Privacy Policy

Last updated: 27 October 2026

This policy explains the data Alileus uses for its public project portfolio, articles, optional newsletter, accounts and referral measurement, how it is used and shared, and how to contact us about it.

Who we are

Alileus is a venture studio. This platform presents its projects, publishes project articles, and offers an optional platform-wide email newsletter. Alileus is responsible for the personal data described here.

You can reach us about privacy at any time at hala@alile.us.

Data we collect

Account and profile data you provide: your email address, name, phone number, sex, date of birth, nationality, and the areas you tell us you are interested in (for example entrepreneurship, investment, or consulting).

Newsletter data: your email address, selected Arabic or English edition, subscription status, consent version, confirmation and unsubscribe timestamps, and the project or article where you signed up when supplied. We also keep confirmation and preference-token hashes and delivery records needed to operate the subscription.

Previously submitted applications, membership records and project proposals remain in the platform's records. They are separate from newsletter subscriptions.

Support requests: your account name and verified email address, selected topic, message title, and message. Requests are linked to your Alileus account, stored for our support team, and answered using your email address.

Usage and device data: basic, privacy-respecting analytics about how the site is used, and standard technical logs (such as IP address, approximate location, browser, and timestamps) needed to run and secure the service.

Referral data: tracked links use random, opaque link and click identifiers. We record the project, article or campaign placement, destination, time, referring origin when supplied, and whether traffic is excluded or simulated. A connected product can send a server callback containing the click identifier, event identifier, event type and time; purchase events may also include an amount and currency. Newsletter email addresses and account profile details are not included in the referral URL.

We do not intentionally collect special-category data, and we ask you not to include it in free-text fields.

How we use it

To operate accounts, sign you in with one-time email codes, respond to support requests, and maintain existing platform records. Reading public articles does not require an account. Newsletter signup verifies your email with a one-time code and creates or signs into your account; profile onboarding is optional.

To send platform-wide project updates only after you explicitly subscribe using your verified account. Existing accounts, applications and memberships are not automatically subscribed. We link newsletter consent to your account and synchronize eligible email contacts and language segments with Resend Broadcasts. Publishing an article does not by itself send an email campaign.

To let you change the newsletter language or opt out in account settings or through our email unsubscribe links. Provider-hosted unsubscribe and topic opt-outs are synchronized with the platform. We retain subscription status and delivery or suppression records to avoid further campaigns after an unsubscribe or delivery complaint.

To distinguish outbound clicks from product-confirmed landings and completed conversions, assess project performance and support future client reporting. Local simulations are labelled separately and excluded from genuine performance totals. A click alone is not proof of a signup, login or purchase.

To run and secure the service, prevent abuse, investigate delivery problems and respond to data requests.

Who we share it with

Authorised platform administrators can access subscriber and delivery records and previously submitted application or membership records. Subscriber email addresses, account details and individual application notes are not published on the public project or article pages.

The platform uses Convex for its database and backend, Vercel for hosting and site analytics, and Resend for production email delivery. These services receive the data needed for those functions, such as a recipient email address and message for email delivery.

When you follow a tracked product link, the destination receives standard UTM tags identifying Alileus, the campaign and an opaque link identifier. These contain no subscriber email or account profile fields. Destination analytics can use these tags in its existing campaign reports. Verified conversion totals require a separate agreed analytics report or optional product callback.

Authorities, advisors, or others where we reasonably believe disclosure is required by law, to enforce our terms, or to protect the rights, safety, or property of anyone.

A successor in the event of a merger, acquisition, financing, or sale of assets, subject to this policy.

We do not sell your personal data.

What is public

Project pages, published articles, their banners and source links are public. Newsletter subscription status, email addresses, private article drafts and administrative reports are not displayed on those public pages.

International transfers

Our service providers may store or process data outside the Kingdom of Saudi Arabia. Where we transfer personal data abroad, we do so in accordance with the PDPL and take steps intended to keep it protected to an equivalent standard.

Retention

We keep your data for as long as your account is active or as needed to provide the service, resolve disputes, and meet legal obligations, after which we delete it or irreversibly anonymise it.

Security

We use reasonable technical and organisational measures to protect your data, including passwordless email sign-in. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights

Subject to the PDPL, you may request access to your personal data, ask us to correct or complete it, ask us to delete it, object to or restrict certain processing, and withdraw consent (for example to marketing) at any time without affecting prior processing.

To exercise a right, contact hala@alile.us. You also have the right to lodge a complaint with the competent Saudi authority (currently the Saudi Data & Artificial Intelligence Authority, SDAIA).

Children

The platform is intended for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has provided us data, contact us and we will delete it.

Changes & contact

We may update this policy from time to time; material changes will be reflected by the date above and, where appropriate, notified to you. Continued use after an update means you accept it.

Questions about this policy: hala@alile.us.