Privacy Policy

01In short

• The website uses no cookies, and no tracking or advertising tools.
• Bashq and Msarat keep your data on your device, and we read none of it — even Bashq sync is encrypted on your device before it leaves.
• Each company’s data on Tarazed lives on a server dedicated to that company, and belongs to it.
• We never sell anyone’s data or use it for advertising.

02When you visit the website

The website has no forms and no accounts, so we never ask you for personal data.

The hosting server automatically logs technical data for each request — IP address, browser type, requested page and time — to run and protect the site. The hosting provider retains these logs under its own policy.

The site stores a single value in your browser’s session storage to remember that you have seen the intro. It is cleared when you close the browser and never reaches us.

Fonts load from Google Fonts and the animation library from Cloudflare’s cdnjs network. Both providers see your IP address in order to deliver the files, under their own policies.

External links — such as LinkedIn and our clients’ websites — are governed by their owners’ policies.

03Bashq and Msarat

Your tasks, notes and recordings in Bashq, and your mind in Msarat, are stored on your device. No account is required, and none of your content ever reaches us in readable form.

Both apps check for updates at updates.surb.tech. That request naturally carries your IP address and the app version — none of your content.

Bashq sync between your devices is optional and off by default. If you turn it on, your data is encrypted on your device with a key from a 12-word link phrase that never leaves your devices and that we hold no copy of; our server (today updates.surb.tech) carries it as a sealed envelope we cannot read or alter. What we see: your IP address and connection time, the size of the encrypted data, and a random identifier for your space.

If you connect an AI assistant (via MCP), that happens on your device under your settings; what the assistant reads is governed by the policy of the provider you choose.

If you record a meeting in Bashq, you are responsible for informing participants and obtaining their consent under applicable law.

04Tarazed

A company’s data — its clients, projects, finances and staff — is stored on a server dedicated to that company alone. The company owns and controls the data; we process it only as needed to build, run, maintain and support the system under our agreement with the company.

For employees, we keep what is needed to run and protect the system: account and role details, the list of approved devices, and a security log (sign-ins, exports, downloads and refused attempts).

Your device’s private key is generated inside its TPM chip and never leaves it.

When a company enables the AI assistant or digital employees, the text needed for each request is sent to the AI provider the company has chosen, under the company’s own account.

Backups are encrypted and taken nightly, stored on the company’s server or in storage the company selects.

The app checks for updates at updates.surb.tech; the platform itself updates on the company’s own server.

If you are an employee with a request about your data, please direct it to your company first, as the controller of that data; we will help it act on your request.

05Who we share data with

We never sell, rent or use data for advertising. We share it only with hosting and infrastructure providers to the extent needed to operate, or when required by law or a competent authority.

06How we protect data

• Every connection to the website and the apps is encrypted; Tarazed’s connection is additionally bound to the device’s own certificate.
• Precise permissions: each user sees only what is theirs.
• Encrypted backups, and security tests run before any change to Tarazed ships.

07Your rights

Under the Personal Data Protection Law you have the right to be informed about how your data is processed, to access it and obtain a copy, to request its correction, to request its destruction once it is no longer needed, and to withdraw your consent. You may also lodge a complaint with the Saudi Data & AI Authority (SDAIA).

08Minors

Our services are intended for businesses and adults. We do not knowingly collect data from anyone under eighteen.

09Changes to this policy

We may update this policy. Every update is published on this page with its date.