This Privacy Policy was last updated on May 1, 2026. Please review it periodically
for any changes.
Welcome to NOQTA (نقطة), a cloud-based Point of Sale (POS) platform developed and
operated by iFact.sa in the Kingdom of Saudi Arabia. We provide comprehensive POS
solutions for restaurants and retail businesses.
This Privacy Policy describes how we collect, use, disclose, and protect information obtained from
businesses and individuals ("you" or "users") who access or use our platform, website, and related
services.
By using NOQTA, you agree to the collection and use of information in accordance with this
policy. If you do not agree with any part of this policy, please discontinue use of our
services.
We collect information to provide, maintain, and improve our services. The types of data we may collect
include:
Business & Account Information
- Business name, commercial registration number, and VAT/Tax ID
- Owner or authorized representative name, email address, and phone number
- Business address and branch locations
- Subscription plan and billing information
Operational Data
- Sales transactions, order details, and billing records
- Product and inventory information entered into the system
- Employee accounts, roles, and activity logs
- Customer records stored in your CRM (loyalty members, contact info)
Technical & Usage Data
- IP address, browser type, and device information
- Log data and usage patterns within the platform
- Session information and feature interaction data
Demo & Contact Requests
- Name, email, phone number, and comments submitted via our contact/demo form
We use the information we collect for the following purposes:
| Purpose |
Description |
| Service Delivery |
To operate and provide POS features including billing, inventory management, and reporting. |
| Account Management |
To create and manage your subscription, user accounts, and platform access. |
| E-Invoicing Compliance |
To generate ZATCA-compliant invoices (Phase 1 & Phase 2) as required by Saudi law. |
| Support & Communication |
To respond to your inquiries, provide technical support, and send service updates. |
| Analytics & Improvement |
To understand how users interact with our platform and improve features and performance. |
| Marketing (optional) |
To send relevant product updates or offers. You may opt out at any time. |
| Legal Obligations |
To comply with applicable Saudi laws, regulations, and government directives. |
We do not sell, trade, or rent your personal information to third parties. We may share your data only in
the following limited circumstances:
- Service Providers: Trusted third-party vendors who assist us in delivering our
services (e.g., cloud hosting, payment processing, SMS notifications), under strict confidentiality
agreements.
- ZATCA & Government Authorities: Sharing of e-invoicing data with the Zakat, Tax and
Customs Authority (ZATCA) as mandated by Saudi Arabian law for Phase 1 and Phase 2 e-invoicing
compliance.
- Legal Requirements: When required by law, court order, or governmental regulation, or
to protect the rights, safety, or property of NOQTA, our users, or the public.
- Business Transfers: In the event of a merger, acquisition, or asset sale, your
information may be transferred, with prior notice provided to you.
Important: Customer data entered into your NOQTA account (such as loyalty member records)
is your business data. We access it only as needed to provide services and do not share it with third
parties for their marketing purposes.
Your data is stored on secure cloud servers. We implement industry-standard technical and organizational
measures to protect your information, including:
- SSL/TLS encryption for all data in transit
- Encrypted storage for sensitive data at rest
- Role-based access controls limiting data access to authorized personnel only
- Regular security audits and vulnerability assessments
- Automated backups to prevent data loss
While we implement robust security measures, no method of transmission over the internet is 100%
secure. We encourage you to use strong passwords and protect your account credentials.
Data may be stored on servers located within the Kingdom of Saudi Arabia or in international data centers
compliant with applicable data protection standards.
Our website and platform use cookies and similar technologies to enhance your experience. Types of
cookies we use include:
- Essential Cookies: Required for the platform to function properly (e.g., session
management, authentication). These cannot be disabled.
- Analytical Cookies: Help us understand how users interact with our website to improve
performance and usability.
- Preference Cookies: Remember your settings and preferences (e.g., language selection
between English and Arabic).
You can control or disable non-essential cookies through your browser settings. Note that disabling
certain cookies may affect the functionality of our platform.
NOQTA is fully compliant with the Kingdom of Saudi Arabia's e-invoicing regulations mandated by the
Zakat, Tax and Customs Authority (ZATCA):
- Phase 1 (Generation Phase): All invoices are generated and stored in a structured
electronic format with required fields including VAT number, QR code, and business details.
- Phase 2 (Integration Phase): Our system integrates with ZATCA's platform (Fatoora)
for real-time invoice reporting and clearance for applicable transactions.
Invoice data shared with ZATCA is done so strictly in accordance with Saudi law. We do not share
this data with any other party. Your VAT and business records are used solely for compliance
purposes.
You have the following rights regarding your personal data:
- Right of Access: Request a copy of the personal data we hold about you or your
business.
- Right to Rectification: Request correction of inaccurate or incomplete data.
- Right to Erasure: Request deletion of your data, subject to legal retention
obligations.
- Right to Restriction: Request that we limit how we process your data in certain
circumstances.
- Right to Data Portability: Request your data in a structured, commonly used,
machine-readable format.
- Right to Object: Object to certain types of processing, including direct marketing
communications.
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it
at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, please contact us using the details in Section 12. We will respond to
your request within 30 days.
We retain your information for as long as necessary to provide our services and comply with our legal
obligations:
- Active Accounts: Data is retained for the full duration of your subscription and
service relationship with NOQTA.
- Transaction & Invoice Records: Retained for a minimum of 5 years as
required by Saudi tax and accounting regulations.
- Contact & Demo Requests: Retained for up to 2 years for follow-up and service
improvement purposes.
- After Account Termination: Personal data is deleted or anonymized within 90 days of
account termination, unless legal obligations require longer retention.
Our website may contain links to third-party websites, demo environments, or integrated services (such as
payment gateways and delivery platforms). This Privacy Policy applies only to NOQTA's own platform and
website.
We are not responsible for the privacy practices or content of any third-party websites or services. We
encourage you to review the privacy policies of any third-party services you access through our platform.
NOQTA is a business-to-business (B2B) platform intended for use by businesses and their authorized
staff. Our services are not directed at or intended for individuals under the age of 18.
We do not knowingly collect personal data from children. If you believe a minor has submitted information
through our platform, please contact us immediately and we will take steps to remove such information.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology,
legal requirements, or for other operational reasons. When we make changes:
- We will update the "Last Updated" date at the top of this page.
- For significant changes, we will notify active account holders via email or a prominent notice on our
platform.
- Continued use of NOQTA after the effective date of any changes constitutes your acceptance of the
updated policy.
We encourage you to review this page periodically to stay informed about how we protect your information.
