Privacy Policy – Ixora Admin

Last Updated: October 2026

1. Introduction

This Privacy Policy applies to Ixora Admin, the web administration console of the ixorax platform, available at ixorax.com/admin. It explains what personal data is processed when administrators use the console, why it is processed, how it is protected and what rights you have.

By signing in to Ixora Admin you acknowledge that you have read this Policy. If you do not agree with it, please do not use the console.

2. Scope and Roles

Ixora Admin is intended for authorized administrators of ixorax and of the organizations that subscribe to its solutions. It is used to manage users, roles and permissions, companies and subscriptions, announcements, support requests and system settings.

• For administrator account data and platform operations, ixorax acts as the data controller.
• For the data of an organization's own employees and records managed through its solutions, the organization is the data controller and ixorax processes the data on its behalf and on its instructions.

3. Information We Process

3.1 Administrator Account Information

Name, work e-mail address, role and permissions, preferred language and theme, and sign-in credentials (passwords are stored in protected, non-readable form).

3.2 Organization and Subscription Information

Company name in English and Arabic, commercial registration number, company code, contact mobile number, administrator e-mail, logo, brand color, selected plan, voucher code and the name of the signatory.

3.3 Access and Audit Records

A record of administrative actions: who changed which role, permission or setting, and when. These records may include the IP address and the browser or device used.

3.4 Support and Technical Information

Messages sent to support, and technical data needed to operate and secure the console, such as error logs and session information.

4. Purposes of Processing

• Providing the console and authenticating administrators.
• Managing users, roles, permissions, companies and subscriptions.
• Keeping an audit trail of administrative changes for accountability and security.
• Responding to support requests and communicating about the service.
• Detecting, preventing and investigating misuse, fraud and security incidents.
• Meeting legal and regulatory obligations.

5. Legal Basis

We process personal data to perform our contract with the subscribing organization, to meet legal obligations, and for our legitimate interests in operating and securing the platform, in line with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.

6. Access Control and Confidentiality

Access to the console is restricted to authorized administrators. Each administrator is given only the permissions required for their role, and administrative actions are recorded. Administrators must keep their credentials confidential and must not share their accounts.

7. Data Sharing

We do not sell personal data. We share it only in these cases:

• With service providers that host or support the platform, under confidentiality and security obligations.
• With the organization that owns the data, through the console.
• When required by law, a court order or a competent authority.

8. Storage and Retention

Data is stored on secured infrastructure. We keep personal data only for as long as needed for the purposes described in this Policy, to meet contractual obligations, and as required by law. Audit records are kept for as long as accountability and security require.

9. Data Security

We apply technical and organizational measures to protect personal data, including encrypted connections, role-based access control, protected password storage, logging of administrative actions and regular review of access. No system is completely secure, and we encourage administrators to use strong passwords and to report suspected incidents immediately.

10. Cookies and Sessions

The console uses cookies and similar technologies that are necessary to sign you in, keep your session secure and remember your language and theme preferences. We do not use them for advertising.

11. Your Rights

Subject to applicable law, you may ask to access your personal data, to correct it, to request its deletion, to object to or restrict certain processing, and to receive information about how it is used. To exercise these rights, contact us using the details below. Requests relating to an organization's employee data should be addressed to that organization.

12. Changes to This Policy

We may update this Policy from time to time. The date of the latest revision appears at the top of this page, and significant changes will be communicated through the console or by e-mail.

13. Contact Information

For questions about this Privacy Policy, please contact:

Email: info@ixorax.com

Contact us

Questions about this document? Write to info@ixorax.com or use the contact form.