Privacy Policy
Last updated: April 28, 2026
Draft — pending legal review. Final language will be issued by counsel before public launch.
01.Introduction
RoundThis ("we", "us") operates a bilingual investor-discovery platform connecting Saudi founders with vetted investors. This policy explains what personal data we collect, how we use it, and the rights you have under the Saudi Personal Data Protection Law (PDPL).
02.Data we collect
We collect account information you provide on registration (name, email, phone, role), project information founders publish (descriptions, financials, Data Room documents), investor application details (firm, check size, sectors of interest), and platform activity (logins, project views, NDA signatures, messages).
03.How we use data
We use your data to operate the platform: matching founders and investors, gating Data Room access behind signed NDAs, sending transactional emails, and supporting customer requests. We do not sell personal data, and we do not use it for advertising.
04.Data sharing
Project information becomes visible to approved investors who sign your NDA. Founder–investor messages and meeting metadata are visible to the participants and to platform administrators for moderation and audit. We share data with trusted infrastructure providers (Supabase, Resend, Vercel) under contractual confidentiality.
06.Your rights
Under PDPL, you have rights to access, correct, and delete your personal data, to withdraw consent, and to lodge a complaint with the Saudi Data and AI Authority (SDAIA). Account deletion requests are processed within 30 days; we soft-delete first and hard-delete after a short grace period.
07.Retention
Audit log entries are retained for 7 years to satisfy legal obligations. Messages are retained until account deletion. NDA records are retained per legal counsel guidance. All other personal data is retained only while your account is active or as required by law.
08.Contact
Questions about this policy or your data can be sent to privacy@roundthis.com. A formal data protection officer contact will be published before public launch.