Privacy Policy

How Rai collects, uses and protects your personal data — written in plain language, for drivers in Saudi Arabia.

Last updated15 September 2026Effective15 September 2026Applies torai.com.sa and the Rai app

01Introduction

Rai is a Saudi automotive review platform operated by Rai (“we”, “us”). This policy explains what personal data we collect when you use rai.com.sa or the Rai app, why we collect it, and the choices you have. It is written to align with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

By creating an account or submitting a review, you agree to the handling of your data described here. If you do not agree, please do not use the service.

02Data we collect

We collect only what we need to run a verified review platform:

  • Account data — your name, mobile number, email address, city and, optionally, a profile photo.
  • Verification data — the one-time codes we send you and any ownership proof you upload, such as a registration document.
  • Review content — scores, written reviews, pros and cons, photos, and the car and experience type each review relates to.
  • Garage data — the cars you add, their trim, model year and odometer readings.
  • Usage data — pages viewed, searches, and which reviews you found helpful.
  • Technical data — IP address, device type, browser and approximate location derived from your IP.

03How we use your data

We use your data to operate and improve Rai: to verify that reviews come from real people; to publish your reviews and compute brand, model and trim scores; to personalise what you see; to detect fraud, spam and manipulation; to respond to support requests; and to produce aggregated market insight for our business customers.

Aggregated insight is never personal

Reports we provide to dealers, OEMs and partners contain aggregated, de-identified statistics only. They never include your name, mobile number, email or any detail that could identify you individually.

04Your phone number

Your mobile number is used for one purpose: confirming that you are a real person, once, when you create an account or submit your first review. We do not display it publicly, we do not sell it, and we do not use it for marketing unless you separately opt in.

05What is public and what stays private

Everything you publish is attributed to your display name and the badges you have earned. Everything used to verify you stays private.

  • Public — your display name, profile photo, badges, review text and scores, the car and experience type, your city, and the date of the review.
  • Private — your mobile number, email address, ownership proofs and documents, draft reviews, saved items, and your exact location.

06Sharing your data

We share personal data only with service providers who process it on our behalf under contract — hosting, SMS delivery, analytics and customer support — and with authorities where we are legally required to do so. We do not sell your personal data.

07How long we keep it

Account data is retained while your account is active and for 12 months afterwards. Draft reviews are kept for 90 days from the last edit. Verification records are kept for 24 months to protect against repeat fraud. Published reviews may remain visible after account deletion in anonymised form, so that scores stay accurate.

08Your rights

Under the PDPL you have the right to be informed, to access your data, to request correction, to request destruction, and to withdraw consent. You can exercise most of these directly in Settings → Privacy, or by contacting us. We respond within 30 days.

Deleting your account

You can delete your account at any time from Settings. Your profile, drafts, garage and saved items are removed. Published reviews are anonymised rather than deleted, so other drivers do not lose information they relied on.

09Security

Data is encrypted in transit and at rest. Ownership proofs are held in restricted storage accessible only to the verification team, and access is logged and reviewed. No system is perfectly secure, and we will notify you and the competent authority of any breach affecting your data as required by law.

10Children

Rai is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

11Transfers outside the Kingdom

Personal data is primarily stored in the Kingdom of Saudi Arabia. Where a service provider processes data abroad, we do so only on the legal bases permitted by the PDPL and under contractual safeguards.

12Changes to this policy

We may update this policy as the service evolves. Material changes are announced on this page and, where the change affects how we use your data, notified to you by email or in the app before they take effect.

13Contact us

For any question about this policy or your data, contact our Data Protection Officer at privacy@rai.com.sa, or write to us via the Contact Us page. If you are not satisfied with our response, you may lodge a complaint with the Saudi Data & AI Authority (SDAIA).