Kaleam Privacy Policy

Effective Date: 2026-05-26
Last Updated: 2026-10-18

This Privacy Policy applies to: - https://kaleam.com - https://app.kaleam.com - Kaleam services for consumer and business users

1. Who We Are

Kaleam is operated by مؤسسة منصة كليم التجارية ("Kaleam", "we", "us", "our").

Business details: - Commercial Registration (CR): 2052102342 - Contact email: info@kaleam.com - Address: الظهران حي الحرس الوطني شارع الأمير أحمد (Dhahran, Saudi Arabia)

2. Scope

This Privacy Policy explains how Kaleam collects, uses, shares, stores, and protects personal data under applicable laws, including: - Saudi Personal Data Protection Law (PDPL) - EU/EEA General Data Protection Regulation (GDPR)

3. Personal Data We Collect

3.1 Data you provide

3.2 Data collected automatically

3.3 Data from third parties

4. Why We Use Personal Data (and Legal Bases)

Kaleam uses a mixed legal-basis model:

4.1 Contract

Used to: - create and manage accounts - authenticate users (email/password login) - provide design features and core functionality - process subscription services and account administration

4.2 Legitimate Interests

Used to: - secure services and prevent abuse/fraud - monitor reliability and improve product performance - run core service analytics where lawful

4.3 Consent

Used to: - place/read non-essential cookies and tracking technologies where required - send marketing communications where opt-in consent is required by law

You may withdraw consent at any time. Withdrawal does not affect prior lawful processing.

5. Analytics and Tracking

Kaleam uses the following analytics providers:

Non-essential analytics do not run until you give consent through the in-app cookie banner. You can change your choice at any time in your account settings under "Cookie preferences". For cookie-level details (categories, purposes, duration, controls), see the Kaleam Cookie Policy.

6. Marketing Communications

When you register, Kaleam sends you account emails (such as the welcome email that confirms your address) and, because you have an account with us, onboarding tips, product news and marketing emails where permitted by law. These emails are sent through Brevo.

You can also subscribe to the Kaleam newsletter on kaleam.com without an account. The sign-up form is hosted by Brevo and uses double opt-in: we add your email address to the newsletter list only after you tick the consent box and click the confirmation link we email you. We record that you subscribed through the website form.

You can opt out at any time by: - clicking the unsubscribe link in emails; or - emailing info@kaleam.com

Service/transactional communications (e.g., security, billing, account notices) may still be sent when necessary.

7. Sharing and Disclosure

Kaleam shares personal data with the following sub-processors:

Kaleam does not sell personal data for third-party data brokerage.

8. International Data Transfers

Kaleam infrastructure is hosted in AWS eu-west-1.

Where cross-border transfers occur, Kaleam applies legally recognized safeguards under applicable law (for example, contractual safeguards and equivalent protection measures where required).

9. Data Retention

Kaleam keeps personal data only as long as necessary for the purposes described above, or as required by law.

Current baseline retention windows: - account/email data after valid deletion request: active-system purge target up to 30 days - analytics events: up to 14 months - security/server logs: up to 12 months - backups: rolling retention up to 35 days, then purge

Kaleam may retain limited information longer for legal claims, tax/accounting obligations, fraud prevention, or regulatory compliance.

10. Account Deletion

Users can delete their accounts from user settings.

You may also request deletion by emailing info@kaleam.com.

Upon valid request, Kaleam will deactivate access and delete personal data from active systems, subject to legal retention duties and backup cycles.

11. Your Privacy Rights

Subject to legal conditions and exceptions, users may request: - access to personal data - correction/rectification - deletion/erasure - restriction of processing - objection to certain processing - data portability (where applicable) - withdrawal of consent for consent-based processing

To submit a request, email: info@kaleam.com.

Response timeline target: 30 days, with lawful extension where permitted.

12. Complaints

Please contact Kaleam first at info@kaleam.com.

If unresolved, you may escalate to: - the competent authority under Saudi PDPL (including SDAIA or successor authority); and/or - your EU/EEA supervisory authority for GDPR matters.

13. Minors

Kaleam does not apply a fixed minimum age globally.

If local law requires parental/guardian consent for minors to use digital services or provide personal data, that consent must be obtained before use.

Parents/guardians may request review or deletion of a minor’s account data by contacting info@kaleam.com.

14. Security

Kaleam applies reasonable technical and organizational security measures appropriate to the risk, including access control and infrastructure safeguards.

No method of transmission or storage is fully secure.

15. Changes to This Privacy Policy

Kaleam may update this Privacy Policy from time to time. Changes will be posted with a revised "Last Updated" date.

Material changes may also be communicated through website/app notices where appropriate.

16. Contact

For privacy requests and complaints: - Email: info@kaleam.com