Legal

Privacy Policy

This policy explains what personal data NexusVectors collects through nexusvectors.sa, why, who it is shared with, how long it is kept, and the rights you have under the Personal Data Protection Law of Saudi Arabia.

Effective date: 18 October 2026 · Version 1.0

Who we are

NexusVectors (“NexusVectors”, “we”) is a data engineering and AI services firm headquartered in Riyadh, Saudi Arabia, with a delivery team in Amman. For the personal data described in this policy, NexusVectors is the controller within the meaning of the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its Implementing Regulations.

Privacy enquiries: info@nexusvectors.sa (subject line “Privacy”).

What this policy covers

This policy covers the website nexusvectors.sa, including its Arabic edition, and the enquiries and job applications submitted through it.

Personal data that we process on behalf of clients during consulting or product engagements is governed by the agreement with that client, under which NexusVectors acts as a processor, and is not covered here.

The personal data we collect

We collect only what is needed to answer you, consider your application, and keep the website running securely.

  • Contact form: your name, email address, company (optional), phone number (optional), the topic you select and the message you write.
  • Job application form: your name, email address, phone number (optional), the role you apply for, the CV or file you attach, and your note.
  • Direct correspondence: if you email or call us, we keep the correspondence and the contact details you provide.
  • Technical data: our hosting provider’s servers and content delivery network record the IP address, browser and device type, the pages requested and the time of each request in standard server logs used for security and troubleshooting.
  • Preferences stored in your browser: the website keeps your language choice (Arabic or English) in your browser’s local storage under the key nv-lang. It is not sent to us and can be cleared from your browser at any time.

The website sets no advertising cookies and uses no analytics or tracking scripts.

Why we use it and on what basis

  • Responding to enquiries and demo requests and following up on them. Basis: the steps needed at your request before entering a contract, or your consent where you contact us for another reason.
  • Assessing job applications and contacting candidates. Basis: the steps taken at your request before a possible employment contract.
  • Operating, securing and improving the website, including detecting and preventing abuse. Basis: our legitimate interest in running a safe service, within the limits the PDPL allows.
  • Meeting legal obligations and responding to lawful requests from competent authorities.

We do not sell personal data, and we do not use it for automated decisions that produce legal or similarly significant effects.

Who receives the data

We share personal data only with service providers that process it on our instructions, and only to the extent needed:

  • Hostinger: web hosting and content delivery network for nexusvectors.sa (serving the pages and keeping server logs).
  • FormSubmit (formsubmit.co): relays contact-form and job-application submissions, including attachments, to our mailbox.
  • Google Fonts: the website loads its typefaces from Google’s servers, so your browser sends your IP address to Google when it requests the font files.
  • Our business email provider, which stores the messages we receive.
  • Professional advisers and public authorities, where the law requires it.

We do not share personal data with third parties for their own marketing.

Transfers outside the Kingdom

Some of these providers operate servers outside the Kingdom of Saudi Arabia. Where personal data leaves the Kingdom, the transfer follows the PDPL’s rules on cross-border transfer and the Regulation on Personal Data Transfer outside the Kingdom, relies on the safeguards those rules permit, and is limited to the minimum needed to deliver the service.

How long we keep it

  • Enquiries: up to 24 months after our last exchange, unless they lead to an engagement, in which case the engagement’s records apply.
  • Job applications: up to 12 months after the recruitment decision, so that we can consider you for similar roles, unless you ask us to delete them sooner.
  • Server logs: kept by the hosting provider for a limited period for security purposes, then deleted or anonymised.

When personal data is no longer needed for the purpose it was collected for, it is deleted or anonymised.

Your rights

Under the PDPL you have the right to:

  • be informed about how your personal data is processed;
  • access your personal data and obtain a copy of it in a readable format;
  • request the correction, completion or updating of inaccurate data;
  • request the destruction of data that is no longer needed for the purpose it was collected for;
  • withdraw consent at any time where processing relies on it, without affecting processing carried out before the withdrawal.

To exercise these rights, write to info@nexusvectors.sa from the email address you used with us. We verify requests before acting on them and respond within the period set by the PDPL’s Implementing Regulations.

You may also lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA), the competent authority for personal data protection in the Kingdom.

How we protect it

The website is served over HTTPS. Form submissions travel encrypted to our mailbox, access to that mailbox is restricted to the people who handle enquiries and recruitment, and attachments are kept only for the periods described above.

No transmission over the internet is completely secure. Anyone who believes their data has been compromised should contact us without delay.

Children

The website is intended for professionals and organisations and is not directed at children. We do not knowingly collect personal data from anyone under 18; if we learn that we have, we delete it.

The website links to external sites such as LinkedIn and to the official pages of regulators. Their privacy practices are their own, and this policy does not apply to them.

Changes to this policy

We may update this policy when our processing or the law changes. The effective date at the top of the page identifies the current version, and material changes are highlighted here. This policy is published in Arabic and English; in case of any difference, the Arabic text prevails.

Contact

Questions about this policy or about your personal data can be sent to: