Privacy Policy

This policy explains how Ryman handles your personal data under the Personal Data Protection Law of the Kingdom of Saudi Arabia.

1. What we collect

When you use a Ryman agent on the web, by phone, on WhatsApp or by messaging, we may collect: the text of your messages, call audio on voice calls, your phone number or account identifier on the channel you use, and basic technical data such as the time and language of the conversation.

2. Purposes and legal basis

• To answer your enquiry and provide the service you asked for.
• To operate and secure the platform and prevent abuse.
• To improve answer quality and meet legal obligations.

Our basis is your consent when the conversation begins, performance of the service you requested, and compliance with applicable law.

3. Mandatory and optional items

Mandatory: the message itself and the channel identifier (for example a phone number on WhatsApp and calls), because we cannot reply without them.

Optional: any extra details you choose to share in the conversation, such as your name or email. You do not have to share them; replies may then be limited to general information.

4. Controller and recipients

The controller is Ryman (Ryman AI), Riyadh, Saudi Arabia. Your data may be processed by service providers acting for us: cloud hosting, AI-model and speech providers, and messaging-channel providers (such as WhatsApp). If you talk to an agent operated by a Ryman customer, that customer is also a controller of your data and is subject to its own policy.

5. Transfer outside the Kingdom

Your data may be sent to service providers outside the Kingdom, such as AI-model providers and messaging platforms, only as far as needed to deliver the service and only under the safeguards the law permits.

6. Storage and retention

Conversations and call recordings are stored on Ryman servers. We do not currently enforce a fixed retention period: there is no scheduled automatic deletion of this data, and it is kept until it is deleted following a lawful request or by the responsible account holder.

7. Destruction

When we accept a deletion request, we destroy the data concerned from our systems so that it cannot be recovered in normal use, and we confirm to you when it is done.

8. Your rights and how to exercise them

You may: be informed how your data is processed, access it and obtain a copy, ask for it to be corrected or destroyed, and withdraw your consent at any time. To exercise any right, write to privacy@ryman.sa; we will reply within the time the law sets.

Back to the home page