Privacy policy
Last updated 6 November 2026
Sulam publishes research on Saudi listed companies. This policy explains what personal data we collect, why, who processes it for us, and your rights. We collect as little as we can.
What we collect
Your email address, when you subscribe or sign in, with your subscription status, plan and preferred language (English or Arabic), and when you subscribed or unsubscribed.
Sign-in records: when you last signed in. We never ask for a password; you sign in with a one-time code or link sent to your email.
Email activity: our newsletter provider records whether newsletters are delivered, opened or clicked, and unsubscribes and bounces.
Technical data: our hosting provider keeps standard server logs (such as IP address, browser and pages requested) for security and to keep the site running. We use your IP address briefly to limit abuse, such as too many sign-in attempts.
If paid plans are offered: payments are handled by our payment provider. We receive your plan and payment status, never your full card number.
Why we use it
To send you the newsletters you asked for, to let you sign in and read what your plan includes, to keep the site secure, and to meet legal obligations. We rely on your consent for newsletters (you confirm your subscription by email) and on providing the service you requested for sign-in and paid access.
We do not sell your data, rent our list, or use it for advertising.
Cookies and similar storage
We use only what the site needs: a sign-in cookie that keeps you signed in, and a small setting in your browser that remembers light or dark mode. No advertising or tracking cookies.
Who processes your data for us
Supabase (database and sign-in), Vercel (website hosting), Mailchimp (subscriber list and newsletters), Resend (sign-in emails) and Microsoft 365 (our email inbox). If paid plans are offered, Stripe (payments).
These providers store data on servers outside Saudi Arabia, including in the European Union and the United States. We use providers that protect personal data under contract and industry security standards.
How long we keep it
While you are subscribed or have an account. When you unsubscribe we keep your email on a suppression list so we do not email you again by mistake. Server logs are kept for a short period by our hosting provider. Payment records are kept as long as the law requires.
Your rights
You can ask to see the data we hold about you, to correct it, to have it deleted, or to withdraw your consent at any time. Every newsletter has an unsubscribe link. For anything else, email hello@sulam.cc and we will reply within 30 days.
If you are in Saudi Arabia, you also have rights under the Personal Data Protection Law and may complain to the Saudi Data and AI Authority (SDAIA).
Security
Data is encrypted in transit, access is limited to what each service needs, and sign-in uses one-time codes instead of passwords.
Children
Sulam is written for adults and is not directed at anyone under 18.
Changes and contact
If we change this policy we will update this page, and email subscribers about significant changes. Questions: hello@sulam.cc.