Privacy Policy

Who controls the data?

Traf3 is used by law firms. The case, client and invoice data a firm enters belongs to that firm, which is its controller; we process it on the firm’s behalf to provide the service. Your account is created by your firm’s administrator.

Data we process

• Account data: name, email address, role and permissions within the firm.
• Business data entered by the firm: client details (name, national ID or commercial registration, mobile, email, address, VAT number), cases, hearings and tasks, invoices and payments, and attached documents.
• Technical data: standard server logs (request time, IP address) for security and troubleshooting.

Device permissions

• Fingerprint / Face ID: optional, for signing in. Matching happens on your device by the operating system; we never receive or store your biometric data. Your sign-in is kept encrypted in the device’s secure store (Keychain / Keystore) and can be erased from the app’s settings.
• Camera, photos and files: used only when you choose to attach a document or save an invoice.

How we use data

Only to run the service: verifying your identity, showing and managing your firm’s data, issuing invoices (including ZATCA e-invoicing requirements), support, and protecting the system.

The app contains no advertising, does not use the advertising ID, does not track you across other apps or websites, and we do not sell your data.

Sharing

We share data only with: cloud infrastructure providers hosting the system on our behalf; the Zakat, Tax and Customs Authority when e-invoices are issued as the law requires; and authorities where we are legally obliged to.

Security and retention

Data is encrypted in transit (HTTPS) and access follows the permissions set by the firm. We keep data for the duration of the firm’s subscription, and invoices for the period the law requires.

Your rights

Under the Saudi Personal Data Protection Law you may request access to, correction of, or deletion of your data. For account or data deletion requests, contact your firm’s administrator or us at the address below; we respond within 30 days.

Children

The app is a professional tool and is not directed at anyone under 18.