1. Introduction & Scope

Wusool ("we," "our," or "us") is deeply committed to protecting the privacy of all individuals interacting with our services. This Privacy Policy serves as a legally binding framework detailing how we process information, ensuring strict compliance with the Saudi Personal Data Protection Law (PDPL), the European General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

2. End-User Privacy (Wusool Widget Users)

A cornerstone of our service is the Wusool Accessibility Widget, deployed on our clients' websites. We expressly declare that the Wusool Widget does not collect, process, transmit, or store any Personally Identifiable Information (PII) from end-users utilizing the widget.

To ensure a seamless user experience, the widget solely utilizes browser localStorage or session cookies strictly to save the user's specific accessibility preferences (e.g., high contrast, dyslexia font) across page navigations. This data remains on the end-user's local device and is never transmitted to Wusool's servers.

3. B2B Client Data Collection

For enterprises and organizations holding an account with Wusool (our "Clients"), we collect the minimum necessary data to execute our contractual obligations and deliver our services:

• Identity & Contact Data: Full name, professional email address, and phone number.
• Organizational Data: Company name, website URL, and administrative roles.
• Financial Data: Billing details securely processed through certified third-party payment gateways (we do not store raw credit card numbers).

4. Purpose of Processing

Client data is processed under the lawful bases of contractual necessity and legitimate business interests for the following purposes:

• To provision, maintain, and authenticate access to the Wusool Enterprise Dashboard.
• To provide technical support, service updates, and administrative notices.
• To fulfill legal, accounting, and tax obligations.

5. Data Security & Retention

We implement enterprise-grade technical and organizational measures (TOMs), including robust encryption in transit and at rest, to safeguard Client data against unauthorized access, disclosure, or destruction. Data is retained only for as long as the Client maintains an active account, or as required by applicable statutory retention periods, after which it is securely deleted or anonymized.

6. Data Sharing & Third Parties

Wusool adheres to a strict anti-monetization policy; we do not sell or trade personal data. We only share data with vetted sub-processors (e.g., secure cloud hosting providers and payment processors) who are bound by stringent Data Processing Agreements (DPAs) that mandate equivalent levels of data protection.

7. Your Privacy Rights

Subject to applicable laws (including PDPL, GDPR, and CCPA), Clients possess the following statutory rights regarding their data:

• The Right to Access: Request a copy of the personal data we hold.
• The Right to Rectification: Request correction of inaccurate or incomplete data.
• The Right to Erasure ("Right to be Forgotten"): Request deletion of personal data when it is no longer necessary.
• The Right to Data Portability: Obtain data in a structured, machine-readable format.

8. Amendments & Contact

We reserve the right to amend this Privacy Policy to reflect evolving legal and operational requirements. Material changes will be communicated to Clients via email or dashboard notifications. For any inquiries or to exercise your privacy rights, please contact our Data Protection Officer (DPO) at legal@wusool.com.

Effective Date: July 2026
Last Updated: August 2026