Privacy Policy — CCOS
Last updated: May 18, 2026
At Mahsumaah Company, operator of CCOS — Council & Committee Operating System — we are committed to protecting user privacy in accordance with applicable laws in the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).
1. Data We Collect
We collect the following data when you use the platform:
- Basic data: name, email address, mobile number
- Organization data: organization name, job title
- Usage data: sign-in activity, in-system actions
- Meeting data: attendance, voting, minutes, attachments
- Technical data: IP address, device type, browser
2. How We Use Data
We use data for the following purposes:
- Operating and managing the platform
- Managing meetings, decisions, and voting
- Improving user experience
- Sending notifications and alerts
- Compliance with regulatory requirements
3. Data Sharing
We do not sell or rent user data. Data may be shared in the following cases:
- With entities within the same organization
- With technology service providers (hosting / cloud)
- When required by competent government authorities
4. Data Protection
We apply strict security measures including:
- Data encryption
- Role-based access control
- Audit logs
- Protection against unauthorized access
5. Data Storage
- Data is stored on secure servers
- Retention period depends on the using entity's policy
- Data may be deleted upon customer request
6. User Rights
Users have the right to:
- Access their data
- Request correction or deletion of data
- Withdraw consent to processing
7. Cookies
We use cookies to improve the user experience and analyze performance.
8. Changes
We reserve the right to update this privacy policy at any time, and users will be notified accordingly.
9. Contact
For inquiries:
Mahsumaah Company — operator of the CCOS platform