Cookies and local storage

Choices are managed by category: necessary, preferences, analytics, and marketing. See the Cookie Policy for the actual inventory.

  • Necessary: sb_consent remembers your category choices, NEXT_LOCALE is set after you switch language, and theme is stored after you use the appearance control
  • Analytics: Google Analytics 4 measures visitor numbers, pages and approximate country/city, loads only after Analytics consent, with advertising signals disabled
  • Marketing: does not load before category consent, and no marketing script is active today

What we do not ask for

We do not ask for a national ID, payment details on the current marketing site, or religious, health, or credit data. Do not paste other people's data or sensitive information into our forms.

4. How we collect data

  • Directly from you through forms, subscription, and use of the service
  • Automatically through the server and cookies, according to your choice
  • We do not buy mailing lists or collect your data from marketing brokers

5. Purposes and legal bases

We process data for the purposes below, under the PDPL and its Implementing Regulation:

  • Run the site and remember language (language cookie and page direction): legitimate interest, or performing the service you asked for.
  • Record your privacy choice (consent cookie): legal duty and documenting consent or refusal.
  • Early access and newsletter: your consent when you subscribe; you may withdraw it at any time.
  • Reply to contact messages: performing your request, and a legitimate interest in following up.
  • Protect the service (rate limits and spam controls): legitimate interest and information security.
  • Improve the visit (optional aggregated statistics): your consent through the cookie banner.
  • Provide iʿrāb and teaching after launch: contract performance, or pre-contract steps with your consent.

We do not use your data for solely automated decisions that produce a legal or similarly significant effect on you without appropriate human involvement.

6. Artificial intelligence and your texts

Seebawayh is a language-learning tool. If you enter Arabic text for analysis, proofreading, or practice:

  • We process it to deliver the educational result you asked for
  • It may be kept for a limited time to finish the session and handle security issues
  • We do not publish your texts
  • We do not sell your texts or use them to advertise unrelated products
  • Do not enter professional secrets, student records, or sensitive data about others

If we later improve models on aggregated data, we rely as far as possible on de-identified data that is not tied to you. We will not change that practice without updating this policy.

7. Children and family use

Our services are intended for people aged 18 or older, or for younger users under a parent or guardian. If a child uses a family account or an educational exercise, the guardian consents to that processing. If we learn that a child submitted data without guardian consent, we delete it once we have verified the request. Write to hello@seebawayhgpt.io.

8. Who we share data with

We do not sell personal data. We may share only what is needed with processors bound by confidentiality and our instructions, including:

  • Hosting and site-operation providers
  • Email and list tools (for welcome messages and updates)
  • Abuse-prevention and form-protection tools
  • Font or infrastructure providers required to display the page
  • Competent authorities in the Kingdom or elsewhere if a binding legal order requires it

Disclosure is limited to the purpose. We do not share subscriber lists with third-party advertisers.

9. Cross-border transfers

Some data may be processed or hosted outside Saudi Arabia, because part of our cloud and email stack runs on international providers. When that happens:

  • We transfer only what is needed for the stated purpose
  • We require appropriate contractual safeguards from the processor
  • We follow SDAIA rules on transferring personal data, including assessing the level of protection and obtaining any required approvals

If we later host data of residents of the Kingdom inside the Kingdom or on an approved cloud, we will say so here.

10. Retention

We keep data only as long as the purpose or the law requires:

  • Early-access subscription: until you unsubscribe or ask for deletion, then a short period to complete the request
  • Contact messages: up to 24 months, unless a legal duty or dispute remains
  • Cookie-consent record: 12 months
  • IP logs used for rate limits: a short security period
  • Product accounts after launch: for the life of the account, then a reasonable period after closure for billing or legal duties if any
  • Analysis texts: the shortest period needed to finish the session and keep the service safe, unless you choose to save your work in an account

When the period ends, we delete the data or de-identify it so it is no longer linked to you.

11. Security

We apply reasonable organisational and technical measures against unauthorised access, change, or loss, including limited access rights, encrypted connections where possible, and controlled access to mail and subscription tools. No internet transmission is perfectly secure. If a serious incident affects your data, we notify the competent authority and the people concerned as the law requires.

12. Your rights

Where the Saudi PDPL applies to the processing of your data, you have in particular:

  1. The right to be informed about the processing and its purposes
  2. The right to access your personal data
  3. The right to request a clear copy of it
  4. The right to request correction if it is inaccurate or incomplete
  5. The right to request destruction if there is no remaining legal reason to keep it
  6. The right to withdraw consent at any time, without affecting processing that was lawful before the withdrawal
  7. The right to complain to the Saudi Data and AI Authority (SDAIA)

To exercise your rights, email hello@seebawayhgpt.io or use the contact form. We verify your identity to a reasonable extent before acting, and we respond within the statutory periods. We may refuse a request if the law requires us to, and we will explain why.

To leave the newsletter, use the unsubscribe link in the message or write to us from the address we have on file.

13. Complaints to SDAIA

If we cannot resolve your concern, you may complain to the competent authority in the Kingdom:

  • Saudi Data and AI Authority (SDAIA)
  • Official site: sdaia.gov.sa

We welcome you to contact us first so we can handle the request quickly.

14. Other Gulf countries

If you visit from the UAE, Qatar, Bahrain, Kuwait, or Oman, we apply the same standards of transparency: data minimisation, a clear purpose, and a practical way to access, correct, or delete your data where we can. Where a local data-protection law applies, we respect it in addition to our duties in the Saudi market.

15. Links and third-party tools

The site may load a web font or other technical tools. If you accept optional cookies, that provider may receive technical data such as an IP address. Read that provider's policy. We do not control university or reference sites we mention to explain the product.

16. Changes

We may update this policy when the service or the law changes. The latest date appears at the top. If a material change affects processing that relied on your consent, we will ask for a new consent where the law requires it.

17. Contact us

For privacy questions or rights requests:

SeebawayhGPT. This policy is written in clear language for visitors in Saudi Arabia and the Gulf. It is not legal advice. If a clause conflicts with a binding legal text, that text prevails.