At UrPlanner, we respect your privacy and are committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) issued by the Saudi Data and Artificial Intelligence Authority (SDAIA).
1. Data we collect
When you use our website and services, we may collect the following data:
When creating an account or purchasing
- Name
- Email address
- Mobile number (when completing a purchase or when provided optionally)
- Password (stored encrypted; we never see it in its original form)
When completing a purchase
- Order details (product, price, purchase date)
- Interests, departure city, and expected travel dates (if you provide them optionally or as required by the product)
When activating Areeb (Telegram bot)
- Your Telegram account ID
- Your Telegram username, if available
- Your actual trip dates
- Your live geographic location—only if you choose to share it voluntarily while using the “nearby places” feature
If you activate Areeb inside a Telegram group, his messages and replies are delivered to members of that group. Sharing your live location for the “nearby places” feature remains private to you alone: other members do not see who shared their location or their precise coordinates.
When using live chat on the website
- Content of your messages
- A silent identifier (cookie) to link your conversation to your device when you return later
Automated protection systems
We may use automated protection against improper use (such as verifying that a request comes from a real person rather than a bot) when completing a purchase or signing in.
Payment data
We do not store your card details at all. All payments are processed directly through the licensed Geidea gateway, compliant with global data security standards (PCI-DSS).
2. Artificial intelligence services (Areeb)
We use global artificial intelligence services to operate the smart travel companion “Areeb”—a standard practice followed by the vast majority of technology companies worldwide, as locally equivalent alternatives with the same capability are not currently available. When you interact with Areeb, your message is processed together with essential trip data (such as name, travel dates, destination, and trip program) automatically and in real time to generate an appropriate reply, without permanent storage of your conversation content at the AI service provider.
Important notice: Please do not share any sensitive or confidential information with Areeb during your conversation, such as: credit card numbers or payment information, passwords or secret codes, national ID or passport numbers, or any other sensitive personal information. Areeb is intended to help you with trip matters (schedules, recommendations, general inquiries) only.
3. How we use your data
We use your data exclusively for the following purposes:
- Processing your purchase and activating your smart companion
- Personalizing Areeb to provide information related to your trip and current city only
- Communicating with you about your order (confirmation, invoice, technical support)
- Improving the quality of our services
4. Sharing data with third parties
We rely on certain technical service providers to operate our platform, and some of your data may reach them for technical purposes only:
- Geidea payment gateway — payment processing
- Telegram — platform for operating Areeb, the smart travel companion
- Global AI and map processing services — to generate smart replies during your trip and suggest nearby places. Some of these services may be headquartered outside the Kingdom of Saudi Arabia, and data related to your inquiries is transferred to them solely to provide you with an appropriate reply, in accordance with the provisions on transferring personal data outside the Kingdom under the Personal Data Protection Law.
We do not sell your data or share it for marketing purposes with any third party; however, we use specialized technical providers (such as AI services and payment processing) to operate the service itself only.
After activating Areeb and setting your trip dates, he may provide direct links to book flights and hotels suggested in your schedule, to simplify booking. We disclose transparently that we may receive a small commission from some of these providers if you complete your booking through them—this does not affect the price you pay at all. Using these links is entirely optional.
5. Where data is stored
Core data for your account, orders, and trip files (including trip programs and activation files) is stored on servers within the Kingdom of Saudi Arabia, with technical security measures applied to protect it.
6. Data retention period
- Invoice and financial transaction data: retained for the statutory period required by competent authorities in the Kingdom (accounting and tax), without deleting financial records that the law requires us to keep.
- Trip data and operational customer files (trip program, travel dates, Areeb preferences): one year after the end of your actual trip, unless you request deletion earlier or request longer retention for support purposes.
- Areeb conversations: we do not maintain a permanent log of your conversation content on our servers; it is processed in real time to generate a reply and is replaced with each new message.
7. Your rights
Under the Personal Data Protection Law, you have the right to:
- Request access to your stored data
- Request correction of any inaccurate data
- Request deletion of your data (subject to statutory or accounting obligations where applicable)
- Withdraw your consent to sharing live location with Areeb at any time
To exercise any of these rights, contact us via the Contact us page. We will respond to deletion requests within 7 to 14 business days of confirming your identity.
8. Cookies
Our website uses simple cookies for operational purposes (such as saving language and appearance preferences, and linking live chat to your device). We do not use third-party advertising tracking cookies.
9. Data security
We apply technical security measures (encryption, protection against common attacks, and restricted access permissions) to protect your data from unauthorized access or use.
10. Privacy inquiries
For any questions about this policy or your personal data, contact us via the Contact us page.
