Privacy Policy
This Privacy Policy describes how Aurexon Holding Company collects, uses, protects, and discloses personal information when you visit our website, utilize our AI platforms, or interact with our digital portfolio.
Introduction & Scope
Aurexon Holding Company ('Aurexon', 'we', 'our', or 'us') is a technology holding enterprise headquartered in the Kingdom of Saudi Arabia. We build, invest in, and scale cutting-edge artificial intelligence platforms, SaaS solutions, autonomous agent ecosystems, and digital products (including Tasko and our emerging venture portfolio).
We are committed to safeguarding the privacy and personal data of our website visitors, platform users, partners, and enterprise clients in strict compliance with the Saudi Personal Data Protection Law (promulgated under Royal Decree No. M/19 and amended by Royal Decree No. M/148), its Executive Regulations, and applicable international privacy frameworks.
This Privacy Policy applies to all personal data collected through our website (aurexon.sa), subdomains, platform APIs, client portals, and related services, unless a specific subsidiary or venture provides a standalone privacy agreement.
By accessing or using our websites, platforms, or services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.
Information We Collect
We collect information that identifies, relates to, describes, or is reasonably capable of being associated with you ('Personal Data'). Depending on how you interact with Aurexon, we may collect the following categories of data:
- Direct Identification & Contact Information: Full name, professional title, corporate affiliation, email address, mobile phone number, and physical office location provided when submitting inquiry forms or contacting our team.
- Communication & Interaction Records: Messages, inquiries, enterprise proposals, consultation requests, and feedback submitted through our contact forms, email channels, or client intake portals.
- Newsletter & Marketing Subscriptions: Email address and subscription preferences for receiving company announcements, market insights, and technology releases.
- Technical & Device Telemetry: IP address, device hardware model, operating system version, browser type, language preferences, geolocation data at regional level, referral URLs, and access timestamps.
- AI Platform & Interaction Logs: Interaction telemetry, prompt metadata, session durations, and system performance metrics generated when testing or utilizing our platform modules and agent workflows.
Purposes & Legal Basis for Processing
Under the Saudi PDPL and international regulations, we only collect and process personal data when we have a legitimate legal ground to do so. We utilize your data for the following essential business purposes:
Our legal grounds for processing include: your explicit consent, the performance of contractual obligations, compliance with applicable KSA laws, and legitimate interests in operating secure and innovative digital services.
- Fulfilling Inquiries & Contractual Engagements: To review project inquiries, provide product demonstrations, execute partnership agreements, and deliver enterprise solutions.
- Operating and Enhancing Our Platforms: To maintain, optimize, test, and enhance our AI architectures, workflow engines, identity management systems, and cloud infrastructure.
- Communication & Relationship Management: To respond to your direct communications, provide updates regarding our venture portfolio (such as Tasko), and dispatch subscribed newsletters.
- Security, Fraud Prevention & Regulatory Compliance: To protect our systems from cyber threats, detect malicious activity, comply with statutory obligations in the Kingdom of Saudi Arabia, and safeguard our intellectual property.
Data Sharing & Third-Party Processors
Aurexon does not sell, rent, or trade your personal data to third parties for commercial profit. We may disclose your information under controlled, confidential circumstances to:
- Subsidiaries & Affiliates: Entities within the Aurexon Holding Company corporate group for unified service administration, research, and collaborative platform development.
- Trusted Infrastructure Providers: Enterprise cloud hosts, database providers, secure communication vendors, and cybersecurity auditors operating under strict Data Processing Agreements.
- Authorized Regulatory & Legal Authorities: Government entities, law enforcement, or regulatory bodies within the Kingdom of Saudi Arabia when required by statutory mandates or court orders.
- Corporate Transactions: Successors or assignees in the event of a merger, acquisition, corporate restructuring, or sale of company assets, subject to strict confidentiality protections.
Data Storage, Sovereignty & Security
Aurexon adheres to stringent data sovereignty and enterprise-grade cybersecurity standards. Data collected within the Kingdom of Saudi Arabia is hosted on certified, high-security infrastructure adhering to National Cybersecurity Authority (NCA) and SDAIA regulatory guidelines.
We employ multi-layered technical, organizational, and physical safeguards, including end-to-end transport layer encryption (TLS 1.3), AES-256 cryptographic encryption at rest, role-based access control (RBAC), continuous vulnerability scanning, and periodic third-party penetration testing.
While no digital platform can guarantee absolute immunity from threats, we continuously upgrade our security protocols to mitigate risks and protect your personal records from unauthorized access, disclosure, or alteration.
Data Retention Schedules
We retain personal data only for as long as necessary to achieve the specific purposes for which it was gathered, fulfill contractual obligations, resolve disputes, and comply with Saudi statutory limitation periods.
When personal data is no longer required, it is securely destroyed, permanently overwritten, or anonymized in accordance with approved data destruction protocols.
Your Rights Under Saudi PDPL
Under the Saudi Personal Data Protection Law (PDPL), data subjects in the Kingdom of Saudi Arabia possess established rights regarding their personal data:
To exercise any of your statutory rights, please contact our Data Protection Officer at privacy@aurexon.sa. We respond to all verified requests within the statutory timeframe.
- Right to Know & Be Informed: The right to understand the legal basis and explicit purpose of data collection before providing personal data.
- Right of Access: The right to obtain a copy of your personal data held by Aurexon, free of charge, subject to statutory exceptions.
- Right to Rectification: The right to request correction, completion, or updating of inaccurate or outdated personal records.
- Right to Destruction / Erasure: The right to request the deletion or destruction of your personal data when no longer needed for its original purpose or upon withdrawal of consent.
- Right to Withdraw Consent: The right to withdraw your consent to data processing at any time, without affecting prior lawful processing.
- Right to File a Complaint: The right to lodge a formal complaint with the Saudi Data & AI Authority (SDAIA) if you believe your statutory privacy rights have been infringed.
Modifications to This Policy
Aurexon reserves the right to amend this Privacy Policy periodically to reflect technological advancements, operational enhancements, or statutory regulatory updates in the Kingdom of Saudi Arabia.
Any updates will be posted on this page with a revised 'Last Updated' timestamp. Your continued interaction with our websites and platforms following any amendments constitutes acceptance of the revised policy.
Contact Our Data Protection Office
If you have inquiries, questions, requests to exercise your rights, or feedback regarding our privacy practices, please contact our Data Protection and Compliance Department:
- Organization: Aurexon Holding Company (شركة أوريكسون القابضة)
- Attention: Data Protection Officer (DPO) / Legal Department
- Email: privacy@aurexon.sa
- General Inquiries: Info@aurexon.sa
- Phone: +966 14 818 0444
- Address: 6838, Ali Ibn Dafer Ibn Al Hussain, King Fahd Dist. 42367, Madinah, Kingdom of Saudi Arabia
Have questions about this policy?
Our compliance and legal team is here to assist you with any inquiries regarding our data practices, terms, or platform operations.