Last updated: 2026-07-12
Welcome to Ghallah, a platform for car wash operations management. We are committed to protecting your privacy and personal data under the Saudi Personal Data Protection Law (PDPL), issued in 2021, and its implementing regulations issued in 2023.
This policy explains the types of data we collect, why we collect it, how long we keep it, and your rights.
| Data type | Purpose | Retention period |
|---|---|---|
| Full name and email address | Sign-in and account management | Contract period + one year |
| Detection records (vehicle type, revenue) | Revenue reports and billing | 90 days |
| Vehicle images | Detection verification and model improvement | 90 days |
| Drying proof images | Service verification and operational audit | Same operational retention as detection proof |
| Activity logs | Audit and security | One year |
| Session data | Secure authentication | 15 minutes for access tokens / 30 days for refresh tokens |
Important note: We do not store vehicle plate numbers or driver-identifying personal data. The detection system records only the vehicle type.
Your personal data is stored only inside Saudi Arabia on Oracle Cloud Infrastructure servers in the Riyadh region (ME-RIYADH-1), in line with PDPL requirements.
AI detection runs locally on the branch device. The platform does not keep a permanent raw camera-video archive, but it may store cropped vehicle snapshots, exit snapshots, and worker-provided drying proof still images that are needed for review, billing audit, support, and model-quality improvement.
| Processor | Purpose | Location |
|---|---|---|
| Oracle Cloud (OCI) | Server and database hosting | Riyadh, Saudi Arabia |
| SNDR (sndr.sh) | Camera alert email delivery | Outside Saudi Arabia for operational email only |
You can export a full copy of your data from Settings or by sending a request to support.
You can update your name and email from Settings, or contact support.
You can request account deletion. Your identity will be anonymized and personal data removed within the applicable period, while records required for financial or tax obligations may be retained.
If you object to any processing of your data, contact us and we will review your request within 15 business days.
For privacy questions or to exercise your rights:
Email: support@ghallah.net
Response time: within 15 business days
Regulator: Saudi Data and AI Authority (SDAIA)
We may update this policy from time to time. If we make material changes, we will notify you by your registered email or through a prominent in-app notice before the change takes effect.