Privacy Policy

Last updated: 16 September 2026

1. What we collect

We collect information in three ways:

• Access requests. When you submit an access or subscription request, we collect your name, company, email address, and the plan or market you're interested in.
• Subscriber accounts. If you're issued login access, we store your email address and an encrypted password (or SSO identifier) through our authentication provider, and a record of your subscription tier.
• Usage data. Standard web server logs (IP address, browser type, pages visited, timestamps) generated automatically by our hosting and database providers.

We do not use advertising trackers or sell visitor data to third parties.

2. How we use it

• To respond to access requests and provision subscriber accounts
• To operate and secure the platform, including distinguishing public-preview visitors from paying subscribers
• To send service communications — daily briefings, billing notices, and platform updates — to subscribers who request them
• To understand aggregate usage patterns and improve the platform

3. Who we share it with

We use a small number of service providers (sub-processors) to run the platform:

• Supabase — database hosting, authentication, and file storage
• Vercel — static site hosting
• Google Fonts — web font delivery (loads directly from Google's servers)

We do not sell personal data. We disclose it only to these operational providers, when required by law, or with your consent.

4. Data retention

Access-request records are retained for as long as needed to evaluate and follow up on the request, or for the duration of an active subscription relationship plus a reasonable period afterward for financial and legal record-keeping. You may request earlier deletion — see Section 6.

5. Where your data is stored

Platform data is stored with our infrastructure providers, which may process data outside Saudi Arabia. Where cross-border transfer applies, we rely on our providers' standard safeguards.

6. Your rights

Depending on your jurisdiction — including under Saudi Arabia's Personal Data Protection Law (PDPL) — you may have the right to access, correct, or request deletion of your personal data, and to object to certain processing. To exercise any of these rights, contact us at advisory@vertexadvisoryglobal.com.

7. Security

We apply row- and column-level access controls to our database so that only fields appropriate to your subscription tier are ever returned, and we restrict administrative data (source configurations, access-request contents) to authorized staff roles only.

8. Changes to this policy

We'll update the "Last updated" date above when this policy changes materially. Continued use of the platform after an update constitutes acceptance of the revised policy.

9. Contact