Riyada Dashboard

Terms & Conditions β€” Riyada Operations Dashboard

Please read these terms carefully before using our platform.

Version 1.0 Β· Updated May 27, 2026
πŸ‡ΈπŸ‡¦ Ψ§Ω„ΨΉΨ±Ψ¨ΩŠΨ©

Terms & Conditions

Effective Date: June 1, 2026  |  Version: 1.0

These Terms & Conditions ("Terms") govern access to and use of the Riyada Operations Dashboard (the "System"), a multi-tenant CRM, call-center, human-resources and communications management platform operated by Riyada ("Company," "we," or "us"), accessible at crm.riyada-ksa.com. By logging in or otherwise accessing the System you agree to be bound by these Terms. If you do not agree, you must not use the System.

1. Definitions

  • Authorized User: any employee, contractor or agent granted a named account by the Company.
  • Personal Data: any information that identifies or can identify a natural person, as defined in the Saudi Personal Data Protection Law (PDPL, Royal Decree M/19, 9/2/1443H).
  • HR Data: employment records, salary information, attendance records, leave requests and related documents processed through the HR module.
  • Messaging Services: the WhatsApp Business API and SMS notification services integrated into the System (Avis WhataSMS module).
  • System Content: all data, reports, templates, chatbot flows, configurations and materials created or uploaded by Authorized Users.

2. Acceptance and Eligibility

Use of the System is restricted to Authorized Users who have been provisioned an account by the Company. By accessing the System you represent that:

  • You are at least 18 years of age.
  • You are acting in your professional capacity on behalf of your organization.
  • You have full authority to bind your organization to these Terms.
  • You will comply with all applicable laws of the Kingdom of Saudi Arabia.

3. Description of Services

The System provides the following modules, each subject to role-based access controls:

  • CRM & Admin Dashboard – Aggregated project, call-center and social-media KPIs.
  • WhatsApp Chatbot – Multi-tenant chatbot builder with conversational flows, ticket management and chat history.
  • Human Resources (HR) – Employee records, departments, attendance, leave management, payslips and document storage.
  • Payslip Manager – Bulk payslip generation and email dispatch.
  • Avis WhataSMS – Automated WhatsApp and SMS notifications triggered by inbound PBX calls for Avis car rental operations.
  • User & Access Management – Role-based permissions using the Spatie Permission framework.

4. User Accounts and Security

  • Each Authorized User is issued a unique account. Sharing credentials is strictly prohibited.
  • You are responsible for maintaining the confidentiality of your password and for all activity that occurs under your account.
  • You must immediately notify the system administrator at support@riyada-ksa.com upon discovery of any unauthorized access or security breach.
  • The Company reserves the right to suspend or terminate any account at its discretion, with or without prior notice, where a security risk is identified.

5. Data Privacy and Personal Data Protection

We process Personal Data in compliance with the Personal Data Protection Law (PDPL) (Royal Decree M/19, 9/2/1443H) and its implementing regulations issued by the National Data Management Office (NDMO).

  • Lawful Basis: Personal Data is processed on the basis of contract performance, legal obligation, and/or legitimate interest.
  • Data Minimization: We collect only data necessary for the stated operational purposes.
  • Retention: HR Data is retained for the period required by Saudi Labor Law (Royal Decree M/51, 23/8/1426H) and relevant regulations; other data is retained for a maximum of 5 years unless a longer period is required by law.
  • Cross-Border Transfers: Any transfer of Personal Data outside the Kingdom of Saudi Arabia is subject to prior approval from the NDMO and adequate contractual safeguards.
  • Data Subject Rights: Employees and individuals whose data is processed have the right to access, correct, and request deletion of their Personal Data, subject to applicable exceptions. Requests must be submitted to privacy@riyada-ksa.com.
  • Breach Notification: In the event of a data breach affecting Personal Data, the Company will notify the relevant supervisory authority within 72 hours and affected individuals as required by law.

6. Employee HR Data

The HR module processes sensitive employment information. The following obligations apply to all Authorized Users with access to HR Data:

  • HR Data may only be accessed for legitimate employment-administration purposes.
  • Salary information, payslip data and personal identification numbers must not be shared outside the organization without the employee's written consent.
  • Attendance and leave records must be managed in accordance with Saudi Labor Law (Royal Decree M/51, 23/8/1426H) and the Ministry of Human Resources and Social Development regulations.
  • Exported or downloaded HR reports must be stored securely and deleted when no longer required.
  • Bulk payslip dispatch via the Payslip Manager must be authorized by an HR supervisor before processing.

7. WhatsApp and SMS Communications (Avis Module)

The Avis WhataSMS module sends automated messages to customers of Avis car rental operations via WhatsApp Business API (through BAB.net) and SMS (through Avis KSA gateway). By using this module you acknowledge:

  • All message recipients have provided valid consent to receive commercial communications in accordance with the E-Commerce Law (Royal Decree M/126, 19/11/1440H) and CITC anti-spam regulations.
  • You must maintain an opt-out mechanism and immediately honor any recipient's request to stop receiving messages.
  • Message content must not be defamatory, deceptive, obscene, or otherwise in violation of Saudi law.
  • WhatsApp template messages must be pre-approved by Meta and comply with the WhatsApp Business Policy.
  • The Company is not liable for delivery failures caused by third-party messaging gateways.

8. Chatbot and Conversational Data

  • All WhatsApp chatbot conversations and session data are stored within the System and considered System Content.
  • Chatbot flows that collect Personal Data from end-users must include an appropriate privacy notice at the point of collection.
  • Media files received through the chatbot (images, documents, audio) are stored temporarily; Authorized Users are responsible for downloading and securely managing any files required for business purposes.

9. Acceptable Use Policy

You agree to use the System only for lawful business purposes. You must not:

  • Attempt to access data or accounts that you are not authorized to access.
  • Use the System to send unsolicited commercial messages (spam) in violation of CITC regulations.
  • Upload malicious code, viruses or any software intended to disrupt the System.
  • Reverse-engineer, decompile or attempt to extract the source code of the System.
  • Use automated tools (bots, scrapers) to access the System without prior written authorization.
  • Circumvent or disable any access controls, authentication mechanisms or security features.
  • Use the System to process data for purposes incompatible with those stated in these Terms.
  • Share, sell or sub-license access to the System to any third party.

10. Cybersecurity Obligations

In accordance with the Anti-Cybercrime Law (Royal Decree M/17, 8/3/1428H) and the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls, Authorized Users must:

  • Use strong, unique passwords and change them at least every 90 days.
  • Not access the System from unsecured public networks without an approved VPN.
  • Lock their workstation whenever they leave it unattended.
  • Report any suspicious login attempts, phishing emails or security incidents to the IT department immediately.
  • Comply with the Company's Information Security Policy where applicable.

Unauthorized access to computer systems is a criminal offence under Article 3 of the Anti-Cybercrime Law and may result in imprisonment and/or fines.

11. Intellectual Property

  • The System, including its design, source code, workflows, and documentation, is the intellectual property of Riyada and is protected under Saudi intellectual property laws and international conventions.
  • System Content uploaded or created by Authorized Users remains the property of the respective user's organization, subject to the Company's right to process it as necessary to deliver the services.
  • No license is granted to reproduce, distribute or create derivative works from the System outside the scope of these Terms.

12. Confidentiality

  • All information accessed through the System β€” including HR Data, client data, chatbot configurations, call-center statistics and business reports β€” is strictly confidential.
  • Authorized Users must not disclose Confidential Information to any unauthorized person, during or after their employment or engagement with the organization.
  • This obligation survives the termination of these Terms for a period of five (5) years.

13. System Availability and Disclaimers

  • The System is provided "as is" and "as available." The Company does not warrant uninterrupted or error-free operation.
  • Scheduled maintenance windows will be communicated in advance where practicable.
  • The Company shall not be liable for any loss resulting from system downtime, data loss caused by hardware failure, or failures of third-party services (Meta WhatsApp API, BAB.net, Avis SMS gateway, Yeastar PBX).

14. Limitation of Liability

To the maximum extent permitted by Saudi law, the Company's total liability for any claim arising under these Terms shall not exceed the amounts paid (if any) by the User's organization for the System in the three (3) months preceding the claim. In no event shall the Company be liable for indirect, incidental, special or consequential damages.

15. Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia. Any dispute arising out of or in connection with these Terms shall first be referred to good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to the competent courts of Riyadh, Saudi Arabia, in accordance with the Saudi Civil Procedure Regulation (Royal Decree M/1, 22/1/1435H).

16. Amendments

The Company reserves the right to amend these Terms at any time. Updated Terms will be published on the System with an updated effective date. Continued use of the System after the effective date constitutes acceptance of the revised Terms. Material changes will be communicated by email to all Authorized Users at least 14 days in advance.

17. Termination

  • The Company may suspend or terminate any Authorized User's account immediately upon: (a) breach of these Terms; (b) cessation of employment; (c) a court or regulatory order.
  • Upon termination, the User must immediately cease use of the System and return or delete any Confidential Information in their possession.

18. Contact

For questions regarding these Terms, data privacy requests, or to report security incidents, please contact:

Riyada β€” All rights reserved
Home Terms Β· Β© 2026 Riyada