Last updated: 7 July 2026
saripm.com is operated by SARI Management Group for Technology Solutions (مجموعة ساري الإدارية للحلول التقنية). We are building SARI, a work-management platform born in Saudi Arabia. Before our public launch, we run an interest-register (waitlist) at saripm.com for people who want early access. This policy explains how we handle the personal data we collect through the waitlist.
When you join the waitlist, we collect:
| Data | Required | Why we collect it |
|---|---|---|
| Name | Yes | To identify you and personalise the emails we send you |
| Email address | Yes | Your place in the waitlist, and our only way to reach you |
| Organization (work or study) | Yes | To understand who our users are and build the platform around their needs |
| Specialty | Yes | Extra context about your role or field |
| Profiling answers (role, current tools, challenges, industry) | Waitlist form | To understand what our users need and build the right platform. Never sold or shared beyond what this policy describes |
| Consent record | System | A timestamped log of what you agreed to and when, as the law requires |
We do not collect passwords or payment information. We minimise technical data and avoid linking it to your identity; some limited technical data may be processed for security or analytics according to the settings in place.
The lawful basis for processing your waitlist data is your consent, under the Saudi Personal Data Protection Law (PDPL). Your consent covers three specific purposes:
We also keep a timestamped consent record as the law requires. You can withdraw your consent at any time; doing so does not affect the lawfulness of processing before the withdrawal. You can also stop the launch-update and research messages at any time, through the unsubscribe link in each email or by contacting us, without affecting your place on the waitlist.
| Provider | Role | Location | Personal data? |
|---|---|---|---|
| Microsoft Azure | Hosting, compute, database (Azure Database for PostgreSQL), file storage, and secrets | UAE North (migration to the Azure Saudi Arabia region planned) | Yes: your waitlist record lives here |
| Cloudflare Turnstile | Bot protection at form submission only | N/A | We store no personal data from it; the tool may process limited technical data for bot protection |
| Resend | Transactional email delivery (confirmation and welcome) | United States (disclosed) | Email address only, for delivery |
| PostHog Cloud EU | Pseudonymous usage analytics, data minimised | European Union (disclosed) | Pseudonymous internal IDs only, never name or email |
A note on data location. Your personal data is currently stored on Microsoft Azure in the UAE North region, which is outside the Kingdom, under the safeguards described in the Transfers section below. We are working to migrate to the Azure Saudi Arabia region when it becomes generally available, as part of our commitment to in-Kingdom data residency, with Q4 2026 as the target. We will update this policy when that migration is complete.
Some processing of your data takes place outside the Kingdom, under the conditions set by Article 29 of the PDPL: a legitimate purpose, no prejudice to national security or vital interests, an adequate level of protection, and limiting the transfer to the minimum necessary.
We apply appropriate safeguards to these transfers consistent with Article 29, including data processing agreements and the approved standard contractual clauses where applicable, so your data is protected to Saudi legal standards.
| Status | Retention |
|---|---|
| Pending: signed up, email not yet confirmed | 7 days, then automatically deleted |
| Verified: email confirmed | Kept until the purpose you signed up for ends, or until you request deletion. In any case, if you do not engage, we delete or de-identify your record after 18 months of inactivity, or within 12 months of launch if you do not start using the platform |
We delete personal data without undue delay once the purpose for collecting it ends, in line with Article 18 of the PDPL.
Under the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19, 1443H), you have the right to:
To exercise any of these rights, email Legal@saripm.com. We aim to respond within 30 days, unless the law or the nature of the request requires a different period.
We do not use advertising cookies or retargeting tools, and we do not track you across other sites.
We use pseudonymous usage analytics (PostHog Cloud EU) to understand how the site is used and improve it, and we minimise the data and avoid linking it to your identity. Cloudflare Turnstile runs at form submission for bot protection and may process limited technical data for that purpose, without our linking it to your identity.
We protect your data with industry-standard security, including encryption in transit and at rest, per-workspace data isolation, and least-privilege access controls. In the unlikely event of a data breach, we will notify you and the competent regulatory authority (the Saudi Data and Artificial Intelligence Authority, SDAIA) within the timeframes set by the PDPL.
If we make changes, we will update the date at the top of this page. If the changes are material, meaning they meaningfully affect how we use your data, we will notify you by email as well.
The controller of your personal data is SARI Management Group for Technology Solutions.
© 2026 SARI Management Group for Technology Solutions. All rights reserved.