Privacy Policy

Last updated: 10 Nov 2026

This policy explains what Khidma collects about you, why, who can see it, and what you can ask us to do with it.

Khidma is a student project for the CPIT-633 E-Commerce course. Payments are simulated: no money is taken and no card is charged.

  1. 1.What we collect

    • Your mobile number, to log you in with a one-time code.
    • Your name and bio, and whether you sell on Khidma.
    • The services you list: title, description, price, delivery time and cover image.
    • Your orders, requirements, deliveries, messages and the files you attach.
    • Your reviews, seller replies and the services you save.
    • How many times each service is viewed per day. We count views, we do not record who viewed.
    • How many times each banner ad is shown and clicked per day. We count them, we do not record who saw or clicked.
    • Your bids. Bid history shows only the amount, the time and a shortened name, such as Ma***n.
    • For test payments, only the card brand and its last four digits, to show them on your invoice.
    • Your language and theme choice.

  2. 2.What we never collect

    • Your full card number, expiry date or security code. They never leave your browser.
    • Your location or your contacts.
    • Advertising or tracking cookies.

  3. 3.Why we use it

    • To log you in and keep you signed in.
    • To run each order between its buyer and seller, and to show invoices and statements.
    • To give sellers statistics such as views, orders, conversion and earnings, without naming the people behind them.
    • To keep Khidma safe, for example by looking into a reported misuse.

  4. 4.Who can see what

    • Your mobile number is never shown to other users.
    • Your name, bio, services, reviews and seller replies are public.
    • An order, its messages and its files are visible only to the buyer and the seller of that order.
    • Your saved services are visible only to you. Sellers see how many times a service was saved, never by whom.

  5. 5.Where it is stored

    Your data is stored with Supabase (login, database and file storage) and the site is served by Vercel. Rules inside the database decide who can read each row, so a page cannot show data to the wrong person. Files in messages are private and open through links that expire after 60 minutes.

  6. 6.How long we keep it

    We keep your data while your account exists. When an account is deleted, its profile, services, orders, messages, reviews and saved services are deleted with it.

  7. 7.Your rights

    Under the Saudi Personal Data Protection Law you may ask to see the data we hold about you, correct it, delete it, or withdraw your consent. You can correct your name and bio at any time from your profile. For anything else, contact the project team.

  8. 8.Cookies

    We use a cookie to keep you signed in and one to remember your language. Your theme choice is kept in your browser. We use no advertising or tracking cookies.

  9. 9.Changes

    If this policy changes, the date at the top changes too. Important changes are shown on the site before they apply.

Read the Terms of Service