Privacy Policy

1. Who we are

DrugSync ("we", "us", "our") operates the drugsync.app platform — a pharma sales intelligence service for pharmaceutical teams in Saudi Arabia. This policy describes how we handle personal data when you use our website and application.

2. Data we collect

We collect the following categories of data:

• Account information — name, email address, organisation name, and role when you create an account or are invited to a workspace.
• Usage data — pages visited, features used, timestamps, and device/browser information collected automatically through cookies and server logs.
• Business data — sales figures, market intelligence, tender information, and other commercial data that your organisation uploads or connects to the platform.

3. How we use your data

• To provide, maintain, and improve the DrugSync platform.
• To authenticate users and manage workspace access permissions.
• To generate dashboards, reports, and analytics within your organisation's workspace.
• To send service-related notifications (e.g. tender updates, account changes).
• To comply with applicable laws and regulations.

4. Data sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers — hosting, database, and analytics services that process data on our behalf under strict confidentiality agreements.
• Your organisation— workspace administrators can see member activity within their organisation's workspace.
• Legal requirements — when required by law, court order, or to protect our rights.

5. Data security

We implement industry-standard security measures including encryption in transit (TLS) and at rest, access controls, and regular security reviews. All business data is logically isolated per organisation.

6. Data retention

We retain account data for the duration of your active account. When an account is deleted, personal data is removed within 30 days. Aggregated, anonymised data may be retained for analytics purposes.

7. Your rights

You may request access to, correction of, or deletion of your personal data by contacting us at [email protected]. Workspace administrators can manage member data directly within the platform.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party advertising cookies. Analytics cookies may be used to understand usage patterns and improve the service.

9. Changes to this policy

We may update this policy from time to time. Material changes will be communicated via the platform or email. Continued use of the service after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions, contact us at [email protected].