Privacy Notice

Overview

Intercept, Inc. ("Intercept," "we," "us," or "our") provides AI security software and related services. This Privacy Notice describes how we handle personal data when you visit intercept.com.sa (the "Site"), request a demo, contact us, or use our platform (together, the "Services"). It applies to Site visitors, prospective customers, and the authorized users of our customers.

When we process personal data on behalf of a customer as part of delivering the Services, we act as a processor and handle that data under our agreement with that customer. This notice governs the personal data for which Intercept is the controller — primarily the data described below.

What we collect

We collect only what we need to run our business and deliver the Services:

• Information you provide. Your name, work email, company, role, and message when you request a demo, contact sales, or submit a form.
• Account and usage data. Authentication identifiers, configuration, and audit records generated when authorized users operate the platform.
• Technical data. IP address, device and browser type, and pages viewed, collected through server logs and privacy-respecting analytics to keep the Site secure and reliable.
• Communications. Records of your correspondence with our sales, support, and security teams.

We do not sell personal data, and we do not use the security telemetry our customers process through the platform to train models for other customers.

How we use it

We use personal data to respond to your enquiries and provide demos; to deliver, secure, and improve the Services; to send service and, where permitted, relevant product communications; to meet legal, tax, and regulatory obligations; and to detect, prevent, and investigate fraud or abuse.

Legal bases

Where the Saudi Personal Data Protection Law (PDPL) or other applicable law requires a legal basis, we rely on: performance of a contract with you or your organization; our legitimate interests in operating and securing our business; your consent, which you may withdraw at any time; and compliance with legal obligations. Where we rely on consent, withdrawing it does not affect processing carried out before withdrawal.

How we share it

We share personal data only with: service providers who process data on our behalf under contract (for example, hosting, email, and analytics providers); professional advisers and authorities where required by law; and a successor entity in the event of a merger, acquisition, or reorganization. Every provider is bound by confidentiality and data-protection terms.

International transfers

We are based in the Kingdom of Saudi Arabia and may process data using providers located in other countries. Where personal data is transferred across borders, we apply the safeguards required by the PDPL and other applicable law, including appropriate contractual protections.

Retention

We keep personal data only for as long as needed for the purposes described here, then delete or anonymize it. Sales and marketing enquiries are retained while there is a live business relationship and for a reasonable period afterward; customer account and audit data is retained for the term of the customer agreement and any period required by law.

Security

We protect personal data with encryption in transit and at rest, access controls, network segmentation, and continuous monitoring. Security is our product and our practice; see our Responsible Disclosure policy to report a vulnerability.

Your rights

Subject to applicable law, you may request access to the personal data we hold about you, correction of inaccurate data, deletion, restriction of processing, and a copy of certain data in a portable format. To exercise any of these rights, email privacy@intercept.com.sa. We will verify your identity and respond within the timeframe required by law. If you have concerns we cannot resolve, you may lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA) or your local supervisory authority.

Children

The Services are intended for organizations and their staff, not for children. We do not knowingly collect personal data from anyone under the age of 18. If you believe a child has provided us personal data, contact us and we will delete it.

Changes to this notice

We may update this notice to reflect changes in our practices or the law. When we do, we will revise the "last updated" date above and, for material changes, provide a more prominent notice.

Contact

For any question about this notice or your personal data, contact our privacy team at privacy@intercept.com.sa, or write to Intercept, Riyadh, Kingdom of Saudi Arabia.