DConnect Elevator

When your organization registers you on the DConnect platform, we collect:

• Full name, email address, and phone number (provided by your organization)
• Login credentials (username and hashed password)
• Organization and role assignment

When you use the App, we automatically collect:

• Login timestamps and session information
• Actions performed within the App (e.g., viewing elevator status, submitting service requests)
• Device type and operating system version

The App processes operational data related to elevator management:

• Elevator status, maintenance records, and service requests
• Technician assignments and visit logs
• Notifications and alerts related to elevator operations

The App does not collect: precise GPS location, contacts, photos, camera access, microphone data, or any data from other apps on your device.

We use collected data solely for:

• Service delivery: Authenticating users, displaying elevator information, and processing service requests
• Operational notifications: Sending alerts about elevator status, maintenance schedules, and critical events
• Platform security: Detecting unauthorized access and maintaining audit logs
• Service improvement: Analyzing usage patterns to improve App functionality

We do not use your data for advertising, marketing, or profiling purposes.

We process personal data based on:

• Performance of the service agreement between DASH Control and your organization
• Compliance with legal and regulatory obligations under Saudi law
• Legitimate interests in maintaining platform security and operational integrity

We do not sell or rent your personal data. We may share data with:

• Your organization: Administrators within your organization can view your activity related to elevator management
• Service providers: Professional sub-processors for infrastructure hosting and notification delivery, contractually bound to PDPL requirements
• Legal obligations: When required by applicable law or court order

We implement industry-standard security measures including:

• Encryption of data at rest and in transit (TLS/SSL)
• Access controls restricted to authorized personnel
• Regular security assessments and audit logging
• Secure authentication with session management

Personal data is retained for the duration of the service agreement between DASH Control and your organization, plus any additional period required by law. Upon termination, personal data will be securely deleted or anonymized within 90 days, unless retention is required by law.

Where personal data is transferred outside the Kingdom of Saudi Arabia for technical processing purposes, such transfers are managed in accordance with PDPL requirements, including ensuring adequate protection levels at the destination.

Subject to applicable law, you have the right to:

• Access your personal data held by us
• Request correction of inaccurate data
• Request deletion of your personal data
• Object to or restrict certain processing activities

To exercise these rights, contact your organization administrator, who will coordinate with DASH Control.

The App is intended for professional use by authorized personnel of client organizations. We do not knowingly collect personal data from children under the age of 18. If we become aware that we have collected personal data from a child, we will take steps to delete it promptly.

We may update this Privacy Policy from time to time. Material changes will be communicated through the App or via your organization. Continued use of the App after such changes constitutes acceptance of the updated policy.

For privacy-related inquiries, please contact:

• Email: privacy@dashcontrol.sa
• Company: DASH Control Company
• Location: Riyadh, Kingdom of Saudi Arabia