Privacy Policy
This policy explains how the verified legal entity operating Optruss handles personal information across our website and enterprise services.
1. Data Controller Identity & Contact
This Privacy Policy governs the processing of personal data by Optruss (“Optruss”, “we”, “our”, or “us”), a technology company headquartered in Riyadh, Kingdom of Saudi Arabia (Olaya District, Riyadh 12213).
For inquiries regarding this policy, individual privacy rights, or data protection practices, you may reach our Data Protection Officer and compliance team at:
2. Website Visitors vs. Customer Operational Data
We strictly distinguish between information collected from public website visitors and customer-controlled operational data:
Website Visitor & Account Data
Optruss acts as the Data Controller for contact form inquiries, demo requests, account credentials, and website analytics.
Customer Operational Data
When an enterprise customer deploys Optruss to monitor physical assets, the customer acts as the Data Controller. Optruss processes operational logs, telemetry, and work orders solely as a Data Processor governed by a signed Data Processing Agreement (DPA).
3. Personal Data We Collect
Depending on your interaction with Optruss, we may collect the following categories of personal data:
- Contact & Inbound Inquiries: Full name, corporate email address, phone number, company name, job title, plant or facility location, and details submitted through pilot evaluation forms.
- User Identity & Console Access: Account usernames, enterprise email addresses, authentication tokens, role permissions, and administrative audit logs.
- Technical & Browsing Data: IP address, browser type, operating system, approximate geographic location, referring URLs, and session interaction timestamps.
4. Purposes of Processing & Lawful Bases
We process personal data only when an applicable lawful basis exists under Saudi data protection law:
5. Infrastructure & Regional Sovereignty
Optruss prioritizes data sovereignty within Saudi Arabia. We partner with tier-3/4 enterprise cloud hosting providers inside the Kingdom of Saudi Arabia and the GCC, and provide sovereign on-premise air-gapped deployment options for critical infrastructure.
Optruss does not sell, rent, or trade personal information to third-party data brokers or advertising networks.
6. Your Individual Rights & Complaint Routes
Subject to the Saudi PDPL, you have the right to be informed, right of access, right to correction, and right to destruction.
To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with the Saudi Data & AI Authority (SDAIA).
Committed to operational privacy and data sovereignty.
Have specific questions about data residency in Saudi Arabia or our enterprise data processing agreements? Speak with our team.