Last updated: 2026-07-14 · Madar Digital Investment (مدار للاستثمار الرقمي)
Account data (name, email, organization, role), security data you submit or that our scanning tools discover about assets you've registered and verified ownership of, usage/activity logs, and billing information (processed via our payment gateway providers — we do not store raw card data).
To provide the Service (run the scans/analysis you request, generate findings and reports), to secure your account, to bill your subscription, and — with your data, scoped strictly to your own organization — to ground AI assistant responses in your real security posture rather than generic or fabricated answers.
Your data is processed on private cloud infrastructure. AI-assisted features (chat, analyst copilot) run against a locally-hosted language model — your security data is never transmitted to an external/third-party AI API for processing.
Every record in the platform is scoped to your organization at the data layer. Other customers cannot access your data, and our own staff access is role-restricted and, for most modules, requires a specific internal role rather than blanket access.
Data is retained for the duration of your subscription plus a reasonable period thereafter for account recovery and legal/audit purposes. [Placeholder — specific retention periods per data category to be finalized.]
You may request access to, correction of, or deletion of your personal data, subject to legal and contractual retention requirements, by contacting us at the address below.
Passwords are hashed (bcrypt), never stored in plaintext. Sessions use short-lived tokens with rotating refresh tokens. See our Trust Center for more detail on our security architecture.
Privacy questions or data requests: privacy@madar-digital.om