Privacy Policy

Mohla, an independent Saudi company and part of the FRESME group, is responsible for your personal data. Contact: hello@mohla.co.

• On the website: nothing through forms (there are none) and no tracking or advertising cookies. If you arrive from a campaign link, its tags (such as utm_source) are passed to the sign-up page so your account records where you came from.
• Your account: name in English and Arabic, email, phone, language, profile photo, and your password, which we store only as a secure hash. If you sign in with Google, we receive only your name, email and Google account ID.
• Identity and residency: passport details, nationality, date of birth, sex, iqama, Premium Residency and border numbers, and country of residence, when your service needs them.
• Documents: passports, iqamas, powers of attorney, company records, certificates and the results of home-country checks that you upload or that we obtain for you.
• Your company and employees: registrations and their dates, owners’ and employees’ names, iqama numbers and expiry dates.
• Messages: chat and support requests, with their attachments.
• Technical data: sign-in sessions (IP address and browser), the push-notification address of devices you allow, and a security log of actions in the platform.

• To deliver the services you request and file with government authorities on your behalf (performing our agreement).
• To keep your compliance calendar, send the reminders you choose and prepare reports.
• To invoice and keep the records the law requires (legal obligation).
• To keep accounts and data secure and keep an auditable record of what was submitted (legitimate interest).
• With your consent where the law requires it, for example for home-country verification checks.

We do not sell personal data and do not use it for advertising.

• Your Mohla team, by role. Identity numbers are masked on staff screens; showing one in full is a separate, recorded action.
• Your own colleagues, according to the roles you give them.
• Outside partners we engage for a specific task — such as licensed government-relations agents (mu’aqqib), certified translators, typing offices or lawyers — with time-limited access to only what that task needs.
• Government authorities and their platforms, for your case.
• Verification partners in your home country, for home-country checks.
• Service providers that help us run the platform: hosting and storage, email delivery, push-notification services (Google, Apple, Mozilla, Microsoft) and Google sign-in.

Some processing can take place outside Saudi Arabia, for example home-country checks or a service provider’s storage. We do this only as the PDPL and its regulations allow, with appropriate safeguards.

Encrypted connections; passwords stored only as secure hashes; two-step sign-in for every Mohla team member and partner; identity numbers masked by default; files kept in private storage and opened only through short-lived links; a record of every access and change; daily encrypted backups.

We keep your data while you are a client and afterwards for as long as the law requires: case files and documents for up to 10 years, invoices for the period tax law sets, and the security log as long as it is needed to protect accounts. Unconfirmed sign-ups are deleted after 24 hours.

Under the PDPL you can ask to be informed about how your data is used, to access and receive a copy of it, to correct it, and to have it deleted when we no longer need to keep it by law. Where we rely on your consent, you can withdraw it. Email hello@mohla.co or use the support page in the platform; we reply within the time the law sets. You can also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

• Website: no tracking or advertising cookies. Your browser remembers your light or dark choice, and campaign tags for the current tab.
• Platform: a secure sign-in cookie (up to 30 days), a short-lived cookie during Google sign-in, your language, and display preferences such as theme and menu in your browser’s storage. No analytics or advertising cookies.

Our services are for adults. We do not knowingly create accounts for anyone under 18.

We may update this policy. The version and date are shown at the top. If a change is material, we will tell you in the platform before it applies.

Privacy questions and requests: hello@mohla.co, or WhatsApp +966 50 617 6388 (Sunday to Thursday, 9:00–18:00 Riyadh time).