Privacy Policy
Last updated: February 2026
Introduction
Mujez Technologies ("Mujez", "we", "us", or "our") is committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use the Mujez financial platform, whether through our cloud-hosted SaaS solution or on-premises installation. By using our services, you agree to the practices described in this policy.
Data We Collect
We collect the following categories of data:
- Account information: full name, email address, phone number, company name, and job title
- Financial data: invoices, transactions, bank statements, chart of accounts, and related accounting records processed through the platform
- Usage data: feature usage, session duration, device type, browser, and IP address
- Communication data: support requests, feedback, and correspondence with our team
- Authentication data: encrypted passwords, session tokens, and multi-factor authentication details
How We Use Your Data
We use your data for the following purposes:
- Providing, maintaining, and improving the Mujez platform
- Processing financial transactions and generating reports
- Ensuring compliance with ZATCA e-invoicing and other regulatory requirements
- Communicating with you about your account, updates, and support
- Analyzing usage patterns to improve our services and develop new features
- Detecting and preventing fraud, unauthorized access, and security threats
Data Storage and Residency
For our SaaS solution, all data is stored on secure cloud infrastructure within our regional data centers, ensuring compliance with applicable data residency requirements. For on-premises installations, data remains entirely within your own infrastructure under your direct control. We do not transfer personal data outside your jurisdiction without explicit consent unless required by applicable law.
Data Sharing
We do not sell your personal data. We may share data with:
- Authorized third-party service providers who assist in operating our platform, bound by strict confidentiality agreements
- Banking partners for the sole purpose of transaction processing and bank feed integrations
- Regulatory authorities when required by law or in response to a valid legal request
- Your designated auditors or accountants, upon your explicit authorization
Data Security
We implement industry-leading security measures to protect your data and all Personally Identifiable Information (PII), including AES-256 encryption for data at rest, TLS 1.3 encryption for data in transit, role-based access controls, comprehensive audit trails, and regular third-party security assessments. Our platform is designed to meet SOC 2 Type II compliance standards. PII is classified, encrypted, and access-controlled in compliance with both PDPL and GDPR requirements.
Your Rights Under PDPL and GDPR
Mujez complies with the Saudi Personal Data Protection Law (PDPL) and the EU General Data Protection Regulation (GDPR). Personally Identifiable Information (PII) is treated with the highest level of protection. Under these frameworks, you have the following rights:
- Right to access your personal data held by Mujez
- Right to request correction of inaccurate data
- Right to request deletion of your data, subject to legal retention requirements
- Right to withdraw consent for data processing
- Right to request restriction of processing
- Right to data portability — receive your data in a structured, machine-readable format
Data Retention
We retain your data for as long as your account is active and as required by applicable laws and regulations. Financial records are retained for the periods mandated by Saudi commercial and tax law. Upon account termination, we will securely delete or anonymize your data within 90 days, unless retention is required by law.
Cookies and Tracking
We use essential cookies to operate the platform and optional analytics cookies to understand usage patterns. You can manage your cookie preferences at any time. For more details, see our Cookie Policy.
On-Premises Installations
For customers using on-premises installations, Mujez processes data solely within your infrastructure. We do not have access to your data unless you explicitly grant temporary access for support or maintenance purposes. All on-premises data governance is managed according to your organization's policies.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes through the platform or via email. Continued use of the platform after changes constitutes acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at privacy@mujez.ai or write to: Mujez Technologies, Sheikh Zayed, Giza, Egypt.