Privacy policy

Who we are

Clix is an e-invoicing service operated by AZMX in Saudi Arabia. This policy covers the Clix website (goclix.ai), the web app (app.goclix.ai) and the Clix apps for Android and iOS. Questions about your data: [email protected].

What we collect

• Account: your name, email address and phone number. Sign-in is handled by Oracle Cloud Identity, or by Google if you choose Sign in with Google.
• Business: organisation name, VAT and commercial registration numbers, address, logo, branches and the devices you register with ZATCA.
• Invoicing data you enter: clients, vendors, items, invoices, credit and debit notes, attachments and bank statements you import.
• Payments: subscription payments are processed by Moyasar, our payment provider.
• Technical data: server logs, performance monitoring in the web app, and crash reports from the mobile apps.
• Website forms: the details you send us through the contact form.

How we use it

• To provide Clix: create, sign and store your invoices and report or clear them with ZATCA.
• To bill your subscription and to answer support requests.
• To keep the service secure and reliable, and to prevent fraud.

We do not sell your data and we do not use it for advertising.

Where your data is stored

Clix runs on Oracle Cloud Infrastructure in the Jeddah region, Saudi Arabia. Crash reports and Sign in with Google are processed by those providers and may be handled outside the Kingdom.

Who we share it with

• ZATCA: Clix submits your e-invoices directly to ZATCA, as the law requires.
• Service providers: Oracle Cloud (hosting, sign-in and email), Google (only if you sign in with Google), Moyasar (payments) and Sentry (crash reports). They process data only to provide their service to us.
• Authorities: when Saudi law requires it.

How long we keep it

• Tax records: issued tax invoices, credit and debit notes and documents reported to ZATCA are kept for at least six years from the end of the financial year they relate to, as Saudi VAT rules require.
• Account and business data: until you ask us to delete your account.
• Backups: up to 90 days, after which deleted data is gone from them too.
• Logs and crash reports: for a limited period, up to 90 days.

How we protect it

• Clix never stores your password. Oracle Cloud Identity or Google handles it.
• Data travels over encrypted connections (HTTPS).
• Access inside your organisation follows the roles your Admin assigns. API keys are stored only as a hash.

Mobile apps (Android and iOS)

• Camera and photos: used only when you choose to attach an image or set a logo or profile photo.
• Files: only the documents you pick to attach.
• Sign-in: your session is kept in the device’s secure storage.
• Crash reports: sent to Sentry with sign-in tokens removed, so we can fix problems.
• No tracking: the apps contain no advertising and do not track you across other apps or websites.
• Deleting your account: open Profile → Account → Delete account, or use the account deletion page.

Your rights

You can ask to access, correct or delete your personal data, or for a copy of it. Email [email protected]. We reply within 30 days; if we need longer, we tell you why, up to 30 more days. To delete your account, see Delete your Clix account.

Changes to this policy

When we change this policy we update the date at the top of this page.