Data controller and contact
Atieh Al-Mutairfi · Freelance certificate FL-267553223 · Riyadh, Saudi Arabia
Data controller: Atieh Al-Mutairfi. For privacy, access, correction and deletion requests: support@visodrive.com.
Website and purchase data
We collect your name, email and phone number to create an account, verify sign-in, follow up on orders and provide support. Customer and partner sign-in codes are sent by email. We send an SMS code to verify phone ownership during registration or when the number changes. The number is used for contact and support, not sign-in.
The website stores vehicle model and year, screen type and installation readiness, product details, price, discount and order status. It also stores your refund-policy consent, its text and version, and the time of consent.
When you upload a payment receipt, we store the file, payer name, transaction reference, date and review notes. A receipt may contain financial information; send only what is needed for review. The website does not request financial-service passwords or payment-card details.
The VIN is requested when activation is issued through support to tie the licence to the vehicle. The current registration form and cart do not request it.
Partner portal
We collect the partner’s name, email, phone, city and business type, registration or freelance-certificate number and business links if provided, and a copy of their agreement consent. Partners sign in with an email code through Resend. Authentica receives the phone number to send an ownership-verification code, and the submitted code to verify it, during registration or a number change.
With customer consent, the partner enters the customer’s name, phone, vehicle model, year and VIN, and confirms refund-policy acceptance and screen readiness. We store the licence code and status, the version recorded by the partner and support requests. These details are not visible to another partner.
We process licence purchases and receipts, commissions, payout requests and payout details for review and payment. Partner and customer data are accessible to authorised staff for licensing, review and support. A partner session lasts up to 7 days, or until sign-out or session revocation.
Activation and download service
The store server sends the order ID and VIN to the activation service to issue a vehicle licence, and stores the short key and full code with the order. Email delivers the short key and order link; partner activations are sent to the partner account’s email.
When downloading with a licence, the update service receives the licence code to verify download eligibility. The store does not host the app file.
Data on the vehicle screen
The app processes vehicle data locally for display and guidance, including speed, fuel, tyres, tilt, drivetrain status and trips. It reads the VIN to verify the licence and stores activation locally.
When permissions are granted, the app uses location for trips, Qibla and prayer times, Bluetooth for auxiliary lighting, and log access for available CarPlay guidance. It also allows screen-brightness adjustment when the feature is enabled.
The current app release contains no advertising or usage-analytics tools. Vehicle, location and log data are processed on the screen and are not automatically sent to the VisoDrive store. Information you send to support is processed as support correspondence.
If the app’s update service is enabled in your version, it connects to the update server over HTTPS to request version details and downloads. Requests include the update channel and file information, and the server sees the IP address as part of the connection.
Sessions and local storage
The website uses a necessary cookie to maintain sign-in for up to 30 days. The browser stores cart details and an order-attempt identifier locally so you can continue purchasing and avoid duplicate orders.
We use short-lived verification codes and attempt-rate limits to prevent abuse. The hosting service may process IP addresses, connection data and operational logs for security and operation. We have not added advertising or marketing-tracking tools to the current interface.
Why do we process data?
To complete account creation and orders, verify payment, issue licences, provide support, protect the service and meet legal obligations. Depending on its purpose, processing is based on fulfilling the contractual relationship, legal obligations or your consent for optional features, under the Personal Data Protection Law.
You can withdraw location or Bluetooth permissions or change settings on the screen; features relying on them may stop working. Your data is not used for unauthorised marketing.
Providers and sharing
This version of the website runs on Vercel. Account and order data are stored in a Neon PostgreSQL database, and receipts in private file storage selected by the service provider (such as Cloudflare R2). When the email service is enabled, Resend sends the verification email.
When you choose WhatsApp, email or social links, your correspondence is also subject to that service’s policy. Merely displaying links does not send your data to social accounts.
We do not sell personal data. Sharing is limited to what is necessary to operate the service, provide support or fulfil a legal obligation. Services may use processing infrastructure outside Saudi Arabia; any transfers are subject to the Personal Data Protection Law and relevant data-transfer regulations.
Retention, deletion and your rights
We retain account, purchase, licensing and support data as needed to deliver the service, meet legal obligations and resolve claims. Removing the app does not delete your store order data. You may request deletion by emailing support; data required by law or for an ongoing request may be exempt.
You can delete local data by clearing app data or uninstalling. You can clear the cart from the website or clear browser local storage, and sign out to end your session.
Under applicable law, you have rights to be informed about processing, access and obtain a copy of your data, correct or complete it, request destruction when no longer needed, and withdraw consent for processing based on consent. We verify the requester’s identity and respond within statutory time limits. You may also complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).
Security and updates
We restrict access to orders and receipts to the order owner and authorised staff, and use HTTPS on the published site. No security measure is absolute; protect your sign-in codes and device.
Material changes are published on this page with a clear date before taking effect. This policy covers the described website and version; it does not authorise additional data collection without an update.