Privacy Policy

1.Introduction

Zakaa is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and secure your data.

2. Information We Collect

Personal Data: Name, email, organization details.
Financial & Business Data: Data entered for budgeting, planning, and reporting purposes.
Usage Data: Logs, cookies, and AI interactions to enhance service performance.

3. How We Use Your Data

To provide AI-powered insights for financial planning and budgeting.
To personalize the user experience and enhance AI-driven recommendations.
To ensure security, fraud prevention, and compliance with regulatory requirements.

4. Data Sharing and Disclosure

We do not sell personal data to third parties.
Data may be shared with:
Service providers (e.g., hosting, AI model providers).
Regulatory authorities when legally required.

5. Data Retention

Zakaa retains data only as long as necessary for business purposes.
Users can request data deletion by contacting support@zakaa-dpc.ai

6. Data Security Measures

Encryption: All stored data is encrypted using AES-256 standards.
Access Control: Multi-factor authentication (MFA) is enforced.
Audit Logs: Every system action is tracked and monitored.

7. User Rights

Access & Correction: Users can review or update their data.
Data Portability: Request data exports.
Opt-Out: Disable AI recommendations or data usage.

8. Cookies & Tracking

Zakaa uses cookies to improve user experience.
Users can disable cookies through browser settings.

9. International Data Transfers

Zakaa complies with GDPR, UAE Data Protection Laws, and Saudi PDPL for data transfers.

10. Changes to Policy

Zakaa may update this policy as necessary and will notify users accordingly.

Zakaa Security Policy

1. Security Commitment

Zakaa prioritizes enterprise-grade security to protect sensitive financial data.

2. Security Framework

We comply with:

ISO 27001: Information security best practices.
NIST Cybersecurity Framework.
OWASP for secure development.

3. Data Protection Measures

Encryption: Data is encrypted at rest and in transit.
Access Management: Role-based access control (RBAC) ensures only authorized users can view/edit data.
Logging & Monitoring:
SIEM tools monitor for suspicious activities.
Real-time alerts for unauthorized access.

4. Incident Response

Security Operations Center (SOC).
Incident response team for data breaches.
User notifications within 24 hours of any security breach.

5. Compliance & Audits

Regular third-party security audits.
Compliance with GDPR, PDPL (Saudi), NESA (UAE).
Penetration testing to detect vulnerabilities.

6. User Responsibility

Users must use strong passwords and enable MFA.
Report any suspicious activities immediately.

7. Secure AI Implementation

Bias detection to prevent AI misinterpretations.
AI models trained on secure, anonymized datasets.

8. Third-Party Integrations

Zakaa ensures secure API connections.
All integrations are vetted for compliance.

9. Business Continuity & Disaster Recovery

Daily backups with 30-day retention.
Failover strategy to ensure service availability.

10. Policy Updates

Zakaa continuously enhances its security policies to adapt to emerging threats

Final Note

These policies are designed to ensure that Zakaa remains a trusted AI-powered decision intelligence platform, offering robust security, data privacy, and seamless compliance for organizations in the Middle East and beyond.

For any inquiries, contact support@zakaa-dpc.ai