Privacy policy
What data the Rajeeh platform holds, where it is, who handles it, and for how long, in plain words.
Last updated: 25 October 20261 Who we are and what this covers
This policy is issued by Rajeeh Ets. (‘Rajeeh’, ‘we’), commercial registration 7054995753, registered in the Kingdom of Saudi Arabia.
It covers the site at rajeeh.com, the school dashboard, and the school sites we host, whether at an address like school.rajeeh.com or on a school's own domain. It does not cover other sites we link to.
The Personal Data Protection Law of the Kingdom (PDPL) applies to the personal data described here.
Read this policy together with the terms of service.
2 The data we hold
The school and its site
The school's name and web address, everything the school publishes on its site (text, news, events, photos, logo), and the contact details the school chooses to show on it, such as a phone number, WhatsApp, social accounts or a map link. A school site is public.
The owner's account
The owner's name, mobile number, email address if given, and language.
Billing
The subscription's state, each payment and its receipt (the school's name and site address, the amount, the period), and, from the payment gateway, the card's brand, its last four digits and the reference codes that let the subscription renew. We never receive the card number.
Messages to a school
What a guardian sends through a school site's contact or admissions form: name, mobile number and/or email, the message, and for admissions the student's grade, the year, and how the family heard of the school.
Messages to Rajeeh
What you send through the contact page or the chat button of rajeeh.com: your name, your school, mobile number and email if given, and what you write.
Technical data
Server logs with the IP address, browser, pages and time of each request; your sign-in session and a record of sign-ins to the account; and, for a school's own domain, the domain name, what its DNS records show, and its certificate.
3 What we use it for
We use this data to:
- run the school's site and its dashboard, and sign the owner in;
- protect accounts from anyone signing in without permission;
- charge the subscription and issue receipts;
- translate the school's site into its second language;
- deliver guardians' messages to the school, and answer the messages sent to us;
- connect a school's own domain and keep its certificate valid;
- find and fix faults.
Nothing else. We do not advertise, we build no profiles, and we count no visitors: the platform has no analytics.
4 Where the data is
Everything the platform stores, from accounts and messages and billing to the photos and logos schools upload, is on our server in Jeddah, Saudi Arabia. Backups of the database and of the photos are kept on the same server for 90 days.
5 Who else handles data
These services do a part of the work for us. Each receives only what its task needs:
- WafaiCloud (Jeddah) hosts our server, where the database and the photos live.
- Taqnyat (taqnyat.sa) sends Rajeeh's SMS: the verification code, a school's account notices to its owner (billing, the domain, messages received), and the time of a platform demo to whoever asked for one; it receives the mobile number and the message.
- Resend delivers Rajeeh's emails: the rajeeh.com contact page's messages and their confirmation, and a school's account notices to its owner (invoices, renewals, the domain, messages received).
- Google's Gemini service translates the text of a school's site into its second language: it receives that text (pages, news, events), which the school publishes. It receives no accounts and no messages. When a school asks, it also suggests a motto, and receives nothing about the school for it.
- Tap takes card payments: it receives the school's name, the school owner's mobile number and the amount of each payment; card details are entered on its page and stay with it. We keep the card's brand, its last four digits and Tap's reference codes.
- Let's Encrypt issues the certificate of a school's own domain: it receives the domain name.
We disclose data to an authority only when Saudi law requires it, and only what is required.
6 Guardians' data
When a guardian writes to a school through its site, the school is responsible for that data; Rajeeh keeps it for the school and acts on the school's instructions.
We do not read or use those messages for any purpose of our own, and we never contact guardians.
A guardian who wants to see, correct or delete such data asks the school first; we help the school do it.
7 Cookies and your browser
Cookies
NeededA session cookie that keeps you signed in and remembers your language, a security token that protects forms, and one that keeps your chat if you start one. The session ends after 2 hours without activity. All are needed for the platform to work.
Local storage
On your deviceYour browser keeps a few small preferences of yours on your own device, such as the monthly or yearly view on the pricing page. They never reach us.
There are no analytics or advertising cookies, and no third party places anything on the platform or on school sites. A page asks nothing of any outside service: even its fonts come from our server. The one exception is the Billing page, which loads Tap's card fields and, on Apple devices, Tap's Apple Pay button, so card details go straight to Tap and never pass through our server.
8 How long we keep data
The content of a site that has been unavailable for 90 days may be deleted, after telling the school through the contact details on its account. A record deleted from the platform may remain in a backup for up to 90 days.
9 Your rights
You may ask to see the personal data we hold about you, to correct it, to delete it unless the law requires us to keep it, or to object to a use of it.
Write to care@rajeeh.com. We check who you are and answer within 30 days, at no charge.
10 Contact
Rajeeh Ets.
Commercial registration 7054995753
We answer privacy questions as soon as we can.