Privacy Policy

What personal data we hold when you use Seen, why we hold it, and the choices you have.

Last updated: 30 September 2026

Seen CRM is operated by a company registered in Saudi Arabia ("Seen", "we", "us"). This policy explains what personal data we collect when you use seencrm.com, why we collect it, and the choices you have. We act as the data controller for your account information, and as a data processor for the records your workspace stores about its own customers and employees.

1. Data we collect

We collect only what the service needs to operate:

Account details — your name, work email address, phone number, job title, and profile photo if you add one.
Workspace data — the records your team creates inside its own private workspace: customers, leads, deals, quotes, invoices, accounting entries, projects, tasks, stock, messages and activity.
Employee data — if your company runs HR and payroll in Seen, it stores data about its employees: national ID or iqama numbers, IBANs, salaries, attendance and leave. National ID numbers and IBANs get an extra layer of encryption on top of the encrypted storage.
Connected mailbox credentials — if you connect a personal mailbox for email sync, we store its server settings and password encrypted with AES-256-GCM. Passwords are decrypted only in memory at connection time and are never logged or shown to anyone, including us.
Technical data — sign-in timestamps and basic logs needed to keep the service secure and reliable.

2. How we use your data

We use your data solely to provide and improve Seen CRM: authenticating you, storing your workspace records, sending transactional emails (such as welcome and invitation emails from info@seencrm.com), showing aggregate platform statistics that never identify individuals or workspaces, and keeping the service secure.

We do not sell your personal data, and we do not use your workspace records for advertising.

3. Legal basis

We process your data in line with the Saudi Personal Data Protection Law (PDPL): to perform our contract with you (running the service you signed up for), for our legitimate interests (security, fraud prevention, service improvement), and with your consent where required (such as connecting a personal mailbox, which you can disconnect at any time).

4. Where your data lives

Seen CRM runs on established cloud infrastructure providers: the application is hosted on Vercel and data is stored in managed PostgreSQL databases hosted by Neon. Each workspace’s records are isolated by tenant so that no other workspace can read them. Your data is stored on servers in the United States. Transactional email is delivered through our mail provider for the seencrm.com domain.

5. Retention

We keep your data for as long as your workspace is active. If you disconnect a synced mailbox, its stored credentials are deleted immediately. If your workspace is closed, we delete or anonymise its data within a reasonable period, except where we must retain records to meet legal obligations.

6. Your rights

Under the Saudi Personal Data Protection Law (PDPL) you have the right to be told how your personal data is processed, to access it and obtain a copy, to have it corrected or completed, and to ask for it to be destroyed when it is no longer needed. To exercise any of these rights, write to privacy@seencrm.com. You also have the right to lodge a complaint with the Saudi Data and AI Authority (SDAIA).

7. Changes to this policy

If we make material changes to this policy, we will update the date above and, where appropriate, notify workspace administrators by email.

8. Contact

Seen, Saudi Arabia. Email: privacy@seencrm.com.