Privacy Policy

Who we are

Sakonix Global provides Sakonix, e-invoicing and accounting software for businesses in Saudi Arabia. You can reach us at hello@sakonix.com about anything in this policy.

Our role

For the data about you as a user of Sakonix, your account, we decide how it is used.

For the data your business keeps in Sakonix, such as its customers, suppliers, staff and documents, your business decides. We process that data on your business's behalf, only to provide the service.

What we hold

• Your account: your email address, a securely hashed form of your password (never the password itself), and the organizations you belong to, with your role in each.
• Your organization: its legal name in Arabic and English, VAT number, commercial registration number, address, logo and stamp, and its settings.
• What your business records: invoices and other documents, customers and suppliers with their details, products and stock, payments, the bank statements you import, the accounts, and the files you upload.
• Payroll, if you use it: your staff's names, nationality, wages and social insurance details. This is the most sensitive data we hold, and no wage is ever written to our logs.
• A record of who did what: each act in an organization’s books, such as issuing an invoice or recording a payment, is recorded with the email address of the person who did it.
• Security data: failed sign-in attempts on an email address, and a marker that a browser you have signed in from keeps, so that attempts on your address from elsewhere do not slow you down.

Why we use it

• To provide the service: keeping your accounts, issuing your documents and sending your e-invoices to ZATCA.
• To send the emails the service needs: links to confirm a registration, reset a password or accept an invitation, and the invoices you ask us to email to your customers.
• To keep accounts secure, for example by limiting repeated sign-in attempts.
• To answer you when you contact us, and to meet our legal obligations.

We do not sell personal data, and we do not use it for advertising.

Who receives it

• ZATCA, Saudi Arabia's Zakat, Tax and Customs Authority, receives your e-invoices, with your customers' details on them, because the e-invoicing rules require it.
• The service providers who work for us: the hosting provider that runs Sakonix in Riyadh, and the provider that delivers our emails. They act only on our instructions.
• The people you choose to send documents or invitations to.
• An authority or a court, when the law requires it.

Where it is kept

Your account, your organization’s accounts and documents, and the files you upload are kept on servers in Riyadh, Saudi Arabia. This website is hosted in Riyadh too.

How long we keep it

• While your organization uses Sakonix, we keep its data so that the service can work.
• If an owner deletes an organization, it is hidden at once and can be restored for 30 days. After that, we delete it.
• Issued e-invoices are the exception. ZATCA’s rules do not allow e-invoicing software to delete an e-invoice once it is issued, so before we delete an organization we move every e-invoice it issued, with ZATCA’s answers, to a separate archive that the app cannot read. We keep each one there for 15 years from its issue date and then delete it, and we take one out only on a lawful request from ZATCA, a court or the business itself.
• Backups of our database are kept for up to 15 years and then deleted.

Your business remains responsible for keeping its own records for as long as the law requires, ten years for most accounting records. Download a backup of your organization before you delete it.

Cookies and your browser

This website sets no cookies and uses no analytics or advertising tags. It remembers only whether you chose the light or the dark theme, in your own browser.

The Sakonix app sets no cookies either. It keeps your sign-in in your browser while you use it, and a marker that recognises the browser the next time you sign in.

Like any website, our servers record technical details of each request, such as the IP address and the browser, to keep the service secure and working, and keep them only as long as needed for that.

Security

Data travels encrypted between your browser and our servers. The keys that sign your e-invoices are stored encrypted, and so are the files you upload. Only the people who run the service can reach its production systems.

Your rights

You can ask us to tell you what personal data we hold about you and how we use it, to give you a copy, to correct it, or to delete it once it is no longer needed.

Some data we must keep for as long as the law requires, such as issued e-invoices, and your email address stays on the record of the acts you performed in an organization’s books, because that record must show who did each act. We will tell you when this applies.

If the data is part of a business’s records, for example because you are one of its customers, we will pass your request to that business, which decides.

Write to hello@sakonix.com. You can also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Changes to this policy

If we change this policy, we will change the date at the top, and tell account holders by email before a significant change takes effect.

Contact

Sakonix Global, hello@sakonix.com