Privacy Policy

How we protect your data and respect your privacy

Last updated: February 17, 2026

1. Introduction

Karam Platform values your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL). This policy explains how we collect, use, protect, and share your information.

2. Data We Collect

2.1 Registration Data

Full name, mobile number, email, password (encrypted), account type (visitor / host family / company).

2.2 Additional Data for Host Families

Family name and majlis name, majlis address and city, majlis photos, bank account information (IBAN) for payouts, KYC identity verification documents.

2.3 Booking Data

Booking details (date, time, guest count), payment information (processed via a secure payment gateway), ratings and reviews.

2.4 Technical Data

IP address, browser and device type, visit and browsing logs, cookies.

3. How We Use Your Data

Delivering the service (account management, booking processing, payment security); Communication (booking confirmations, updates, important notices); Improvement (usage pattern analysis); Security (identity verification, fraud prevention); Legal compliance.

4. Data Sharing

We do not sell your personal data to any third party. Data is shared only in the following cases:

Host Family	Guest name, guest count, booking date	Fulfilling the booking
Payment Gateway	Payment information	Payment processing
Supabase (Infrastructure)	All stored data	Hosting and operating the Platform
Official Authorities	As legally requested	Regulatory compliance

5. Data Protection

Encryption (all data encrypted in transit via HTTPS/TLS and at rest); Secure authentication; Access permissions (Row-Level Security ensures each user only accesses their own data); Secure storage of verification documents in protected buckets; Payments processed via a PCI DSS-compliant gateway.

6. Cookies

Used to remember your language preference, maintain your login session, temporarily store cart/booking data, and improve site performance. You can manage cookies via your browser settings (this may affect some Platform functions).

7. SMS & Notifications

SMS messages are sent for booking confirmations and important updates; you can unsubscribe from promotional messages at any time; confirmation and security messages cannot be opted out of due to operational necessity.

8. Your Rights

Under the Personal Data Protection Law: Right to Access (request a copy of your stored data), Right to Correction (amend inaccurate data), Right to Deletion (request deletion, subject to legal obligations), Right to Object (to use of your data for marketing), Right to Data Portability. To exercise your rights, contact us at info@karam.com.sa.

9. Children's Data Protection

Karam Platform is not directed at anyone under 18, and we do not knowingly collect data from minors; if discovered, it will be deleted immediately.

10. Policy Updates

This policy may be updated periodically, and users will be notified of material changes via email or a Platform notice. We recommend reviewing this page periodically.

11. Contact Us

Email: info@karam.com.sa · Phone: +966556777063