Privacy Policy

1. Who we are

RUBY XI ("we", "us") is a software engineering company based in the Kingdom of Saudi Arabia. We are the party responsible for the personal data collected through this website (rubyxi.com). This policy covers the website only; the systems we build for clients are governed by our agreements with those clients.

For anything about this policy, contact contact@rubyxi.com.

2. What we collect

What you give us: when you use the contact form we receive your name, email and message, plus your phone number, company, budget range, timeline and enquiry type if you choose to fill them in. If you email or WhatsApp us, we receive what you send and your account details on that service (such as your phone number).

What is collected automatically: only if you accept analytics cookies, we use Google Analytics 4 to understand how the site is used: pages visited, approximate country or city, device and browser type, where the visit came from, and whether the contact form was completed. Google states that this service does not log or store IP addresses. Whatever you choose, our hosting provider also processes technical request data (such as your IP address) to deliver pages and protect the site.

On your device: we store only your language, your light/dark preference and your cookie choice in your browser. We use no advertising cookies.

We don't ask for sensitive data (such as health, financial or national ID details) and don't intend to collect it, so please don't send it to us. The site is not directed at children.

3. Why we use your data

• To reply to your enquiry and prepare an assessment or proposal you asked for, on the basis of your consent when you submit the form.
• To measure and improve the site, on the basis of your consent only, given through the cookie banner.
• To protect the site against abuse and spam.
• To meet legal obligations where they apply.

We don't use your data for direct marketing unless you expressly agree, and we never sell or rent it.

4. Who we share it with

We use service providers who process data on our behalf and only for its purpose:

• Vercel: hosts the site and runs the function that sends the contact form.
• Resend: delivers the form message to our inbox.
• Microsoft 365: the mailbox your messages arrive in.
• Google: Google Analytics, and the Google Fonts your browser loads, which lets Google see your IP address.
• WhatsApp (Meta): only if you choose to message us there, under WhatsApp's own privacy policy.

We may disclose data to competent authorities where the law requires it.

5. Transfers outside the Kingdom

The providers above operate data centres around the world, including in the United States and Europe, so your data may be transferred to and processed outside the Kingdom to the extent needed for the purposes above. We choose providers that publish their data-protection commitments, and we follow the rules on transferring personal data outside the Kingdom.

6. Cookies and local storage

On your first visit a banner asks about analytics cookies, and you can accept or reject with one click. Unless you accept, we do not load Google Analytics and set no analytics cookies. If you accept, the service sets first-party cookies (such as _ga and _ga_*) to tell visits apart. You can change your choice at any time with "Cookie settings" in the footer of every page, and if you reject after accepting we delete those cookies. We ask again after 12 months or when this policy changes. The site works normally either way.

Local storage in your browser holds just three keys: rubyxi-lang, rubyxi-theme and rubyxi-consent (your choice and its date). They are needed to run the site and remember your preferences.

7. How long we keep it

We keep contact messages for as long as we need them to reply to you, follow up on your enquiry and maintain our business records, then delete them. Analytics data is kept for the retention period set in our Google Analytics account. We delete your data sooner if you ask, unless the law requires us to keep it.

8. Security

The site runs over encrypted HTTPS, we limit access to contact messages to those who need them, and we choose providers with established security controls. No method of transmission or storage is completely secure. If a breach affects your personal data, we will notify the competent authority and affected individuals as the law requires.

9. Your rights

Under the Kingdom's Personal Data Protection Law, you have the right to:

• know how your data is collected and used (the purpose of this page);
• access your data and obtain a copy;
• ask us to correct or complete inaccurate data;
• ask us to destroy or delete your data once it is no longer needed;
• withdraw your consent at any time, without affecting what happened before withdrawal.

To use any of these, email contact@rubyxi.com. We will verify your identity and reply within 30 days. If you are visiting from the European Union you have the same rights under the GDPR, plus the right to object to processing.

10. Complaints

We hope to resolve any concern first. You also have the right to complain to the competent authority in the Kingdom, the Saudi Data & Artificial Intelligence Authority (SDAIA), or to the data protection authority in your own country if you are outside the Kingdom.

11. Third-party links

The site may link to other sites and services (such as WhatsApp). We are not responsible for their privacy practices, so please read their policies.

12. Changes to this policy

We may update this policy when our practices or the law change, and will post the new version here with its date. Continuing to use the site afterwards means you accept it. Your use of the site is also governed by our Terms & Conditions.

13. Contact

For any question about your privacy: contact@rubyxi.com