1. Introduction
Silcore ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website silcore.ai (the "Site") and use our waitlist service. By using the Site, you consent to the data practices described in this policy.
2. Data Controller
Silcore
[Registered Business Address, Riyadh, Kingdom of Saudi Arabia]
Email: hello@silcore.ai
Silcore is the data controller for personal data collected through this website.
3. Information We Collect
3.1 Information You Provide
- WhatsApp phone number — to notify you about product launch and updates
- First name — to personalize our communications with you
- Salon name (optional) — to understand our audience and segment communications
- Email address (optional) — as a backup contact channel
- Consent records — timestamp and IP address recorded when you agree to receive communications from us
3.2 Information Collected Automatically
- Log Data: IP address, browser type, operating system, referring URLs, pages visited, time spent on pages
- Cookies and Tracking: Essential cookies for site functionality. Analytics cookies (if enabled) to understand site usage. See our Cookie Policy section below.
4. Purpose of Processing (Purpose Limitation — PDPL Article 5)
We process your personal data for the following specific purposes:
- Processing your waitlist signup and managing your registration
- Sending you product launch notifications, updates, and early access invitations via WhatsApp
- Improving our website and user experience through analytics
- Complying with legal obligations under Saudi law (PDPL, ZATCA, SDAIA regulations)
5. Legal Basis for Processing
We process your data on the following legal bases:
- Explicit Consent: For waitlist registration and WhatsApp communications (you provide consent via the checkbox on our waitlist form)
- Legitimate Interest: For website analytics, security monitoring, and improving our service
- Legal Obligation: For compliance with Saudi laws and regulations
6. Consent (PDPL Phase 1)
When you join our waitlist, you provide:
- Clear, explicit, informed, and freely given consent via an unchecked checkbox
- Consent includes: your WhatsApp number, timestamp, method of consent, purpose, and IP address
- Consent records are maintained for a minimum of 6 years as required by PDPL
- You may withdraw consent at any time by replying "STOP" to any WhatsApp message or contacting us at hello@silcore.ai
7. Data Retention
- Waitlist data: Retained until product launch + 12 months after, or until you withdraw consent
- Analytics data: Retained for 26 months
- Consent records: Retained for a minimum of 6 years (PDPL requirement)
- You may request deletion of your data at any time by contacting hello@silcore.ai
8. Data Subject Rights (PDPL Phase 5)
Under Saudi PDPL, you have the following rights:
- Right to Access: Request a copy of your personal data we hold, free of charge
- Right to Correction: Request correction of inaccurate or incomplete data
- Right to Deletion: Request erasure of your personal data
- Right to Withdraw Consent: Unsubscribe or opt out at any time
- Right to Restrict Processing: Limit how we use your data in certain circumstances
To exercise these rights, email hello@silcore.ai. We will respond within 30 days as required by PDPL.
9. Data Sharing and Third Parties
We do not sell your personal data to third parties. We may share data with:
- Hosting Provider (Vercel): Server logs and data storage
- Analytics Provider (Google Analytics or Plausible): Anonymized usage data
- WhatsApp API (Meta Platforms, Inc.): If you provide your WhatsApp number and consent to receive messages
All third-party providers are contractually obligated to protect your data and comply with applicable data protection laws.
10. Data Security (PDPL Phase 3)
We implement appropriate technical and organizational measures including:
- HTTPS encryption for all data in transit
- Server-side access controls with least-privilege principles
- Encrypted storage for personal data
- Regular security reviews
In the event of a data breach involving your personal data, we will notify SDAIA and affected individuals within 72 hours, as required by PDPL.
11. International Data Transfers
Your data may be stored and processed on servers located outside the Kingdom of Saudi Arabia, including in the United States and European Union. By consenting to this Privacy Policy, you agree to such transfers. We ensure that any international transfers comply with PDPL requirements for adequate protection.
12. Cookie Policy
Our website uses:
- Essential Cookies: Required for site functionality (session management, language preference, consent storage). These cannot be disabled.
- Analytics Cookies: Used to understand how visitors interact with our site. Disabled by default; enabled only with your explicit consent.
You can manage cookies through your browser settings. Disabling cookies may affect site functionality.
13. Policy Updates
We may update this Privacy Policy from time to time. Material changes will be communicated to waitlist subscribers via WhatsApp or email. The "Last Updated" date at the top of this page reflects the most recent revision.
14. Contact Us
For privacy-related inquiries, data subject requests, or complaints:
Silcore
Email: hello@silcore.ai
[Registered Business Address, Riyadh, Saudi Arabia]
You also have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) at sdaia.gov.sa.