Privacy Policy

Daarna collects data not only directly from the user but also from

Direct Input: When a user registers, submits a maintenance request, or casts a vote.

HOA/Property Manager Uploads: The HOA uploads "Owner/Unit Registries" (Bulk Upload) to activate user accounts and link them to specific properties.

Automated Generation: Via platform API interactions and technical system logs.

Community Management: Enabling the HOA to manage the property registry, issue invoices, and collect community fees.

Field Service Coordination: Routing maintenance requests to the HOA's approved vendors and facilitating facility access.

Community Governance: Managing electronic voting in General Assemblies, ensuring the secrecy and transparency of results.

Regulatory Compliance: Retaining financial and administrative records in accordance with the Ministry of Municipal and Rural Affairs and the Zakat, Tax and Customs Authority (ZATCA).

First: Technical Sub-processors (Daarna's Infrastructure):

Data is shared with technical operating partners (e.g., local cloud hosting providers, electronic payment gateways, and SMS notification providers) exclusively to ensure platform stability and security. They are bound by strict Data Processing Agreements (DPAs).

Second: The HOA & Property Manager (Data Controller):

Owner and resident data is made fully available to the Board and Property Manager to enable them to execute their administrative, financial, and legal duties toward the community.

Third: Community Service Providers (Contractors & Vendors):

When a contractor (e.g., a plumber or HVAC technician) is assigned a work order, the platform shares only the strictly necessary data (e.g., Owner Name, Unit Number, Mobile Number, Issue Description) to allow them to access and execute the work.

Fourth: Government & Judicial Authorities:

In response to official, legally binding requests from competent security, judicial, or regulatory authorities in the KSA.

Legal Disclaimer (Protection of Daarna ):

Daarna disclaims any legal liability for any misuse of data, privacy breaches, or administrative decisions made by the "HOA", "Property Manager", or "Service Providers" using the data accessible to them via the platform. Those entities (as Data Controllers or Beneficiaries) bear direct responsibility toward the users in accordance with the PDPL.

Operational Data: Retained as long as the HOA maintains an active subscription with Daarna .

Financial Records & Invoices: Daarna  is legally obligated to retain financial records, invoices, and community fee payment logs for a minimum period of (10 Years) in strict compliance with KSA tax and commercial regulations.

Upon contract termination, a full database export is provided to the Property Manager. Thereafter, copies are securely deleted from Daarna 's servers, excluding statutory financial records and security audit logs.

Right to Access & Know: To know what data is stored and for what purpose.

Right to Rectification: To update inaccurate or incomplete data.

Right to Erasure: To request deletion of data when the purpose of processing has expired.

Right to Withdraw Consent: To withdraw consent at any time (without affecting the lawfulness of prior processing).

Right to Restrict Processing: In cases specified by law.

Automated Decision-Making: The right not to be subject to decisions made solely by automated means that produce significant legal effects.

Request Routing Mechanism: Because "Daarna" is the technical platform, and the HOA/Property Manager controls the community registry, users are requested to direct their data rights requests (such as deletion or correction) directly to the HOA or Property Manager of their community. Daarna commits to providing the technical tools (e.g., Admin Dashboards) for the HOA to execute these requests immediately, and to providing necessary technical support to ensure regulatory compliance.

Right to Lodge a Complaint: Users have the right to lodge a complaint with the Competent Authority (Saudi Data & AI Authority - SDAIA) if their statutory rights are not respected.