Privacy Policy

Metch Information Technology ("METCH", "we") provides Odoo ERP implementation, business websites, domain registration and managed cloud hosting. This policy covers our websites metch.sa, metch.org and metch.pro and the customer services behind them. It is effective as of 2026-08-19.

We collect only what we need to respond to you and deliver the services:

• Contact details you submit — name, email, phone number, company name and the description of what you need (contact form, AI chat, pricing calculator, project questionnaires).
• Account data — your email or phone used for sign-in with one-time verification codes (we never store passwords for customer accounts), plus profile and business details you add.
• Billing details needed for tax-compliant invoicing in your market (e.g. VAT/tax numbers and registered address).
• Service data — domains you register, hosting you order, documents you upload for regulated registrations (e.g. commercial registration for .sa domains).
• Usage data — analytics and advertising cookies (see “Analytics & advertising” below) and technical logs used for security, such as rate-limiting counters derived from IP addresses.

Payments are processed by Tap Payments on their secure hosted page. Your card details never reach our servers.

• To respond to your request — your inquiry is stored in our systems, recorded in our CRM (Odoo) and our team is alerted by email so we can reach you quickly.
• To deliver and bill the services you order, including sending verification codes, receipts and service notifications by email (and by WhatsApp where you have provided a number on our Saudi site).
• To send occasional service updates or offers — every marketing email includes a working unsubscribe link.
• To keep the platform safe — abuse prevention, rate limiting and fraud checks.

Our AI chat assistant processes the messages you type using OpenAI's API to generate replies. Do not share sensitive personal information in the chat.

We never sell your data. We share it only with the processors that run our services:

• Odoo (CRM & invoicing), Twilio SendGrid (email), Twilio (WhatsApp messages), Tap Payments (payments), name.com (domain registration — registrant details are required by registries), our hosting infrastructure (Vercel, MongoDB Atlas, Google Cloud) and OpenAI (AI chat).
• Authorities where the law requires it — for example tax-compliant e-invoicing data in the markets we serve.

We use Google Analytics 4 to understand how the site is used, and — where enabled — advertising pixels (Meta, TikTok, Snap, Google Ads) to measure our campaigns. These set cookies and receive standard event data (pages viewed, form submitted). We also set a small number of functional cookies: your sign-in session, a promo-code cookie, and a preference cookie if you choose to stay on a specific regional site.

You can limit ad tracking through your browser settings or the ad platforms' own opt-out tools.

We keep account and billing records for as long as your account is active and as required by tax and commercial law. Lead inquiries are kept while relevant to a potential engagement. Verification codes expire within minutes; security counters expire automatically within a day. Data is encrypted in transit, access is restricted to our team, and payment card data is never stored by us.

You may request a copy of your data, ask us to correct it, or ask us to delete it (subject to records we must keep by law). You can unsubscribe from marketing at any time via the link in any marketing email. Where local data-protection law applies — such as the Saudi Personal Data Protection Law (PDPL) — you have the rights it grants. To exercise any right, contact us below; we respond within 30 days.