Privacy Policy

1- Introduction

X Tag (“we,” “our,” or “the Company”) respects your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations.

This Privacy Policy explains how we collect, process, store, and protect your personal data when you use our website, mobile app, passes services, and related offerings (collectively, the “Platform”).

By using the Platform, you consent to the collection and processing of your personal data as described in this Policy.

2- Data We Collect

We may collect the following categories of data from you:

2.1 Personal Information

Name, username, and profile details
Email address and phone number
User-generated content (business cards, QR codes, messages, uploaded files)

2.2 Technical Data

Device information (type, operating system, version)
IP address and connection data
App usage and interaction logs
Cookies and similar tracking technologies

2.3 Location Data

Location data may be collected only when explicitly required for specific app features, such as mapping or analytics.
Location data is not collected for passes services.

2.4 Third-Party Data

We may receive data about you from third-party services you use with the Platform, including:

Google Maps (location services)
Apple Wallet, Google Wallet, and PassKit (for passes services)
SMS/email OTP providers (authentication)

3- Purpose of Data Processing

We process your personal data for the following purposes:

To provide and improve our Platform and services
To authenticate users and secure accounts
To communicate with users, including notifications, updates, and promotions
To comply with legal obligations under Saudi law
To prevent fraud, abuse, or illegal activities
For analytics, research, and service optimization

4- Legal Basis for Processing

Under PDPL, we process personal data based on:

Consent: For features requiring explicit user permission (location, notifications)
Contractual necessity: To provide services
Legal obligation: To comply with Saudi laws and regulations
Legitimate interests: For security, analytics, and service improvement, provided it does not override user rights

5- Data Sharing

We may share your data with:

Service providers: Third-party providers such as Google Maps, Apple Wallet, Google Wallet, PassKit, SMS/email OTP providers, , strictly for service delivery
Legal authorities: When required by Saudi law or in response to legal requests
Business partners: Only with your consent and for service purposes
Internal departments: For administrative, security, and analytical purposes

We never sell your personal data to third parties.

6- Cross-Border Data Transfers

If your personal data is transferred outside Saudi Arabia (e.g., cloud storage, third-party services), we ensure:

User consent is obtained
Adequate safeguards are in place as required by PDPL and other regulations

7- Data Retention

Personal data is retained only as long as necessary for service provision, legal compliance, or legitimate business purposes.
Upon request, users may delete their data, subject to retention obligations required by law.

8- User Rights

Under PDPL, you have the right to:

Access: Request a copy of your personal data
Correction: Correct or update inaccurate or incomplete data
Deletion: Request deletion of personal data, subject to legal obligations
Restriction: Limit processing for specific purposes
Withdraw consent: For processing that relies on consent
Data portability: Request a copy in a usable electronic format

To exercise your rights, contact privacy@X-Tag.tech or through the Platform’s support channels.

9- Security of Personal Data

We implement technical and organizational measures to protect your data from:

Unauthorized access or disclosure
Accidental loss, destruction, or damage
Cyber threats in compliance with NCA cybersecurity standards

However, no system is completely secure. Users should also take precautions, including safeguarding login credentials.

10- Cookies and Tracking

The Platform may use cookies, analytics tools, and other tracking technologies to improve user experience, analyze traffic, and measure engagement.
Users may manage cookie preferences through device settings or the Platform.

11- Mobile App Permissions

Users must grant permissions for features such as:
Location (only when needed for mapping/analytics)
Camera (for QR code scanning)
Notifications (service updates, security alerts, promotions)
Users may revoke permissions at any time, but some features may be limited.

12- Age Requirement

Users must be at least 18 years old to access paid services, Apple Wallet passes, features.
Users aged 13–17 may access free features and use paid services only with verified parental or guardian consent.

13- Third-Party Services Privacy

Third-party services used in the Platform are subject to their own privacy policies:
Google Maps: https://policies.google.com/privacy
Apple Wallet / Google Wallet / PassKit: Refer to provider policies
SMS/email OTP providers: Refer to provider policies

X Tag is not responsible for third-party data practices.

14- Updates to This Policy

X Tag may update this Privacy Policy at any time.
Updated versions will be published on the Platform with the effective date.
Continued use after updates constitutes acceptance.

15- Contact Information

For questions, complaints, or privacy requests, contact us at:

Email: privacy@x-tag.tech

Address: AL-ROWAD FOR TELECOMMUNICATION AND INFORMATION TECHNOLOGY Company (One Partner), Riyadh, Saudi Arabia

SupportWhatsApp