Privacy Policy for Mr. X - B2B Wholesale Platform

Effective Date: July 16, 2026

This Privacy Policy describes how Mr. X ("we," "our," or "us") collects, uses, stores, and protects your personal information when you use our mobile application (the "App") and related services. We are committed to protecting your privacy and handling your data in a transparent and secure manner, in compliance with the laws and regulations of the Kingdom of Saudi Arabia.

1. Information We Collect

To provide you with a seamless B2B wholesale experience, we collect the following types of information:

• Personal Identification Information: Full name, business name, commercial registration number (CR), VAT number, email address, phone number, and physical business address.
• Account Credentials: Username and hashed password for secure access to your account.
• Transaction Data: Information about orders, quotes, negotiations, purchase history, payment details, and shipping information.
• Device and Usage Data: IP address, device type, operating system, unique device identifiers, app usage statistics, and browsing behavior within the App to improve user experience.
• Location Data: General location (country/city) to personalize supplier suggestions and comply with regional regulations. We do not collect precise GPS data without your explicit consent.
• Communications Data: Records of your interactions with our support team, chat messages with suppliers, and feedback.

2. How We Use Your Information

We use the collected information for the following business purposes:

• Core Service Delivery: To connect you with suppliers, facilitate price comparisons, process orders, manage deliveries, and provide customer support.
• Account Management: To create and maintain your account, verify your business identity, and ensure the security of your transactions.
• Personalization: To tailor product recommendations, supplier suggestions, and promotional offers based on your preferences and purchase history.
• Communication: To send you important notifications about your orders, updates to our services, and (with your consent) marketing communications about new products and features.
• Analytics and Improvement: To analyze usage trends, monitor app performance, fix bugs, and enhance the overall functionality of the platform.
• Legal Compliance: To comply with applicable laws, regulations, and requests from regulatory authorities in the Kingdom of Saudi Arabia.

3. Sharing Your Information

We do not sell or rent your personal information to third parties for marketing purposes. We may share your data only in the following limited circumstances:

• With Suppliers: When you request a quote or place an order, your business name, contact details, and shipping address are shared with the relevant supplier to fulfill your order.
• With Service Providers: We engage trusted third-party companies to perform services on our behalf, such as payment processing, logistics and delivery, cloud hosting, and data analytics. These providers are contractually bound to keep your data confidential and use it only for the specified services.
• For Legal Reasons: We may disclose your information if required by law, court order, or governmental regulation, or to protect our rights, property, or safety, and that of our users or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your information may be transferred to the new entity, subject to this same Privacy Policy.

4. Data Security

We take the security of your business data seriously. We implement industry-standard technical, physical, and administrative safeguards to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using TLS/SSL protocols. Sensitive data (like passwords) is hashed and stored securely.
• Access Control: Access to your personal data is restricted to authorized employees and service providers who need it to perform their job functions.
• Regular Audits: We conduct regular security reviews and vulnerability assessments to maintain a robust security posture.

5. Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. For example:

• Transaction records are retained for at least 10 years to comply with Saudi tax and commercial regulations (ZATCA).
• Account information is retained as long as your account is active and for a reasonable period thereafter in case of reactivation.
• Usage and analytics data may be retained for a shorter period to improve our services.

6. Your Rights and Choices

As a user in the Kingdom of Saudi Arabia, you have the following rights regarding your personal data:

• Access and Correction: You can access, update, or correct your personal information directly within the App under "My Profile" or by contacting our support team.
• Data Portability: You may request a copy of your data in a structured, machine-readable format.
• Deletion: You may request the deletion of your account and associated personal data, subject to legal retention obligations (e.g., tax records).
• Marketing Opt-Out: You can opt out of receiving marketing emails and push notifications at any time by adjusting your settings within the App or by clicking "Unsubscribe" in our emails.

To exercise any of these rights, please contact us using the details in Section 12 below.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience on our platform. These are small data files stored on your device that help us:

• Remember your preferences and login session.
• Analyze how you interact with the App to improve our features.
• Deliver relevant content and promotions (with your consent).

You can manage your cookie preferences through your device settings. However, disabling certain cookies may affect the functionality of the App.

8. Third-Party Links and Services

The App may contain links to external websites or services (e.g., payment gateways) that are not operated by us. This Privacy Policy does not apply to such third-party services. We encourage you to review the privacy policies of any third-party services you access through our App.

9. Children's Privacy

Our services are strictly for business-to-business (B2B) users and are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it promptly.

10. International Data Transfers

Your information may be transferred to and processed in countries other than Saudi Arabia, where our servers or service providers are located. We ensure that any such transfers are conducted in compliance with applicable data protection laws and that appropriate safeguards are in place to protect your data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy within the App and updating the "Effective Date" at the top of this document. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us through the App's support channel or via email at:

Email: support@mr-x-app.com

Address: Mr. X Headquarters, Riyadh, Kingdom of Saudi Arabia

13. Consent

By using the Mr. X App, you consent to the collection and use of your information as described in this Privacy Policy.