Privacy Policy

1. Introduction

OpenQlik ("we", "our", "us") is committed to protecting the privacy and security of your personal data. This Privacy Policy explains how we collect, use, store and protect your information in compliance with the Saudi Personal Data Protection Law (PDPL), the European General Data Protection Regulation (GDPR) and other applicable data protection laws.

For data protection inquiries, contact our DPO at privacy@openqlik.com.

2. Data we collect

• Identity: name, job title, company.
• Contact: email address, phone number.
• Technical: IP address, browser type, device information, cookie identifiers.
• Usage: pages visited, features used, agent and voice activity.
• Customer content: prompts, knowledge base documents and voice samples you upload.

3. How we use your data

• To provide and operate the OpenQlik platform.
• To respond to inquiries and provide customer support.
• To send relevant communications about our services (with consent).
• To improve product quality, reliability and security.
• To comply with legal obligations under Saudi and international law.

4. Legal basis (GDPR & PDPL)

• Consent — when you submit a form or subscribe to communications.
• Contractual necessity — to deliver the services you contract us for.
• Legitimate interest — for product analytics and security.
• Legal obligation — to comply with Saudi NDMO and EU regulators.

5. Data residency

Customer content on our managed cloud is processed in the region you select at sign-up. On-premises customers are responsible for residency — by design, no data leaves your perimeter.

6. Data retention

We retain personal data only for as long as necessary, typically no longer than 3 years after your last interaction with us. Customer content is deleted within 30 days of account closure.

7. Sharing & transfers

We do not sell your personal data. We may share data with:

• Service providers — cloud hosting, analytics and communication platforms acting on our behalf under DPA.
• Legal authorities — when required by Saudi law or court order.
• Business partners — only with your explicit consent.

8. Your rights

You have the right to access, correct, delete, port and object to processing of your personal data. To exercise these rights, email privacy@openqlik.com.

9. Security

We apply industry-standard safeguards: encryption in transit (TLS 1.2+) and at rest, role-based access control, audit logging, vulnerability management and least-privilege engineering practices.

10. Cookies

We use strictly necessary cookies to keep you signed in and analytics cookies (with consent) to improve the product. You can manage preferences in your browser at any time.

11. Changes

We will notify you of material changes by email or in-product notice at least 30 days in advance.

12. Contact

OpenQlik · Data Protection Officer · privacy@openqlik.com