Privacy Policy
Last updated: July 2026
1. Overview
This Privacy Policy explains how Tharwh ("we", "us") collects, uses, shares, and protects your personal data when you use our website and service (the "Service"). We process personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL).
2. Data we collect
Account data: email address, and optionally a display name and password (stored only as a secure hash).
Usage & preferences: tickers you view, watchlists, alerts, tier, and product settings, so the Service works and enforces plan limits.
Billing data: subscription tier, billing period, and a payment token / last-4 of your card. Full card details are handled by our payment provider — we never receive or store them.
Technical data: IP address, device/browser information, and cookies necessary for authentication and security.
3. How we use your data
To provide and secure the Service; to authenticate you; to process subscriptions and payments; to enforce plan usage limits; to send service and account communications (including alerts you configure); to comply with legal and tax obligations; and to improve the Service.
4. Legal basis
We process your data to perform our contract with you (providing the Service), to comply with legal obligations (such as VAT/tax records), and for our legitimate interests in operating and securing the Service, consistent with the PDPL.
5. Sharing with service providers
We share the minimum necessary data with trusted processors who act on our behalf, including: our payment gateway (to process subscription payments), our email provider (to send account and alert emails), our cloud hosting and database providers, and market-data providers (to serve the analytics you request). We do not sell your personal data.
6. International transfers
Some processors may store or process data outside the Kingdom of Saudi Arabia. Where they do, we take steps to ensure an appropriate level of protection consistent with the PDPL.
7. Cookies
We use strictly necessary cookies for authentication and security (keeping you signed in and protecting your session). We do not use third-party advertising cookies.
8. Data retention
We keep account and billing data for as long as your account is active and as required to meet legal, tax, and accounting obligations. When no longer needed, data is deleted or anonymised.
9. Security
We use industry-standard measures — encryption in transit, hashed passwords, and access controls — to protect your data. No system is perfectly secure, but we work to protect your information and to notify you of material incidents where required by law.
10. Your rights
Subject to the PDPL, you may request access to, correction of, or deletion of your personal data, and you may object to or restrict certain processing. To exercise these rights, contact support@tharwh.com.
11. Children
The Service is not intended for anyone under 18, and we do not knowingly collect data from children.
12. Changes
We may update this Policy from time to time. Material changes will be notified to you, and the "last updated" date above will change.
13. Contact
For any privacy question or request, email support@tharwh.com.