Privacy Policy
Last updated: [5 August 2025]
1. Who We Are
Colab Research Labs — a product of AZM X Product (“Colab,” “we,” “our,” “us”) — operates a user-experience research platform and physical laboratory.
Registered address: Tuwaiq Gate, King Fahd Rd, Ar Rahmaniyyah, Riyadh 12343, Kingdom of Saudi Arabia
Contact: go@letscolab.space | +966 50 583 2581
2. Scope
This Policy explains how we collect, use, share, and safeguard Personal Data when you:
- Create a client or participant account on app.letscolab.space
- Attend a study at our lab or remotely
- Visit any Colab marketing site or contact us by email or phone
3. Personal Data We Process
| Category | Examples | Purpose | Lawful Basis* |
|---|---|---|---|
| Account Data | name, corporate e-mail, job title | workspace creation, invoicing | Contract |
| Recruitment Data | age, gender, device list | screen & schedule participants | Consent |
| Session Recordings | eye-tracking video, biometrics, screen, audio | generate research insights | Explicit Consent |
| Usage Analytics | IP, browser type, click path | service optimisation, security | Legitimate Interest |
| Payment Records | VAT number, PO, billing contact | statutory bookkeeping | Legal Obligation |
* Bases derived from Saudi PDPL Art. 6 and EU GDPR Art. 6.
4. How We Use Personal Data
- Recruitment & Scheduling — matching participants to studies
- Research & Reporting — analysing behaviour and issuing study reports
- Platform Operation — authentication, credit management, notification delivery
- Legal Compliance — PDPL, VAT, bookkeeping, fraud prevention
- Marketing (B2B only) — product updates if you are an existing client and have not opted out
5. Retention Periods
| Data Type | Retention |
|---|---|
| Session recordings, transcripts | 5 years, then permanently deleted or anonymised |
| Billing & invoice records | 5 years (Saudi ZATCA) |
| Platform logs | 12 months, rolling |
6. Third-Party Processors
| Processor | Service | Location & Safeguards |
|---|---|---|
| Google Workspace | E-mail, documents | EU data centres; SCCs & PDPL clauses |
| Google Analytics / Tag Manager | Usage analytics | EU data centres; IP-anonymisation enabled |
| Google Ads | Advertising | EU data centres; hashed identifiers |
| Cloudways (AWS Frankfurt) | Application hosting | ISO 27001, AES-256 at rest |
7. International Transfers
Primary hosting is in Frankfurt, Germany. Data will move to other jurisdictions only if:
- The Saudi Data & AI Authority designates the destination as having adequate protection, or
- Standard Contractual Clauses and additional PDPL-compliant safeguards (encryption, access controls, DPIA) are in place.
8. Security Measures
- TLS 1.2+ encryption in transit; AES-256 encryption at rest
- Role-based access with multi-factor authentication
- Annual penetration testing and quarterly vulnerability scans
- Incident-response procedures aligned with ISO 27001
9. Your Rights (PDPL & GDPR)
You may:
- Access a copy of your data
- Correct inaccurate data
- Erase data where no legal ground to retain exists
- Restrict or object to processing in certain cases
- Port data to another controller
- Withdraw consent at any time (does not affect previous processing)
Send requests to go@letscolab.space. We respond within 30 days.
You may complain to the Saudi Data & AI Authority (SDAIA) or your local supervisory authority.
10. Cookies & Similar Tech
| Type | Purpose | Example Duration |
|---|---|---|
| Strictly Necessary | Login, session routing, credit balance | until the browser closes |
| Analytics | Aggregate usage metrics | 1 year |
| Marketing | Ad performance (Google Ads) | 90 days |
On the first visit, you’ll see a banner with “Accept All / Manage Preferences”. Analytics and marketing cookies load only after opt-in.
11. Children
Our services are not directed to persons under 18. We do not knowingly process children’s data without parental consent.
12. Changes to This Policy
We will post material updates on this page and, where significant, notify you via email or in-app banner. The “Last updated” date will change accordingly.
13. Contact
Questions? Email go@letscolab.space or write to:
Colab Research Labs, Tuwaiq Gate, King Fahd Rd, Ar Rahmaniyyah, Riyadh 12343, KSA
