Howthissitehandlesyourdata.

This website is operated by ICSS – Intelligence Compass Software Solutions, 7637 Othman Ibn Afaan Branch Rd, Al Ezdihar District, Riyadh 12487, Saudi Arabia. ICSS is the controller of the personal data described here. Questions about this notice go to info@icsstech.io.

The site collects personal data in three situations.

• Contact form: your name, work email and the message you write, plus your company and phone number if you provide them. The form also sends the language it was shown in, the time it was opened — used only to reject automated submissions — and your IP address, which is held in memory for at most ten minutes to limit repeated posts.
• Analytics: only if you accept. Google Analytics 4 then sets its _ga cookies and records the pages you view, your device and browser, and an approximate location derived from your IP address. If you decline, or simply never answer, none of this happens.
• Hosting: our hosting provider keeps request logs that include your IP address and browser user agent, as any web server does.

Nothing else. The site has no accounts, no tracking pixels and no advertising.

• Answering your enquiry: because you asked us to — under the PDPL, processing needed to respond to your request.
• Keeping the site secure and available: our legitimate interest in preventing abuse. The rate limit and the request logs serve only this.
• Understanding how the site is used: your consent. Google Analytics loads only after you accept it, and you can withdraw that at any time from the Cookies link at the foot of any page.

Two providers act on our behalf, under their own data-processing terms: our hosting provider, which hosts the site, delivers your enquiry to our inbox and stores the request logs; and Google, which provides Google Analytics. We do not sell personal data and do not share it with anyone else, except where the law requires.

• Enquiry emails: for as long as needed to handle and follow up on your request, then deleted on a fixed schedule — currently 24 months after the last exchange.
• Rate-limit counters: ten minutes, in memory only.
• Analytics data: for the retention period configured in Google Analytics, after which Google deletes it.
• Request logs: for the retention period our hosting provider is configured with.

The site sets no cookies of its own: your language is part of the address, not stored, and there is no login. One technology needs your permission, and two small things are kept without it.

• Google Analytics, only after you accept. Until then no analytics script, no analytics cookie and no connection to Google Analytics is made at all. Accepting lets it set _ga and _ga_<id>, which last up to two years. Declining loads nothing, and also clears any _ga cookie an earlier visit had left behind.
• Your answer itself, under icss-consent. It records which way you answered and when, so that we do not ask again on every page, and so we can tell six months later that it is time to ask once more.
• One session flag, icss-seen, which does not identify you. It records that you have already seen the opening animation, so the next page waits 450 milliseconds instead of 1500. Your browser discards it when you close the tab.

Neither of the last two is a cookie — both are browser storage, they are never sent to us or to anyone else, and neither is used to recognise you. Your answer is kept for six months, the same six months whether you accepted or declined, so declining is not a question you are asked again on every visit. You can change it whenever you like from the Cookies link at the foot of any page.

The contact page is the one exception, and it is not analytics: it loads Google reCAPTCHA once you start filling the form in, to keep automated submissions out. That does reach Google, and sets a cookie on google.com, before any answer you give here — it is there to stop abuse of the form rather than to measure you, it loads on no other page, and it loads on no visit that never touches the form.

Under the Personal Data Protection Law you can ask us what personal data we hold about you, have it corrected or deleted, object to its processing, and withdraw your consent to analytics at any time from the Cookies link at the foot of any page. Write to info@icsstech.io and we will respond within one business day.

Our providers may store data outside the Kingdom: our hosting provider processes it in the region our hosting and mail are configured in, and Google Analytics processes it on Google's infrastructure worldwide. Where a transfer leaves Saudi Arabia, it happens under the conditions the PDPL sets for transfers abroad.

PerformAI and Workhub are separate applications at performai.icsstech.io and workhub.icsstech.io. Each has its own privacy notice covering the data you put into it; this notice covers only this website.

We update this notice when the site changes what it does with data, and the date at the top changes with it. Questions, requests and complaints go to info@icsstech.io.