Privacy Policy

1. Who we are

Baheth is a Saudi digital platform that connects researchers, faculty members, universities and research centres to collaborate and to exchange materials, equipment, expertise and services. In this policy, "Baheth", "we" and "us" refer to the platform and its operators, who act as the controller of your personal data.

We process personal data in line with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its implementing regulations.

2. The data we collect

• Account data: email address and password (the password is stored encrypted and we cannot see it).
• Profile data: your name in Arabic and English, degree, university or institution, nationality, field, specialty, subspecialty, research interests, biography, academic links (ORCID, Google Scholar, Scopus) and profile photo.
• Your CV, if you choose to upload it to generate your biography.
• Content you publish: research projects, service posts, material posts, photos and attachments.
• Messages you send and receive on the platform, and messages sent through «Contact us» and «Help centre» (including the name and email you enter there).
• Technical data needed to run the service, such as sign-in session cookies, language preference and standard server logs.

We do not ask for sensitive data (such as health, religious or financial data). Please do not include such data in your profile, posts, attachments or messages.

3. Why we use your data

• To create and manage your account and show your public profile to other users.
• To let researchers find each other by field, specialty and interests, and to publish your projects and posts.
• To deliver messages between users and send you email notifications about new messages.
• To review posts before publishing, keep the platform safe and respond to reports and enquiries.
• To improve the platform using aggregated, non-identifying statistics.

We rely on your consent when you register and when you choose optional features (such as uploading your CV), and on what is needed to provide the service you requested. You can withdraw your consent at any time.

4. What is public and what is private

• Public: your profile (name, photo, university, degree, field, specialty, interests, biography and academic links), approved projects and approved posts, including their photos and attachments.
• Private: your email address and password. Your email is never shown to other users, including in messages.
• Messages are visible only to the sender and the recipient. Platform administrators may review messages only when necessary to investigate a report or misuse.

5. Who we share data with

We do not sell your personal data and we do not use it for advertising. We share it only with service providers that help us run the platform, under agreements that require them to protect it:

• Supabase: database, sign-in and file storage.
• Vercel: website hosting.
• Resend: sending email notifications.
• AI providers (such as Anthropic, OpenAI or Google): only when you choose to upload your CV, its text is sent to generate your biography and is not used by Baheth for any other purpose.

Some of these providers may store or process data on servers outside the Kingdom. Where this happens, we take the safeguards required by the regulations on transferring personal data outside the Kingdom.

We may also disclose data when required by law or by a competent authority.

6. How long we keep data

We keep your data while your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, unless we must keep some of it to meet a legal obligation. Messages you delete are hidden from you immediately.

7. Your rights

Under the Personal Data Protection Law you have the right to:

• Be informed about how your data is collected and used (this policy).
• Access your data and obtain a copy of it.
• Correct or complete your data (most of it you can edit yourself from «Edit profile»).
• Request the deletion of your data when it is no longer needed.
• Withdraw your consent at any time.

To exercise any of these rights, email info@baheth.co. We will respond within the period set by the regulations.

8. Security

We use reasonable technical and organisational measures to protect your data, including encrypted connections (HTTPS), encrypted password storage and access rules that limit each user to their own data. No system is completely secure; if a breach affects your data, we will notify you and the competent authority as required.

9. Age

Baheth is intended for researchers, faculty members and university students aged 18 or over.

10. Changes to this policy

We may update this policy. If we make significant changes, we will notify you on the platform or by email before they take effect.

11. Contact us

For any question about your data or this policy: info@baheth.co