Privacy policy

1Who we are and the scope of this policy

This policy describes how Mohassa ("the Platform", "we") collects, uses, and protects the personal data of its users — real estate agencies, partners, and platform administrators — when using the website and application. Mohassa is committed to the principles of the Saudi Personal Data Protection Law and its implementing regulations.

2Definitions

• "Platform" or "we": Mohassa and the services provided through the website and application.
• "User": any person using the Platform as a platform admin, real estate agency, or partner.
• "Personal data": any data that identifies a natural person, directly or indirectly.
• "Processing": any operation performed on personal data, such as collection, storage, use, or transfer.

3Data we collect

We collect the following categories of data depending on your role on the Platform:

• Account data: name, mobile number, email, and role (agency / partner / admin).
• Project and ownership data: project details, areas, ownership shares, and linked partners.
• Financial data: development expenses, revenue, calculated profits, dues, and payouts.
• Uploaded files: documents, contracts, and attachments added by the user.
• Technical data: IP address, device and browser type, and sign-in and usage logs.

4Legal basis for processing

We process your data based on one or more of the following bases, consistent with the Personal Data Protection Law:

• Performance of the contract between you and the Platform or the real estate agency.
• Your explicit consent, where required by law.
• Mohassa's legitimate interest in operating, developing, and securing the Platform.
• Compliance with a legal obligation to which Mohassa is subject.

5How we use your data

• Providing Platform services and managing accounts and projects.
• Verifying identity through the one-time passcode (OTP) sent by SMS.
• Calculating ownership shares, profits, and dues, and displaying them to authorized users.
• Communicating with you about your account or inquiries.
• Improving Platform performance and security and preventing misuse.

6Sharing data with third parties

Mohassa does not sell your personal data to any party. Limited data may be shared with:

• Hosting and technical infrastructure providers.
• SMS providers used to deliver identity-verification codes (OTP).
• Competent government authorities, upon a formal request under applicable Saudi law.

7Transferring data outside the Kingdom

Some data may be hosted or processed through providers with infrastructure located outside Saudi Arabia. In such cases, Mohassa complies with the controls set out in the Personal Data Protection Law for transfers abroad, including verifying that the receiving party maintains an adequate level of protection.

8Data retention period

We retain your data for as long as necessary to fulfil the purpose for which it was collected, or to meet a legal or contractual obligation, after which it is deleted or de-identified in accordance with our internal retention policies and applicable law.

9Data security

• Encrypted communication between the user and the Platform.
• Access permissions defined by user role (admin / agency / partner).
• Audit logs for sensitive operations on financial data.
• Internal procedures to limit unauthorized access.

10Your rights over your data

Under the Personal Data Protection Law, you have the right to:

• Know the legal basis and purpose of processing your data.
• Request access to your personal data held by the Platform.
• Request correction or completion of inaccurate data.
• Request destruction of your data once it is no longer needed, subject to applicable rules.
• Withdraw your consent at any time where processing is based on consent.

11Cookies

The Platform uses essential cookies to operate the website and remember your preferences (such as language and appearance). These are not used for advertising or tracking purposes.

12Children's privacy

The Platform is intended for use by legally competent adults representing real estate agencies or acting as partners, and does not knowingly collect data from children.

13Data breach notification

In the event of an incident affecting the confidentiality or integrity of your personal data, Mohassa will notify the competent authority and affected users within the timeframes and procedures set out in the Personal Data Protection Law and its implementing regulations.

14Changes to this policy

This policy may be updated from time to time to reflect service developments or regulatory changes. The date of the last update is shown at the top of this page, and we recommend reviewing it periodically.

15Contact and complaints

For any question about this policy, or to exercise your rights, please contact us via the Contact page. You also have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority for enforcing the Personal Data Protection Law in the Kingdom.