Privacy Policy

1. Who We Are

PashX ("we", "our", "us") is an AI-native CRM platform for retail and trading companies in Saudi Arabia and the Gulf region, operated by PashX (pashx.com). This Privacy Policy applies to crm.pashx.com and all related services.

Contact: shahil@pashx.com

2. Data We Collect

• Analytics data — page views, session duration, referrer, device type via Google Analytics 4 (GA4). Collected only with your consent.
• Chat messages — messages you send to the PashX AI assistant are processed in real-time to generate responses. We do not store these messages on our servers after the session ends.
• Contact information — if you book a demo or start a trial, we collect your name and email address.
• Cookie preferences — stored locally in your browser (localStorage).

3. How We Use Your Data

• To operate and improve the website and AI assistant
• To respond to demo requests and trial sign-ups
• To analyze website traffic and usage (only with consent)
• To comply with Saudi Arabian ZATCA, VAT, and legal obligations

4. Cookies

We use one analytics cookie (Google Analytics GA4) to understand how visitors use our site. This cookie is only set after you explicitly accept cookies via the consent banner. You may decline at any time — the site functions fully without analytics cookies.

We use localStorage (not a cookie) to remember your cookie preference.

5. Third-Party Services

• Google Analytics (analytics.google.com) — website analytics, only with consent
• Anthropic Claude API — powers the AI chat assistant; messages are processed per Anthropic's privacy policy at anthropic.com/privacy
• Vercel — hosting infrastructure; see vercel.com/legal/privacy-policy

6. Your Rights (GDPR — EU Visitors)

If you are located in the European Union, you have the right to: access your personal data, correct inaccurate data, request deletion, restrict processing, and data portability. To exercise any right, email shahil@pashx.com.

7. Your Rights (Saudi PDPL — Saudi Visitors)

Under the Saudi Personal Data Protection Law (PDPL, effective September 2023), Saudi residents have the right to: know what personal data we hold, request correction, request deletion, and object to processing. Contact us at shahil@pashx.com for any data request. We will respond within 30 days.

8. Data Retention

Analytics data is retained per Google's default retention period (2 years). Contact and trial data is retained for as long as necessary to provide our services or as required by Saudi law. AI chat messages are not retained after your session.

9. Data Transfers

Your data may be processed outside Saudi Arabia (e.g., by Vercel and Google). We ensure appropriate safeguards are in place. If you have concerns about cross-border transfers, contact us at shahil@pashx.com.

10. Changes to This Policy

We may update this policy. Material changes will be communicated via a notice on the website. Continued use after changes constitutes acceptance.

11. Contact

For any privacy questions or data requests: shahil@pashx.com
PashX — crm.pashx.com — Saudi Arabia