Skip to content

Privacy Policy

Last updated: October 12, 2026

1. Introduction

Mantiqi ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website mantiqi.com and use our services. This policy is written to meet the transparency requirements of the Saudi Personal Data Protection Law (PDPL) and the European Union General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide

  • Contact form: your name, work email, company, industry, project timeframe, subject, and message
  • Newsletter subscription (email address)
  • Job applications: your name, email address, phone number, the role you are applying for, your CV (an uploaded file or a link), your LinkedIn and portfolio (or GitHub) links, and your answer to "Why this role?"
  • WhatsApp or email communications

2.2 Visit Details Sent with a Form

When you send the contact form or a job application, the website attaches a few details about how you reached us on that visit. No cookies are used for this. These details are kept with your inquiry, and we never record your analytics identifier with it.

  • The page you sent the form from, and the first page of your visit
  • The website that referred you (the page address only, without its parameters) and any campaign tags in the link (UTM tags), from which we work out the channel, such as search, social media, or a direct visit
  • The language of the site you were using
  • An approximate country, derived from your IP address by our content delivery network or, when that is not available, from your device's time zone; we do not store your IP address or time zone with your inquiry

2.3 Analytics in Your Browser, Only With Your Consent

PostHog records the following about your visit only if you accept analytics cookies. If you reject them or make no choice, PostHog collects none of it. We never send PostHog your name, email address, phone number, company, messages, or CV, and we never record your analytics identifier with your inquiries.

  • Pages visited, time spent on each, how far you scroll, and the links and buttons you click
  • Browser type, device type, and operating system
  • Your device's time zone, browser language, and screen size
  • The referring website and any campaign tags in the link
  • The approximate country, region, and city derived from your IP address; the IP address itself is not stored
  • Which forms you view, start, and send, and whether sending worked, including the industry and project timeframe you choose in the contact form and the role you apply for; what you type into a form is never sent
  • How quickly pages load on your device
  • Technical error reports when a page fails to display properly
  • A random identifier kept in a cookie, so that return visits can be recognized

2.4 Daily Visit Totals From Our Server Logs

AWS Amplify, which hosts our website, keeps an access log of every request your browser makes to it, including your IP address, your browser's user-agent string (which names the browser, its version, and your operating system), the page or file requested, the page that referred you, and the time (see sections 6 and 7).

Once a day, we read the previous day's logs and count totals for that day; if some of a day's log entries seem to have arrived late, we read that day once more the following day. The count keeps only those totals, not the log entries themselves, and we use the totals only in our internal reports. It uses no cookies, runs nothing in your browser, and does not depend on your cookie choice. It does not work out your country, does not link your visits on different days, and builds no profile of you. We count these totals on the basis of our legitimate interest in knowing how much our website is used, in which language, and whether it is working properly, so that we can improve it.

The totals for each day are the following; lists of pages and referring websites leave out any entry with a count below 3:

  • Page views, with those from automated programs (bots) and from our own team counted apart from those that appear to come from people
  • The number of distinct visitors, counted by combining the IP address with the user-agent string within that day only; the combination exists only in memory while the day is counted, and is never stored
  • How many of those visitors' browsers went on to load the page's scripts, styles, or data
  • Page views and visitors in Arabic and in English
  • The most-visited pages
  • The websites that referred visitors, by domain name only (such as google.com)
  • Device type: mobile, tablet, or desktop
  • The number of requests to our website in each hour of the day, and the number of server errors

3. Cookie Policy

We use a small number of cookies and similar browser storage. Essential ones keep the website working and are always on. Analytics ones are used only if you accept analytics in our cookie consent banner, and you can change your choice at any time with "Cookie settings" at the bottom of our website's pages. We do not use advertising or marketing cookies.

If you reject analytics or make no choice, no analytics runs in your browser and no analytics cookies are set: PostHog is not loaded and nothing about your visit is sent to it. If you accept and later withdraw your consent, analytics in your browser stops from that moment. Whatever you choose, your visit is included in the daily visit totals we count from our server logs, which use no cookies (see section 2.4).

Name
mantiqi_cookie_consent (browser storage)
Category
Essential
Purpose
Remembers your cookie choice
Duration
6 months
Name
NEXT_LOCALE (cookie)
Category
Essential
Purpose
Remembers the language you chose; set only when you switch language
Duration
1 year
Name
theme (browser storage)
Category
Essential
Purpose
Remembers light or dark mode; set only when you switch it
Duration
Until you clear your browser data
Name
mantiqi_whatsapp_hidden (session storage)
Category
Essential
Purpose
Keeps the WhatsApp button hidden after you close it
Duration
Until you close the tab
Name
ph_phc_…_posthog (cookie and browser storage)
Category
Analytics
Purpose
PostHog: a random identifier that recognizes return visits and sessions; set only after you accept analytics
Duration
1 year (cookie); until you clear your browser data (browser storage)
Name
ph_phc_…_posthog_cpm (cookie)
Category
Analytics
Purpose
PostHog: technical details about what the identifier cookie holds; set only after you accept analytics
Duration
1 year
Name
ph_phc_…_window_id, ph_phc_…_primary_window_exists, and ph_phc_…_posthog (session storage)
Category
Analytics
Purpose
PostHog: details of your current visit in this tab, so that its pages are grouped into one session; set only after you accept analytics
Duration
Until you close the tab
Name
__ph_opt_in_out_phc_… (browser storage)
Category
Analytics
Purpose
PostHog: remembers whether you accepted or withdrew analytics, so that your choice is respected
Duration
Until you clear your browser data

4. How We Use Your Information

  • To respond to your inquiries and provide requested services
  • To send newsletters and marketing communications (with your consent)
  • To improve our website, services, and user experience
  • To comply with legal obligations and protect our rights
  • To analyze how our website is used, with PostHog in your browser, only with your consent
  • To count daily visit totals from our server logs (see section 2.4), based on our legitimate interest in knowing how much our website is used
  • To understand which pages and channels bring us inquiries
  • To prevent fraud and ensure security

5. Your Rights

5.1 GDPR Rights (EU Residents)

Under GDPR, you have the right to: access your personal data, rectify inaccurate data, erase your data, restrict processing, data portability, object to processing, and withdraw consent at any time.

5.2 CCPA Rights (California Residents)

Under CCPA, you have the right to: know what personal information is collected, delete your personal information, opt out of the sale of personal information, and non-discrimination for exercising your rights. We do not sell personal information.

5.3 Saudi PDPL Rights

Under the Saudi Personal Data Protection Law, you have the right to: be informed about data collection and processing, access your personal data, request correction of inaccurate data, request destruction of data when no longer needed, and file complaints with the Saudi Data and AI Authority (SDAIA).

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy:

  • Contact form submissions and job applications: 24 months; after that we anonymize them by deleting your name, contact details, company, subject, message, answer to "Why this role?", any links you sent, and the address of the website that referred you, and keep only details that do not identify you (such as the date, language, page, and channel) for statistics
  • CV files: 24 months, then deleted
  • Inquiries recorded in our CRM (Odoo): for as long as we are in discussion or working with you, and deleted on request unless the law requires us to keep them
  • Analytics data (PostHog): up to 12 months
  • Internal reports, including the daily visit totals from our server logs: totals only (for example, visits and inquiries per day), with no personal data, so they may be kept without a time limit
  • Newsletter: your email address and consent record, for as long as you stay subscribed
  • Website access logs kept by AWS Amplify (including your IP address, your browser's user-agent string, the pages you requested, the page that referred you, and the time): for as long as the website is hosted on AWS Amplify; we use them for security, for troubleshooting, and to count the daily visit totals described in section 2.4

7. Third-Party Services and Data Locations

We use the following third-party services. Each has its own privacy policy governing data use:

  • PostHog (website analytics, only with your consent): hosted in the EU (Frankfurt, Germany), with data passing through Cloudflare's network in transit; your IP address is discarded once the approximate country, region, and city have been derived
  • Amazon Web Services (AWS): AWS Amplify hosts the website and Amazon SES sends our email notifications about form submissions, both in Frankfurt, Germany, and pages reach you through the worldwide Amazon CloudFront network; like any web server, AWS receives your IP address in order to deliver pages to you, and AWS Amplify records it, with the pages you request, in access logs (see section 6)
  • Supabase: stores contact form submissions, job applications, CV files, and newsletter subscriptions in Seoul, South Korea
  • Odoo: the customer relationship management (CRM) system we use to follow up business inquiries, running on our own server at Hostinger in Germany; job applications and newsletter subscriptions are not sent to it
  • Titan: hosts our @mantiqi.com mailboxes, where our team receives a short notice of each new inquiry or job application with a link to our admin area; the notice contains only the company name you entered (for inquiries) or the role you applied for (for job applications), not your personal details or your message
  • Google Search Console: aggregate statistics on how mantiqi.com appears in Google Search; it contains no information that identifies you
  • WhatsApp (Meta): only if you message us through one of our WhatsApp links; that conversation is then handled under WhatsApp's own privacy policy
  • Google Maps: only if you press "Show map" where our office map appears; the map then loads from Google, which receives your IP address and may set its own cookies

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (HTTPS/TLS), secure data storage, access controls, and regular security reviews.

9. International Data Transfers

Your data is stored and processed outside Saudi Arabia, in the locations listed in section 7. We ensure that appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

10. Contact Us

For any privacy-related inquiries, data access requests, or complaints, please contact us:

  • Email: hello@mantiqi.com
  • WhatsApp (preferred): +966 563 835 901
  • Call or WhatsApp: +966 596 059 001
  • Address: 3rd Floor, Abonami Building, Al Baladyah St, Aziziyah Dist., Jeddah, Saudi Arabia
←Back to Home