Privacy Policy
سياسة الخصوصية

1. Who We Are

Bluxy is an accounting and electronic invoicing software company operating in the Kingdom of Saudi Arabia. Our platform is fully approved by the Zakat, Tax and Customs Authority (ZATCA) for Phase 1 and Phase 2 e-invoicing compliance. We are committed to protecting the privacy and security of all users and their business data.

For any privacy-related questions, contact us at: info@bluxy.co

2. Information We Collect

We collect the following types of information:

• Account Information: Name, company name, email address, phone number, and VAT registration number when you register or contact us.
• Business Data: Invoice data, customer records, vendor records, and financial transactions that you enter into the Bluxy system.
• Usage Data: Log files, IP addresses, browser type, device information, pages visited, and timestamps when you interact with our platform.
• Communication Data: Messages, emails, and support requests you send to us.
• Payment Information: Billing details processed through secure third-party payment gateways. We do not store full card numbers.

3. How We Use Your Information

We use collected information to:

• Provide, operate, and maintain the Bluxy software and services.
• Process and fulfill your subscription and billing requests.
• Send you service notifications, updates, and support responses.
• Comply with ZATCA e-invoicing regulations and Saudi legal requirements.
• Improve our platform through analytics and user feedback.
• Send promotional communications (only with your consent — you may unsubscribe at any time).
• Detect, prevent, and address technical issues and fraudulent activity.

4. ZATCA Compliance & Data Sharing

As a ZATCA-approved e-invoicing solution, Bluxy is legally required to transmit certain invoice data to the ZATCA FATOORA platform in real time or near-real time as required by Saudi regulations. This includes tax invoice XML files, QR codes, and related compliance data. This data sharing is a legal obligation under Saudi Arabia's e-invoicing regulations.

We do not sell your personal or business data to any third party for marketing purposes.

5. Data Storage & Security

Your data is stored on secure cloud servers with the following protections:

• AES-256 encryption for data at rest.
• TLS/SSL encryption for all data in transit.
• Regular automated backups with secure off-site storage.
• Access controls and role-based permissions limiting who can view your data.
• Regular security audits and vulnerability assessments.

While we implement industry-leading security measures, no system can guarantee 100% security. We encourage you to use strong passwords and keep your login credentials confidential.

6. Data Retention

We retain your data for as long as your account is active and for a minimum of 6 years after account closure, as required by Saudi tax and accounting regulations. Invoice data subject to ZATCA requirements is retained for the period mandated by ZATCA regulations.

7. Your Rights

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data, subject to legal retention obligations.
• Portability: Request your data in a portable, machine-readable format.
• Objection: Object to certain types of data processing, including marketing communications.

To exercise any of these rights, please contact us at info@bluxy.co.

8. Cookies

Our website uses cookies and similar technologies to:

• Keep you logged in and maintain your session.
• Remember your language preference.
• Analyze website traffic and usage patterns (analytics cookies).

You can control or disable cookies through your browser settings. Disabling essential cookies may affect your ability to use our platform.

9. Third-Party Services

We may use trusted third-party service providers including:

• Cloud hosting and infrastructure providers.
• Payment processing gateways (PCI-DSS compliant).
• Email delivery services for transactional emails.
• Analytics tools to improve our services.

All third-party providers are contractually bound to protect your data and may not use it for their own purposes.

10. Children's Privacy

Bluxy is a business software platform and is not directed at individuals under the age of 18. We do not knowingly collect personal information from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of significant changes by email. The latest version will always be available at bluxy.co/privacy.html. Continued use of our services after changes constitutes acceptance of the updated policy.

12. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Email: info@bluxy.co
• WhatsApp: +966 547 445 366
• Website: bluxy.co