Privacy Policy

1. Who we are

Oasis Systems is an IT services company based in Riyadh, Saudi Arabia. For the purposes of the PDPL, Oasis Systems is the data controller responsible for the personal data described in this notice.

If you have any questions about this notice or how we handle your data, contact us at sales@oaisysit.com.

2. What personal data we collect

We only collect personal data that you provide to us directly. We do not buy personal data or obtain it from third parties.

• Contact enquiries: your name, email address, company name, and the content of your message.
• AI Automation Assessment: your name, company name, work email, phone number, job title, and information about your organisation's sector, processes, and operational challenges.
• Account registration: your email address and a password, which is stored in encrypted form and is never visible to us.
• Technical data: a session cookie that keeps you signed in while you use the assessment tool. We do not use advertising or analytics cookies.

3. How we use your data

We process your personal data for the following purposes:

• To respond to your enquiries and provide the information or services you request.
• To generate and deliver your AI Automation Assessment, which includes an automated score produced with the help of an AI model.
• To manage your account and show you your own assessment history.
• To contact you about your enquiry or assessment, and, where you have agreed, about relevant services.
• To meet our legal and regulatory obligations.

4. Our legal basis

We process your personal data on the basis of your consent, given when you submit a form or create an account, together with our legitimate business interest in responding to you and providing our services. Where we rely on consent, you can withdraw it at any time, as explained under 'Your rights' below.

5. Cookies

Our website uses a single, strictly necessary cookie: a session cookie set by our authentication provider that keeps you signed in while you use the AI Automation Assessment tool. This cookie is essential for the service to work and is only set after you log in or register.

We do not use cookies for advertising, tracking, or analytics. This is why the site does not show a cookie consent banner.

6. Who we share your data with

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf, under contract, and only to the extent needed to deliver our services:

• Hosting and database: our website and account data are hosted on Vercel and Supabase.
• AI Automation Assessment: submissions are processed through Trigger.dev and scored with the assistance of a large language model.
• Email delivery: contact messages and system emails are delivered through Web3Forms and Resend.

7. International data transfers

Some of the service providers listed above process data on servers located outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we take reasonable steps to ensure it is handled in line with the PDPL's requirements on cross-border transfers and receives an appropriate level of protection.

8. How long we keep your data

We keep personal data only for as long as necessary for the purposes described in this notice, or for as long as required to meet legal, accounting, or regulatory obligations. When your data is no longer needed, we delete it or make it anonymous. You may ask us to delete your data at any time.

9. How we protect your data

We use technical and organisational measures to protect personal data against loss, misuse, and unauthorised access. These include encrypted connections (HTTPS), access controls, encrypted password storage, and limiting access to personal data to those who need it. No system is completely secure, but we work to keep our safeguards current.

10. Your rights

Under the PDPL, you have the right to:

• Be informed about how your personal data is collected and used.
• Access the personal data we hold about you.
• Request that we correct inaccurate or incomplete data.
• Request that we delete your personal data, where there is no legal reason to keep it.
• Withdraw your consent to our processing at any time.

11. Children's privacy

Our website and services are intended for businesses and professionals. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this notice

We may update this notice from time to time to reflect changes in our services or legal obligations. The date at the top shows when it was last revised. We encourage you to review it periodically.

13. Contact and complaints

If you have questions about this notice, or wish to exercise your rights or make a complaint about how we handle your personal data, contact us first so we can put things right:

• Oasis Systems, Riyadh, Saudi Arabia
• Email: sales@oaisysit.com
• Phone: +966 55 570 3785

You also have the right to raise a complaint with the Saudi Data and AI Authority (SDAIA), which supervises data protection in the Kingdom.