Effective date: 3 September 2026 Dhao Artificial Intelligence LLC, commercial registration 7049878072, Riyadh, Kingdom of Saudi Arabia, is the controller of the personal data described here. Contact: privacy@dhao.ai
Please do not submit sensitive personal data unless it is necessary for what you are asking the Service to do.
To provide, operate, secure and improve the Service; to create and manage your account; to process your requests and generate responses; to take payment and issue invoices; to provide support; to prevent abuse and fraud; and to meet our legal, tax and regulatory obligations. Where the law requires a legal basis, we rely on your consent, performance of our contract with you, a legal obligation, or a legitimate interest.
Your prompts, files, agent instructions and outputs are processed by our systems and, where applicable, by third-party model or infrastructure providers, in order to deliver the features you asked for. We do not claim ownership of your prompts, uploaded content or business data. We may use anonymised or aggregated data to improve performance, safety and reliability, provided it does not identify you or your organisation.
Service providers who help us operate: cloud hosting and infrastructure, authentication, AI model providers, payment processing, analytics and error monitoring, support tooling, email delivery, and security monitoring. They may process personal data only as needed to provide their service to us and under appropriate contractual and technical safeguards. Where you connect a third-party integration, your use of that integration is also subject to that provider's own terms and privacy policy.
We do not access, disclose, alter or process your personal data for purposes that are not legitimate. **We do not use your personal data or your email address for advertising or marketing without your express prior consent, and we do not sell it or disclose it to any other party for consideration.**
Your data may be stored or processed in Saudi Arabia or in other countries where we or our providers operate. Where data leaves the Kingdom we apply the safeguards required by Saudi data protection law.
We keep personal data only as long as needed for the purposes above, or as required by law. You may close and delete your account at any time from your account settings. Once you do, we stop processing your personal data and delete or anonymise it, except where we must keep it to meet a legal, tax, accounting or security obligation, to defend a legal claim, or to finish a transaction, refund or dispute still in progress. **We do not keep your data after closure for any other purpose without your consent.**
We apply technical and administrative measures proportionate to the data — encryption, access control, authentication, logging, monitoring and backups. No online service can guarantee absolute security, so please protect your credentials and tell us immediately if you suspect unauthorised access. **If your personal data is breached, accessed without authorisation or leaked, we will notify the Ministry of Commerce, in the manner it specifies, and notify you, within three (3) days of becoming aware — stating the scope of the breach, its effects and the measures taken to remedy it.** We will also notify the Saudi Data and AI Authority where the Personal Data Protection Law requires it. Notifying you does not relieve us of our responsibility toward you.
Subject to applicable law you may: be informed how your data is used; access it; ask us to correct it; ask us to delete or destroy it; withdraw consent; ask us to restrict or object to processing; request a copy; and complain to us or to the competent authority. Write to privacy@dhao.ai. We may need to verify your identity first.
We use cookies and similar technologies in four categories only: strictly necessary (sign-in, session security, fraud prevention), functional (preferences), analytics (aggregated usage and error monitoring), and marketing (measuring our own campaigns, off by default until you consent). **We do not use them to build advertising profiles for third parties, and we do not sell the data derived from them.** You can accept or reject the non-essential categories from the cookie preferences link in our footer at any time.
The Service is not intended for anyone under 18 except under the supervision and consent of a parent, guardian, school or authorised organisation.
Write to privacy@dhao.ai or use the complaint form on our site. We acknowledge within 24 hours, respond substantively within 3 business days, and determine the complaint within 10 business days. If you are not satisfied you may escalate to the Saudi Data and AI Authority (SDAIA) for data protection matters, or to the Ministry of Commerce through the "Balagh Tijari" application or the unified number 1900.
We may update this Policy; the revised version is posted here with a new effective date, and material changes are notified to you. This Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and the E-Commerce Law. It is published in Arabic and English. **If the two versions differ, the Arabic version prevails.**