ALIF | Privacy Policy
Page 1
ALIF
فِل أ
Snap it. Document it. Done.
Privacy Policy
Last Updated: March 2026
1. Introduction
ALIF ("فِل أ") ("we," "our," or "us") is committed to protecting your privacy and personal
information. This Privacy Policy explains how we collect, use, disclose, and safeguard your
information when you use our WhatsApp-based platform, services, or communicate with us
through any channel, including WhatsApp, phone, or email.
This Privacy Policy complies with the Personal Data Protection Law (PDPA) of the Kingdom of
Saudi Arabia and other applicable data protection regulations.
By using our platform or services, you agree to the collection and use of information in
accordance with this Privacy Policy. If you do not agree, please do not use our services.
2. Information We Collect
2.1 Information You Provide
We may collect the following types of information when you register for and use the platform:
• Phone Number: Your WhatsApp phone number, used for registration, verification
(OTP), and all platform communications.
• Project Information: Project names, construction phase data, and GPS location from
WhatsApp location pins.
• Uploaded Documents: Receipts, invoices, delivery notes, bank transfer screenshots,
PDFs, and other project documents you submit through WhatsApp.
• Voice Notes: Audio recordings and voice messages submitted through the platform for
transcription and processing.
• Communication Records: Messages, confirmations, approvals, and interactions with
the ALIF platform via WhatsApp.
2.2 Information Generated by the Platform
Through your use of the platform, the following information is automatically generated:
• AI-Extracted Data: Supplier names, amounts, dates, item descriptions, and categories
extracted from your uploaded documents using OCR and AI technology.
• Phase Predictions: Construction phase classifications generated by our AI models
based on receipt and document content.

-- 1 of 6 --

ALIF | Privacy Policy
Page 2
• Ledger Entries: Automated project log entries created from your confirmed
submissions.
• Reports: Monthly PDF project reports summarizing your project activity.
• Audit Trail: Timestamps, approval records, correction histories, and activity logs for all
platform interactions.
2.3 Minimal Data Collection
ALIF follows a minimal data collection principle. We do not collect personally identifiable
information (PII) beyond your phone number and project name. We do not collect your real
name, email address, national ID, or physical address unless you voluntarily provide it through
uploaded documents.
3. How We Use Your Information
We use your information for the following purposes:
• Service Delivery: To provide, process, and manage the ALIF platform services,
including document capture, data extraction, ledger management, and report generation.
• AI Processing: To run OCR, machine learning, and language model processing on your
uploaded documents and voice notes to extract data and generate predictions.
• Communication: To send you automated confirmations, approval requests, project
reports, service updates, and notifications via WhatsApp.
• Account Management: To manage your subscription, user roles, delegations, and
project access.
• Self-Correction: To allow you to review, correct, and update previously submitted
entries.
• Legal Compliance: To comply with legal obligations and regulatory requirements in the
Kingdom of Saudi Arabia.
• Service Improvement: To improve our AI models, platform features, and overall user
experience using anonymized, aggregated data.
• Security: To protect against fraud, unauthorized access, and other security threats.
4. Information Sharing and Disclosure
We do not sell your personal information. We may share your information only in the following
circumstances:
• Service Providers: With trusted third-party service providers who assist in operating our
platform, including cloud infrastructure (Google Cloud), AI processing services, and
payment processors. These providers are contractually obligated to protect your data.
• Team Delegation: When you add Delegates or Guards to your project, they may see
limited project information as defined by their role permissions. Guards can only see
delivery note photos — no cost or pricing data.
• Owner Access: If you grant an Owner view-only access to your project, they will see
only the data you choose to make visible.

-- 2 of 6 --

ALIF | Privacy Policy
Page 3
• Legal Requirements: When required by law, court order, or government regulation in
the Kingdom of Saudi Arabia.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with
notice to affected users.
• Protection of Rights: To protect our rights, property, or safety, or that of our users or
the public.
• With Your Consent: When you have explicitly consented to the sharing.
5. WhatsApp Business Communication
ALIF operates primarily through WhatsApp Business API. When you communicate with us via
WhatsApp (+966500508029), we collect and process:
• Your WhatsApp phone number
• Message content, including text, images, documents, and voice notes
• Timestamps of all communications
• Media files you share (receipt photos, transfer screenshots, PDFs, delivery notes)
• Approval and confirmation responses
This information is processed automatically by our AI systems to provide the platform services.
By messaging ALIF on WhatsApp, you consent to this automated processing.
WhatsApp Group Observer: If you enable this feature (available on Pro and Business tiers),
the ALIF bot will silently join designated WhatsApp groups to capture media and audio for
project documentation. You are responsible for ensuring all group members are aware of and
consent to this observation.
WhatsApp Data: Your communications via WhatsApp are also subject to WhatsApp’s Privacy
Policy (operated by Meta). We encourage you to review WhatsApp’s privacy practices.
6. Data Security
We implement enterprise-grade technical and organizational security measures to protect your
information:
• Encryption at Rest: All stored data is encrypted using AES-256 encryption.
• Encryption in Transit: All data transmitted between your device and our servers is
protected via TLS 1.3.
• Key Management: Encryption keys are managed through AWS Key Management
Service (KMS).
• Private Vault: Sensitive project documents are stored in an encrypted private vault with
additional protection.
• Access Controls: Role-based access ensures Delegates, Guards, and Owners can
only see data permitted by their role.
• Audit Trail: All actions are logged with immutable timestamps for accountability and
traceability.

-- 3 of 6 --

ALIF | Privacy Policy
Page 4
• AI Processing Security: OCR and AI processing runs within Saudi Arabian data
centers.
While we implement strong security measures, no method of electronic transmission or storage
is 100% secure. We strive to protect your information but cannot guarantee absolute security.
7. Data Residency and Storage
In compliance with the Personal Data Protection Act (PDPA) of the Kingdom of Saudi Arabia:
• All user data is stored and processed within Saudi Arabian data centers using Google
Cloud’s KSA region
• AI processing, including Google Cloud Vision for OCR, is performed within Saudi data
centers
• No personal data is transferred outside the Kingdom of Saudi Arabia without appropriate
safeguards and compliance with PDPA requirements
8. Data Retention
We retain your information as follows:
• Project Records: Retained for a minimum of 7 years from the date of creation, in
compliance with Saudi regulations.
• Deleted Data: When you delete data, it enters a 30-day soft-delete window during which
it may be recovered. After this period, data is permanently removed from active systems.
• Account Closure: Upon account cancellation, you have 30 days to export your data.
After this period, your data is handled in accordance with our retention schedule.
• Backup Archives: Data may be retained in encrypted backup archives for the duration
of the retention period, even after deletion from active systems.
When information is no longer needed and the retention period has expired, we securely delete
or anonymize it in accordance with our policies and applicable laws.
9. Your Rights
Under Saudi Arabian data protection laws (PDPA), you have the following rights:
• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information, subject to legal retention
requirements.
• Data Export: Export your project data in CSV or Excel format at any time through the
platform.
• Objection: Object to processing of your information for certain purposes, including
analytics.
• Withdrawal of Consent: Withdraw consent for data processing at any time by
requesting account deletion. Note that withdrawal will result in termination of platform
access.

-- 4 of 6 --

ALIF | Privacy Policy
Page 5
• Opt-Out of Analytics: Opt out of anonymized data analytics participation at any time
through platform settings.
To exercise these rights, please contact us using the information provided in Section 13.
10. Anonymized Data and Analytics
ALIF may use anonymized, aggregated data for analytics, market research, and service
improvement purposes. When data is anonymized:
• All identifying information is removed, including phone numbers, project names, and
specific locations
• Only general categories are retained, such as material type, cost ranges, timelines, and
regional data
• Anonymized data cannot be traced back to any individual user or project
You may opt out of analytics data participation at any time. Opting out does not affect your
access to platform services.
11. Children’s Privacy
Our services are designed for construction industry professionals and are not directed to
individuals under the age of 18. We do not knowingly collect personal information from children.
If you believe we have inadvertently collected information from a minor, please contact us
immediately and we will take steps to delete such information.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices,
technology, or legal requirements. We will notify you of changes by:
• Sending a WhatsApp message to your registered phone number for significant changes
• Updating the “Last Updated” date at the top of this document
Your continued use of our services after changes are communicated constitutes acceptance of
the updated Privacy Policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data
practices, please contact us:
ALIF — Project Documentation & Tracking Platform
WhatsApp: +966500508029
Email: contact@alifdocs.com
Location: Riyadh, Saudi Arabia RHRA2913

-- 5 of 6 --

ALIF | Privacy Policy
Page 6
We will respond to your inquiries within a reasonable timeframe and in accordance with
applicable data protection laws.
14. Consent
By registering on ALIF, using our services, or communicating with us through WhatsApp or any
other channel, you consent to the collection, use, and disclosure of your information as
described in this Privacy Policy.
Important Notice
This Privacy Policy is provided in English. If you require an Arabic translation or have questions
about any section, please contact us for clarification. We are committed to ensuring your privacy
rights are respected and protected.
© 2026 ALIF. All rights reserved.

-- 6 of 6 --