Introduction
This Privacy Policy applies to the Werash platform and mobile apps for car owners and workshops. It describes how we handle personal data in line with the Saudi Personal Data Protection Law (PDPL) and its regulations. By using Werash, you acknowledge the practices described here.
Information we collect
You provide to us
- Account details — name, phone number, email, and password.
- Vehicle information — make, model, year, and service history you share.
- Workshop details — for providers, business name, licences, and technician records.
- Communications — messages, ratings, and support requests.
Collected automatically
- Device and app usage data, including app version and diagnostics.
- Location data, when you enable it, to show nearby workshops and enable pickup.
How we use it
- To create and manage your account and provide the service.
- To match car owners with workshops and process bookings and estimates.
- To process payments, hold funds in escrow, and administer warranties.
- To send notifications about your jobs and important service updates.
- To keep the platform safe, prevent fraud, and meet legal obligations.
Legal basis
We process personal data where it is necessary to perform our contract with you, to comply with a legal obligation, to protect legitimate interests such as platform safety, or on the basis of your consent — for example, for location access or marketing messages, which you can withdraw at any time.
Payments & financial data
Payments are handled in-app by licensed payment providers. Full card details are processed by those providers and are not stored on Werash’s servers. We retain transaction records needed to manage escrow, payouts, refunds, and our legal and tax obligations.
Location data
With your permission, we use location to show workshops near you, enable car pickup and drop-off, and provide live job tracking. You can turn location access on or off at any time in your device settings; some features may not work without it.
Data retention
We keep personal data only for as long as needed to provide the service and to meet legal, accounting, and warranty requirements. When data is no longer required, we delete or anonymise it securely.
Security
We apply technical and organisational measures — including encryption in transit, access controls, and monitoring — to protect personal data against unauthorised access, loss, or misuse. No system is completely secure, but we work continuously to safeguard your information.
Your rights
Under the Saudi PDPL, you have the right to:
- Be informed about how your data is collected and used.
- Access a copy of your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of your data, where the law allows.
- Withdraw consent you previously gave.
To exercise any of these rights, contact us using the details below.
Children
Werash is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us and we will take appropriate steps to remove it.
Changes & contact
We may update this policy as our service or the law evolves. We will post the updated version here and revise the “last updated” date. For privacy questions or to exercise your rights, contact our data protection team: