Privacy Policy

The controller of your personal data is [Registered company name], Commercial Registration No. 4030428408, VAT No. 311219812700003, address: [National address].

For anything about your personal data, contact info@mobisense.ai.

• Account data: name, email address, password (stored hashed so it can't be recovered) and language preference. If you sign in with Google or Apple we receive only your name, email and account identifier from them.
• Content you submit: texts you convert to speech, video descriptions and storyboards in the Content feature, and the audio and video files you create.
• Billing data: plan, orders, invoices and payment status. Card data is processed directly by our licensed payment provider; we never receive or store your full card number.
• Usage and technical data: characters used and generation history, IP address, browser and device type, timestamps, and security and audit logs.
• Communications: what you send through the contact form (name, organisation, email, phone, message) and support emails.

We don't ask for sensitive data (such as health, religious or criminal data); please don't include it in your texts. We don't currently offer voice cloning; if we do in the future, we will process your voiceprint only with your separate, explicit consent.

• Providing the Service and performing our contract with you: your account, generating audio and video, storing your files, and support.
• Legal obligations: issuing tax invoices, keeping accounting and tax records, and responding to competent authorities.
• Legitimate interests: protecting the Service, preventing fraud and abuse, and improving the Service using aggregated statistics that don't identify you.
• Service messages: account confirmation, password reset, invoices and important notices.
• Marketing: only with your consent, which you can withdraw at any time.

We don't use your content to train AI models of our own, and we don't sell your personal data to anyone.

We share the minimum data needed with service providers who process it on our behalf under contracts that require them to protect it:

• Supabase: database, authentication and file storage (servers in the United Kingdom).
• Vercel: website and platform hosting (servers in the United Kingdom and a global delivery network).
• ElevenLabs: generating speech, music and sound effects from the texts and descriptions you submit (United States).
• Anthropic: writing video storyboards with AI in the Content feature (United States).
• Microsoft: delivering the Service's emails.
• Licensed payment providers (such as Moyasar): processing payments.
• Cloudflare: domain management and website protection.
• Google and Apple: if you choose to sign in with them.

We may also disclose data to competent government or judicial authorities where the law requires it.

Some of our providers process data outside Saudi Arabia, as listed above. We transfer only the minimum data necessary to provide the Service, in accordance with the PDPL and the Regulation on Personal Data Transfer outside the Kingdom, with appropriate safeguards such as standard contractual clauses, and never where it would prejudice national security or the Kingdom's vital interests.

• Account data: for the life of your account, then deleted or anonymised within 90 days of deletion, except where the law requires us to keep it.
• Texts and files you create: until you delete them or your account. They are removed from backups within 30 days.
• Invoices and payment records: for the periods Saudi law requires for tax and commercial records.
• Security and audit logs and contact messages: up to 24 months, unless needed longer for a legal claim or investigation.

We use appropriate technical and organisational measures, including encrypted connections, access restricted to each account's own data, two-factor authentication for administrator accounts, and audit logs for sensitive operations.

If a personal data breach occurs, we notify the Saudi Data and Artificial Intelligence Authority (SDAIA) within 72 hours of becoming aware of it, and notify you without delay if it could harm you.

Under the PDPL you have the right to:

• Be informed of how and why your data is collected and processed.
• Access your data and obtain a copy in a clear format.
• Correct, complete or update your data.
• Request destruction of your data once it is no longer needed, subject to what the law requires us to keep.
• Withdraw your consent at any time, where processing relies on consent.

To exercise these rights, email info@mobisense.ai from the address registered on your account; we will respond within the statutory period. You also have the right to lodge a complaint with SDAIA.

The Service is for people aged 18 and over. We don't knowingly collect data from minors, and we delete it if we learn we have.

We use only necessary cookies: to keep you signed in, remember your language, and count free trials on the website. We don't use advertising or tracking cookies.

We may update this policy from time to time. Before any material change takes effect we will notify you by email or in the platform, and update the "Last updated" date above.