1. Introduction
Muraqeb provides website monitoring and analytics services. This policy explains what data we collect, and how we use and protect it. By using the platform you agree to what is set out here.
2. The data we collect
Your signup and account: email address, name, phone number (optional), and a password stored hashed (bcrypt) — we cannot read it. Using the monitoring service: the URLs of the sites you add, your alert settings, and the check logs our system produces. Using the tracking script on your site: anonymous visitor data (device type, browser, country, page visited, time of visit). We do not collect personal information about your sites' visitors. SEO analysis: the results of the audits you yourself trigger on your site. Billing: when you subscribe to a paid plan, payment is processed by Moyasar. We keep only the transaction reference and the amount, and never store your card details.
3. How we use your data
• To deliver the monitoring and alerting you asked for. • To send email about your account (alerts, invoices, important updates). • To improve the platform and understand usage (aggregated, anonymous data). • To comply with legal obligations in the Kingdom of Saudi Arabia. We will not sell your data to any third party, and we will not use it for marketing outside the platform without your consent.
4. Third parties
We rely on trusted providers to run the platform, each bound by strict data-protection policies: • Moyasar, the Saudi payment gateway (to process subscriptions). • Telegram, to deliver alerts (if you enable it). • Twilio, to deliver WhatsApp alerts (if you enable it). • An SMTP email provider, for account email. • ip-api, to turn an IP address into a country/city name in visitor statistics. We share with each provider only the minimum data needed to perform that service.
5. Cookies
We use strictly necessary cookies only: keeping your session (JWT), and remembering your light/dark theme and language preference. We use no advertising cookies and no third-party tracking.
6. Your rights
You have the right to: • Access your data and see what we store about you. • Correct your data from the settings page. • Delete your account and all its data (permanently deleted within 30 days). • Export your data in a readable format (JSON). • Object to any processing you find unacceptable. To exercise any of these rights, write to us through the "Contact us" page.
7. Data retention
We keep your account data for as long as the account is active. After deletion, all personal data is removed within 30 days unless the law requires us to keep some of it (invoices, for example, are kept for 10 years under Saudi invoicing regulations).
8. Security
• Full HTTPS encryption on all traffic. • Passwords hashed with bcrypt (they cannot be reversed). • Session tokens (JWT) with a limited lifetime. • Regular security reviews and protection against SSRF, XSS and CSRF. • Regular database backups. Despite all of this, no internet system is 100% secure. We commit to every reasonable effort.
9. Children's data
Our service is not directed at anyone under 18. We do not knowingly collect data from minors, and delete it immediately if we discover it.
10. Changes to this policy
We may update this policy from time to time. We will notify you of any material change by email at least two weeks before it takes effect.
11. Governing law
This policy is governed by the laws of the Kingdom of Saudi Arabia, and any dispute is referred to the competent courts in Riyadh.
12. Contact us
Questions about privacy? Write to us through the contact page or at [email protected]