At Catchsai (“Catchsai,” “we,” “us,” or “our”), we respect your privacy and are committed to protecting your personal data in accordance with the Kingdom of Saudi Arabia's Personal Data Protection Law and its Implementing Regulations (“PDPL”).
This Privacy Policy explains what personal data we collect, why we collect it, how we use and share it, how long we keep it, and the rights available to you when you use our website, mobile application, marketplace, and related services (collectively, the “Services”).
Catchsai is a marketplace that enables users to buy and sell used products. We also use artificial intelligence and other technologies to analyze product information and provide market-price comparisons, pricing insights, and related recommendations.
By using the Services, you acknowledge that you have read and understood this Privacy Policy. Where consent is the legal basis for a specific processing activity, we will ask for your consent separately before that processing begins.
1. Who We Are
Catchsai is operated by Catchsai Establishment, an establishment registered in the Kingdom of Saudi Arabia under Commercial Registration / Unified No. 7054791277 (Entity ID No. 1109549079), with its registered address at Building 8264, Noat Al Sharaf Street, Al Aziziyah District, Jeddah 23333, Kingdom of Saudi Arabia (Short Address: JCZB8264) (“Catchsai,” “we,” “us”).
For the purposes of the PDPL, Catchsai acts as the Controller of the personal data processed through the Services, unless stated otherwise for a specific feature.
We have appointed a Privacy Contact / Data Protection Officer who you can reach using the details below:
- Email: op@catchsai.com
- Phone: +966 56 320 2755
- Address: Building 8264, Noat Al Sharaf Street, Al Aziziyah District, Jeddah 23333, Kingdom of Saudi Arabia (Short Address: JCZB8264)
- Data Protection Officer / Privacy Contact: Privacy Team
2. Children's Privacy
The Services are intended for use only by individuals who have reached the age of majority under applicable Saudi law. We do not knowingly collect personal data from children. If you are a parent or guardian and believe your child has provided personal data to us, please contact us immediately using the details in Section 18 (Contact Us) so we can take appropriate action, including deletion of that data.
3. What Personal Data Do We Collect?
The personal data we collect depends on how you use Catchsai. We only collect what is reasonably necessary to provide and improve the Services.
3.1 Information You Provide Directly
When you create an account, buy or sell products, contact us, or otherwise use the Services, we may collect:
- Identity data: full name, username, and, where relevant to a specific service, date of birth
- Contact data: mobile phone number, email address, delivery and billing address
- Account data: login credentials and authentication information
- Profile data: profile picture, preferences, language settings, and feedback or survey responses
- Location data: location information you choose to share (e.g., for delivery or pickup)
- Payment and transaction data: payment method details and transaction history (card numbers are processed by our PCI DSS-compliant payment processors and are not stored on our own servers)
- Communications: the content of messages, customer-service requests, complaints, and reports you submit to us
If you sell products through Catchsai, we may also collect:
- Product title, description, category, condition, and specifications
- Asking price and listing history
- Product images and videos
- Information relating to the product's ownership or availability
- Any other information you choose to include in your listing
You should avoid including unnecessary personal information about yourself or third parties (for example, another person's face or ID card) in listing photos, videos, or descriptions.
3.2 Verification and Authentication Information
To protect users, verify accounts, and prevent fraud, we may collect:
- Mobile phone number and email address used for one-time passwords (OTP) and verification codes
- Where required for a specific service and legally permitted, government-issued identification or other identity documents — we will tell you at the time what is required and why
3.3 Information We Collect Automatically
When you use our website or application, we automatically collect:
- IP address, device identifiers, device type, and operating system
- Browser type and version, application version
- Language and time-zone settings, approximate location
- Date and time of access, pages and screens viewed
- Products, listings, and search queries viewed or interacted with
- Clicks, scrolling, and other interaction data
- Crash reports, error logs, and other technical and diagnostic information
We collect this information using cookies, software development kits (SDKs), pixels, and similar technologies — see Section 9 (Cookies and Similar Technologies) for details and your choices.
3.4 Information From Other Sources
Where permitted by applicable law, we may receive information about you from:
- Payment providers and fraud-prevention providers
- Delivery or logistics providers (e.g., updated delivery or address information)
- Analytics and service providers who support the Services
- Publicly available sources
- Other users — for example, when someone reports your listing or account, or when a friend or relative makes a purchase on your behalf and shares your contact details with us (the person sharing that data warrants they have your consent to do so)
4. How We Use Your Personal Data
4.1 Providing the Marketplace
- Create and manage your account and verify your identity
- Publish and manage product listings; facilitate transactions between buyers and sellers
- Process payments and facilitate delivery or collection, where applicable
- Provide customer support and respond to inquiries, complaints, and reports
- Operate, maintain, and secure the website and application
4.2 AI-Powered Price Comparison
A core feature of Catchsai is our use of artificial intelligence and data analysis to provide market-price insights. Depending on the features you use, we process product-level information — such as category, name, description, condition, specifications, images, and listing price — to:
- Estimate or analyze a product's market value and compare it against available marketplace information
- Identify potentially comparable products and generate pricing recommendations or insights
- Help sellers set an appropriate asking price and help buyers evaluate whether a listed price appears reasonable
- Improve our pricing models and marketplace functionality
AI-generated pricing information is an estimate or informational comparison only. It does not guarantee the actual value, selling price, or future market price of any product, and no purchase, sale, or listing decision is made automatically on your behalf by this feature — see Section 7 (Automated Decision-Making) for more on how this affects your rights.
4.3 Personalization, Security, and Improvement
- Provide product recommendations, relevant listings, search results, and personalized content
- Detect and prevent fraud, suspicious activity, and abuse of the Services, and verify accounts
- Analyze usage to improve the Services, develop new features, fix errors, and improve our AI models
- Comply with applicable laws and regulations, respond to lawful requests from authorities, and establish, exercise, or defend legal claims
4.4 Communications
We use your contact information to send account-related messages, OTP and verification codes, transaction notifications, messages about your listings or purchases, customer-service communications, security alerts, and important service updates. Where required by law, we obtain your consent before sending promotional communications, and you can opt out at any time — see Section 10 (Advertising and Marketing).
5. Legal Basis for Processing
Depending on the purpose, we rely on one or more of the following legal bases under the PDPL:
Performance of a Contract — processing necessary to create your account, facilitate purchases and sales, process transactions, and provide customer support.
Consent — where consent is the basis for processing (e.g., certain marketing communications), we ask for it before processing begins. You may withdraw consent at any time; this does not affect the lawfulness of processing carried out before withdrawal, or processing that relies on another legal basis.
Legitimate Interests — where permitted by law, for purposes such as improving the Services, preventing fraud, and maintaining platform security, balanced against your rights and interests.
Legal Obligation — where processing is necessary to comply with a legal or regulatory requirement.
6. Sharing Your Personal Data
We do not sell your personal data. We share it only as described below, and we require third parties to protect it to a standard consistent with this Privacy Policy.
6.1 Buyers and Sellers
Because Catchsai is a marketplace, we share certain information between buyers and sellers to facilitate a transaction — for example, name, contact information, product or listing details, and delivery or collection information. We limit this to what is reasonably necessary for the specific transaction.
6.2 Service Providers
We engage third-party service providers to perform functions on our behalf, including cloud hosting and data storage, payment processing, SMS/OTP delivery, email services, analytics, customer support, fraud prevention and security, artificial intelligence and machine-learning services, image and content processing, and delivery and logistics. These providers may access personal data only to the extent necessary to perform their functions for us, may not use it for their own purposes, and are contractually bound to protect it in line with applicable law.
6.3 Legal and Regulatory Authorities
We may disclose personal data where required or permitted by applicable law, regulation, legal process, or a lawful request from a competent authority, or to protect the rights, property, or safety of Catchsai, our users, or others.
6.4 Business Transfers
If Catchsai is involved in a merger, acquisition, restructuring, financing, or sale of assets, personal data may be transferred as part of that transaction, subject to this Privacy Policy and applicable law.
7. Automated Decision-Making
Some features of Catchsai — including AI-powered pricing insights (Section 4.2) and automated fraud or listing checks — involve automated processing. These features are designed to inform, not replace, your own decisions or a human decision where one is required. Where automated processing produces a decision that has legal effects on you or similarly significantly affects you, you have the right, subject to applicable law, to request human review of that decision. To exercise this right, contact us using the details in Section 18.
8. Cookies and Similar Technologies
We use cookies, SDKs, pixels, and similar technologies to:
- Keep you signed in and remember your preferences
- Maintain essential website and application functionality
- Understand how users interact with the Services and analyze performance
- Detect fraud and security threats
- Provide relevant content and, where applicable, advertising
You can control cookies through your browser or device settings, including blocking or deleting them; disabling certain cookies may affect the functionality of the Services. For more detail, please refer to your browser or device help settings for guidance on managing cookies.
9. Advertising and Marketing
Where applicable, we may use your information to provide relevant advertising or promotional communications, and we obtain your consent first where required by law. You may unsubscribe from marketing communications at any time using the unsubscribe link in the communication or by contacting us; you will continue to receive essential service-related communications, such as OTPs and transaction notices, which are not marketing.
10. Data Security
We maintain reasonable organizational, technical, and administrative safeguards designed to protect personal data against unauthorized access, alteration, disclosure, loss, misuse, or destruction, including access controls, authentication mechanisms, encryption in transit, network security measures, and internal access restrictions. Where we process payment card data, we follow the Payment Card Industry Data Security Standard (PCI DSS).
No method of transmission or storage is completely secure, so while we work to protect your personal data, we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential and should notify us promptly if you believe your account has been compromised.
If a personal data breach occurs that is likely to result in harm to you, we will notify the Saudi Data and AI Authority (SDAIA) and affected users in accordance with the PDPL and its Implementing Regulations.
11. International Transfers of Personal Data
We may use service providers located inside or outside the Kingdom of Saudi Arabia. Where personal data is transferred outside the Kingdom, we take the measures required under applicable Saudi law, which may include standard contractual safeguards recognized by the National Data Management Office (NDMO) or other measures permitted under the PDPL, to ensure your data continues to receive an appropriate level of protection.
12. How Long We Keep Your Personal Data
We retain personal data only for as long as reasonably necessary to fulfill the purposes it was collected for, provide the Services, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. The specific period depends on the type of data, the purpose of processing, whether your account remains active, and any applicable legal or regulatory retention requirements. When data is no longer needed, we securely delete, destroy, or anonymize it.
13. Your Rights
Subject to applicable law, you have the following rights regarding your personal data:
Right to be informed — to know what personal data we collect and how we use it (this Privacy Policy, and our team, are here for that).
Right to access — to request a copy of the personal data we hold about you, in a clear and readable format where technically feasible.
Right to correction — to request that we correct inaccurate or incomplete personal data.
Right to deletion / destruction — to request that we delete or destroy your personal data, subject to legal exceptions (for example, data we must retain for legal or accounting reasons).
Right to restrict processing — to request that we limit how we use your data in certain circumstances.
Right to object — to object to certain processing, including processing based on legitimate interests or used for direct marketing.
Right to withdraw consent — where processing is based on consent, to withdraw it at any time, without affecting past lawful processing.
Right to complain — to lodge a complaint with the Saudi Data and AI Authority (SDAIA), our principal supervisory authority, if you believe we have not handled your personal data in accordance with the PDPL.
Some rights may be subject to exceptions or limitations under applicable law. We will not charge a fee to process your request unless the law allows it, and we will respond within the timeframes required by applicable law. We may need to verify your identity before actioning certain requests.
To exercise any of these rights, contact us using the details in Section 18 (Contact Us).
14. Your Responsibilities
- Ensure the information you provide to Catchsai is accurate and kept up to date
- Keep your account credentials confidential and avoid sharing your OTP or verification codes with anyone
- Notify us promptly of any unauthorized access to your account
- Avoid uploading unnecessary personal information belonging to other individuals in listings or images
- Ensure your listings and content comply with applicable law and our Terms of Use
15. Third-Party Links and Services
The Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, content, or security of those third parties. We recommend reviewing their privacy policies before providing them with personal data.
16. Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes to our Services, technology, business practices, or applicable law. We will post the updated version on the Catchsai website or application, indicate the date it was last updated, and, where changes are material, take reasonable steps to notify you as required by law. We will not materially reduce your rights over previously collected personal data without your consent. We encourage you to review this Privacy Policy periodically.
17. Governing Law and Supervisory Authority
This Privacy Policy is governed by the applicable laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations. The Saudi Data and AI Authority (SDAIA) is our principal supervisory authority for personal data protection matters.
18. Contact Us
If you have questions, concerns, complaints, or requests regarding this Privacy Policy or our processing of your personal data, contact us at:
- Legal Entity: Catchsai Establishment
- Email: op@catchsai.com
- Phone: +966 56 320 2755
- Address: Building 8264, Noat Al Sharaf Street, Al Aziziyah District, Jeddah 23333, Kingdom of Saudi Arabia (Short Address: JCZB8264)
- Data Protection Officer / Privacy Contact: Privacy Team
We handle all privacy requests in accordance with applicable law and will respond within the timeframes it requires.