Privacy policy

This policy is prepared to comply with the Personal Data Protection Law (Royal Decree M/19), its Implementing Regulation, and SDAIA guidance. It is provided for general informational purposes and does not replace tailored legal advice.

Last updated: Thursday, 27 August 2026 (13/02/1448 AH)

1. Identity of the Controller

This policy is issued by Bineyes Company (شركة العين الثنائية), Commercial Registration No. (7031758878), owner of the TeamBoard platform, and the “controller” of personal data under the Personal Data Protection Law (PDPL).

2. Scope of this Policy

This policy applies to any personal data collected or processed through the platform (website, application, and APIs), and covers users (individuals, teams, and organizations) as well as platform visitors.

3. Data We Collect

CategoryData
Account dataFirst name, last name, email address, phone number, password (hashed)
Usage dataProjects, tasks, chats, boards, forms, tickets, and user settings (language, theme, timezone)
Billing dataSubscription and plan details, processed via the approved payment gateway (Moyasar)
AI dataTask content refined through AI features, and usage balance (tokens)
Technical dataIP address, browser type, login logs, and cookies necessary to operate the platform

4. Processing Purposes and Legal Bases

We process your data for the following purposes and on the legal bases set out below:

PurposeLegal basis (PDPL)
Creating and managing accounts and providing the serviceContract performance (Art. 6/a)
Processing subscriptions and paymentsContract performance (Art. 6/a)
Improving service security and stabilityLegitimate interest (Art. 6/d)
Complying with legal obligations (tax, commercial)Legal obligation (Art. 6/c)
Communicating about updates and supportConsent (Art. 6/b) where required

5. Cookies

We use cookies to improve browsing and operate the platform. Essential cookies: required for website functionality and secure sign-in. Analytical cookies: to understand platform usage and improve the service. We do not use cookies to transmit passwords or workspace content. You can control cookie settings from your browser.

6. Sharing Data with Third Parties

The platform does not sell your personal data. Data is shared only in the following cases:

  1. Service providers: the payment gateway (Moyasar), infrastructure and storage providers, limited to what is necessary to operate the service and under binding processing contracts.
  2. Competent authorities: when required by a lawful order from a competent authority in the Kingdom.
  3. Merger or transfer: if the platform is sold or merged, provided the successor commits to this policy.

7. Cross-Border Transfers

Any transfer of personal data outside the Kingdom of Saudi Arabia — if it occurs — is carried out only in accordance with the controls and procedures decided by the Saudi Data and AI Authority (SDAIA), ensuring an adequate level of protection or approved standard contractual safeguards.

8. Retention Period

The platform retains personal data for as long as needed to fulfill the purpose for which it was collected, and for any period required by legal (accounting or commercial) obligations. When the purpose and obligations end, data is securely destroyed or de-identified.

9. Data Subject Rights

Under the Personal Data Protection Law, as a data subject you have the following rights, which you may exercise by contacting the Data Protection Officer:

  1. Be informed about your data and how it is processed.
  2. Access a copy of your personal data.
  3. Rectify and update inaccurate data.
  4. Object to processing in specific cases.
  5. Request deletion/destruction when the purpose no longer applies and no legal retention duty remains.
  6. Withdraw consent for consent-based processing (without affecting the lawfulness of prior processing).
  7. Restrict processing or request data portability where the law provides.

The platform responds within the legally prescribed period; if a request is refused, the legal reason is stated.

10. Data Security

The platform applies appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or loss, including encryption, non-recoverable password storage, and access monitoring.

11. Data Breach Incidents

If a security incident affecting personal data occurs, the platform will follow the legally required procedures toward the supervisory authority and notify affected individuals as required by law.

12. Complaints and Supervisory Authority

12/1 For complaints or inquiries related to data protection, contact the Data Protection Officer: dpo@teamboard.sa

12/2 You may lodge a complaint with the Saudi Data and AI Authority (SDAIA) — the supervisory authority for the PDPL — whenever your rights under the law may have been affected.

13. Policy Changes

This policy is reviewed periodically. Any material update is reflected in the “Last updated” date above and published on this page.

Contact