Legal

Privacy Policy

Last updated: 10 September 2026

1. Introduction

Let's Go Sky ("LetsGoSky," "we," "us," or "our") provides AI-powered business consulting, software development, and related digital products. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data when you visit letsgosky.com, contact us, book a meeting, use our website assistant, or use our services and products.

We handle personal data in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its Implementing Regulation, under the supervision of the Saudi Data and Artificial Intelligence Authority (SDAIA).

2. Data Controller

LetsGoSky is the data controller for personal data collected through our public website, sales inquiries, and our own business operations. When we host or operate a product for a client, we typically act as a processor on that client's instructions, and the client remains the controller of its own data, except where a signed agreement says otherwise.

  • Controller: Let's Go Sky (LetsGoSky)
  • Country of establishment: Kingdom of Saudi Arabia
  • Privacy contact: [email protected]
  • Phone: +966 554 985 983

3. Who This Policy Applies To

This policy applies to:

  • Visitors to our website and solution pages
  • Prospective and existing clients who inquire about or receive consulting services
  • Users of LetsGoSky products and platforms, including Rasida, Onix, SafhaBuilderex, Halleq, Dar Al Fnoon Database, custom AI solutions, and related offerings
  • People who book a meeting, submit a contact form, or use the LetsGoSky website assistant

If you use a LetsGoSky product under a separate client agreement, that agreement may include additional data-processing terms that apply alongside this policy.

4. Information We Collect

Depending on how you interact with us, we may collect:

  • Contact details: name, email address, phone number, company name, job title, and messages you submit through our contact form
  • Meeting information: scheduling details and information you provide when booking a consultation via Calendly
  • Website assistant messages: questions you type into the LetsGoSky chat widget, together with technical data needed to respond and prevent abuse
  • Business and project information: details about your organization, goals, technical environment, and requirements shared during sales discussions or engagements
  • Product usage data: account credentials, configuration settings, logs, support requests, and usage metrics when you use our software products
  • Client data processed on your behalf: when we deliver consulting, hosting, or custom development, we may process data you provide or authorize us to access
  • Technical data: IP address, browser type, device information, pages viewed, and approximate location derived from IP address
  • Communications: records of emails, calls, and other correspondence with our team

We do not intentionally collect sensitive personal data through our public website unless you choose to provide it. Please avoid submitting confidential, health, biometric, or other regulated data through general contact forms or the website assistant unless we have agreed on a secure channel.

5. How We Use Your Information

We use personal data to:

  • Respond to inquiries and provide information about our services and products
  • Schedule, conduct, and follow up on consultations and meetings
  • Operate the website assistant and improve the accuracy of public information we provide about LetsGoSky
  • Deliver AI consulting, implementation, hosting, and software development services
  • Operate, maintain, secure, and improve our website and products
  • Provide customer support and communicate about service updates
  • Send relevant business communications, where permitted by the PDPL and your preferences
  • Comply with legal obligations and enforce our agreements
  • Protect against fraud, abuse, and security incidents

6. Legal Bases under the PDPL

We process personal data only where the PDPL allows it, including:

  • Consent: when you submit a contact form, book a meeting, use the website assistant, or otherwise agree to a stated purpose
  • Performance of a contract: to take steps at your request before a contract, or to perform a client or product agreement
  • Actual interest: where processing is necessary for a legitimate and specific interest of LetsGoSky, such as securing our systems, provided it does not prejudice your rights or conflict with your interests
  • Legal obligation: where Saudi law or a competent authority requires us to retain or disclose data

You may withdraw consent at any time by emailing [email protected]. Withdrawal does not affect processing that was lawful before the withdrawal, or processing that we must continue under another PDPL basis.

7. Product Hosting in Dammam with CNTXT and Google Cloud

LetsGoSky hosts its products and related client-data application infrastructure in the Kingdom of Saudi Arabia through CNTXT, Google Cloud’s exclusive reseller for Saudi-based customers, on Google Cloud in the Dammam region (region code me-central2).

This includes, as applicable:

  • Product applications and databases, including Rasida, Onix, SafhaBuilderex, Halleq, Dar Al Fnoon Database, custom AI solutions, and related offerings
  • Application compute, storage, and associated operational systems we run for those products

We choose this hosting so personal data we control or process for clients remains in the Kingdom, consistent with PDPL data-localization expectations, except where you interact with a named website tool described in section 9.

Our public marketing website and its visitor tools are separate from the product-hosting environment. Visiting the website, submitting its contact form, booking a meeting, using analytics, or using the website assistant may involve the external website services and international processing described in sections 9 and 13.

8. AI, Automation, and Client Data

LetsGoSky builds and deploys AI-powered solutions. When we work with your data in consulting or product engagements:

  • We process client data only as needed to deliver agreed services or product functionality
  • Our products are designed and operated with architecture, access controls, retention options, and processing workflows that support PDPL compliance according to the agreed project scope; each client remains responsible for its instructions, configuration, use, and obligations as data controller
  • We do not use your confidential business data to train public AI models unless you explicitly authorize us to do so in writing
  • AI-generated outputs may require human review before use in business decisions; accuracy and suitability depend on input data and context
  • Specific data retention, access controls, and subprocessors for a project are defined in the relevant statement of work, order, or data processing agreement

9. Service Providers

We use the following categories of providers to operate our business:

  • CNTXT and Google Cloud — host our products and related infrastructure in Dammam (me-central2)
  • Formspree — receives public contact-form submissions so we can reply to you
  • Calendly — manages meeting scheduling when you choose to book a call
  • Google Analytics — measures website traffic and page use
  • Google Fonts — delivers website typography
  • Firebase and Google Cloud website services — deliver the public website and process website-assistant requests; these website services are separate from our Dammam product environment and may process limited visitor data outside the Kingdom
  • Email and communication tools — support correspondence with clients and prospects

These providers process data on our behalf or under their own policies when you interact with their services directly. We encourage you to review their privacy notices. Formspree, Calendly, Google Analytics, and Google Fonts are website tools. Product and client-system hosting remains with CNTXT on Google Cloud in Dammam, as described in section 7.

10. Cookies and Similar Technologies

Our website uses cookies and similar technologies. Essential cookies support basic functionality and security. Google Analytics and embedded tools such as Calendly may set additional cookies to measure use or operate their widgets.

Across our website, Google Analytics is disabled unless you select “Allow” in the bottom privacy banner. Selecting “Only essentials” keeps analytics disabled. You can revisit your choice using the “Privacy choices” link in the page footer and can also control cookies through your browser settings. Disabling certain cookies may affect analytics or meeting booking.

11. Data Retention

We keep personal data only as long as needed for the purposes in this policy, or longer if the PDPL, another Saudi law, or a contract requires it:

  • Website inquiries: typically up to 24 months after the last contact, unless a contract discussion continues
  • Meeting and assistant records: as needed to follow up and prevent abuse, then deleted or anonymized
  • Client and product data: for the term of the agreement and any retention period stated in that agreement, after which data is returned or securely deleted
  • Security and technical logs: for a limited operational period needed to detect and investigate incidents

12. Security

We implement administrative, technical, and organizational measures designed to protect personal data against unauthorized access, loss, misuse, or alteration. These include access controls, encryption in transit where appropriate, and hosting on Google Cloud in Dammam through CNTXT. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a personal-data breach occurs that must be notified under the PDPL, we will notify SDAIA and affected individuals as required by law.

13. Transfers Outside the Kingdom

Product data and related application infrastructure that LetsGoSky hosts are stored in the Kingdom of Saudi Arabia, in Google Cloud’s Dammam region (me-central2), contracted through CNTXT.

If you use website tools such as the contact form, Calendly booking, Google Analytics, Google Fonts, or the website assistant, those providers may process limited visitor data outside the Kingdom under their own terms and our applicable service arrangements. This can include contact details, scheduling information, IP addresses, device data, and messages submitted to the assistant. The public website and its assistant are not part of the Dammam product-hosting environment.

We do not transfer product or client hosting data outside the Kingdom except where the PDPL permits it, you have been informed, and any required transfer conditions and safeguards are met. Product data residency remains subject to the applicable client agreement, selected product features, and project configuration.

14. Your Rights under the PDPL

Subject to the PDPL and its Implementing Regulation, you have the right to:

  • Be informed about the collection and processing of your personal data
  • Request access to personal data we hold about you
  • Request correction of inaccurate or incomplete data
  • Request destruction of personal data when the PDPL allows it
  • Request restriction of processing in the circumstances set out in the PDPL
  • Withdraw consent where processing is based on consent
  • Lodge a complaint with SDAIA, the competent authority under the PDPL

To exercise these rights, email [email protected]. We may need to verify your identity before responding. We aim to respond within the period required by the PDPL, generally 30 days, unless a lawful extension applies.

SDAIA complaints may be submitted through the channels published by the Saudi Data and Artificial Intelligence Authority.

15. Children's Privacy

Our website and business services are not directed to individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

16. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was most recently revised. Material changes will be posted on this page. Continued use of our website or services after changes become effective constitutes acknowledgment of the updated policy, subject to the PDPL.

17. Contact Us

If you have questions about this Privacy Policy, want to exercise PDPL rights, or need to report a data issue, contact us at: