Privacy Policy
Last updated: 6 September 2026. This policy explains how Masar Next ("we") collects, uses and protects personal data in line with the Saudi Personal Data Protection Law (PDPL).
1. Who we are
Masar Next is a technology company based in Riyadh, Saudi Arabia. Contact: info@masarnext.com.
2. Data we collect
Contact details you submit through forms (name, company, email, phone, message); account data for the client portal; technical data such as IP address, browser type and pages visited; and communications with our support team.
3. How we use it
To respond to enquiries and provide quotes; to deliver and support contracted services; to send invoices and service notices; to improve our website and services; and to comply with legal obligations such as tax and e-invoicing rules.
4. Legal basis
We process data with your consent, to perform a contract with you, to meet legal obligations, or where we have a legitimate interest that does not override your rights.
5. Sharing
We share data only with service providers who help us operate (hosting, email, payments, analytics) under confidentiality agreements, and with authorities where required by law. We do not sell personal data.
6. Storage and security
Data is stored on secured systems hosted in the Kingdom of Saudi Arabia or in regions permitted by law. We apply access controls, encryption in transit and regular backups.
7. Retention
We keep data only as long as needed for the purposes above or as required by law (for example, accounting records for the statutory period), then delete or anonymise it.
8. Your rights
You may request access to, correction or deletion of your data, withdraw consent, or object to certain processing by emailing info@masarnext.com. We respond within 30 days.
9. Cookies
Our website uses essential cookies and privacy-friendly analytics. You can control cookies in your browser settings.
AI demonstrations
When you run a Prototype Lab demo, your question, business brief or submitted public webpage is processed by Anthropic to generate a response. Do not submit personal, client or confidential information. We do not store the raw prompt in our demo database. Generated results and any submitted webpage URL are available to the originating browser for 24 hours and cleared by our hourly cleanup afterward. We retain usage metadata, including a hashed visitor identifier, to enforce limits. A browser session cookie protects access to results. These retention periods describe our demo database, not the AI provider’s own systems.
10. Changes
We may update this policy; the latest version is always published on this page with its date.