Privacy policy

Atheer is a marketing operations platform for agencies, operated from Saudi Arabia. In this policy, “we” refers to the team operating Atheer and “you” refers to the company or person using the service.

We collect only what the service needs to work:

We use this information to:

Every record in Atheer is scoped to your company. No other company on the platform can see your clients, plans, tasks, or files, and permissions are enforced on the server for every request.

Client reviewers on share links see only the items you have shared with them, for as long as the link is valid. Platform staff cannot read the content of your tasks — operational dashboards show counts only.

AI features run only when someone on your team triggers them. When you run an AI action, the relevant content — for example a brief and the client’s brand context — is sent to a third-party model provider (OpenAI, Google, Anthropic, or xAI) to generate the result.

Requests are routed with provider settings that opt out of model training by default. If your company brings its own API key, the key is stored encrypted with AES-256 and used only for your company’s requests.

Card, mada, Apple Pay, and STC Pay payments are processed by Moyasar on Moyasar’s hosted payment page. Your card details go directly to Moyasar and are never stored on, or pass through, Atheer’s servers. Bank transfer is also available.

We keep the records needed for invoicing and accounting: your plan, invoice history, and payment references.

The marketing site (atheerflow.com) sets no cookies.

The application (app.atheerflow.com) uses cookies that are necessary to keep you signed in and to protect your session. We do not use third-party advertising or tracking cookies.

The application keeps an audit log of significant actions — who did what, when, and from which IP address. Audit logs are retained for 365 days and are available to authorized administrators in your company.

We keep your data for as long as your account is active. Downgrading your plan never deletes data — it only limits creating new records above the plan’s limits.

You can request an export of your company’s data at any time, and deletion of your data when you close your account, using the contact details below.

Data is encrypted in transit, API keys are stored encrypted, and role-based permissions are enforced server-side on every request. Payment card data is handled entirely by Moyasar.

No system is perfectly secure. If we become aware of a breach affecting your data, we will inform you without undue delay.

You can access and correct your account information in the app, and you can contact us to request a copy of your data, an export, or deletion. We respond to every request.

When this policy changes, we will update the date at the top of the page. For material changes we will notify you in the application or by email.