Last updated: 6 October 2026

1. Who We Are

alaamah is a Saudi AI platform that helps businesses create content and manage digital marketing, operated at one.alaamah.com. Contact: info@alaamah.com.

2. Data We Collect

  • Account data: name, email, hashed password, optional phone.
  • Your content: text, documents and images you upload or generate.
  • Brand data: brand description, products and target audience you enter.
  • Usage data: login records, pages visited, IP address, browser type.
  • Payment data: processed by our payment gateway; we never store card details.

3. Social Media Account Connections

When you connect a social account (Facebook, Instagram, X, LinkedIn, TikTok, YouTube) we request specific permissions for one purpose only: to publish and schedule content that you request, and to read your own post analytics.

  • Access and refresh tokens are stored encrypted (AES-256) and used solely to perform actions you initiate.
  • We never post without your explicit action or a schedule you created.
  • We do not read your private messages, do not access your friends' data, and never use your data for advertising.
  • You may disconnect any account at any time from within the platform or from the social platform's app settings. On disconnection the access token is deleted immediately (and, for YouTube, we also ask Google to revoke it).
  • The data we read from a connected account is limited to your display name, avatar, account identifier and follower count — so we can show you which account is linked — plus the analytics of posts we published on your behalf (views, likes, comments). We do not read your existing posts or any other account content.

YouTube API Services

Alaamah uses YouTube API Services to let you connect your YouTube channel and publish to it the videos you choose. By connecting a YouTube account you agree to be bound by the YouTube Terms of Service (https://www.youtube.com/t/terms). Google's handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).

  • What we access: permission to upload the videos you publish or schedule through Alaamah to your own channel (youtube.upload), and read-only access to your own channel's basic information (youtube.readonly): channel ID, title, handle, avatar and public counts (subscribers, views, videos). We use only two API calls: uploading a video (videos.insert) and reading your own channel (channels.list).
  • What we store: the access and refresh tokens Google issues us (kept on our servers, used only by the publishing service), your channel details listed above (so we can show you which channel is connected), and the IDs of the videos we uploaded for you. Channel details are refreshed daily; no YouTube API data we store is older than 30 days, and anything that cannot be refreshed is deleted.
  • What we do not do: we do not read your other videos, comments, playlists or analytics; we do not modify or delete your existing YouTube content; and we do not sell or share YouTube data with third parties, use it for advertising, or use it to train AI models.
  • Deletion: when you disconnect YouTube we ask Google to revoke our access and delete the tokens and channel details we stored immediately. When you delete your Alaamah account, all of it is removed as described in section 6. You can also ask us to delete it at any time at info@alaamah.com; we act within 7 days.
  • Revoking access: disconnect YouTube from Social Media → Connected Accounts, or revoke Alaamah's access at any time from the Google security settings page: https://security.google.com/settings/security/permissions.
  • Cookies: Alaamah uses only the essential cookies described in section 8; no cookies are placed for YouTube.
  • Questions or complaints: info@alaamah.com.

Advertising Platform Connections (Meta, TikTok, Snapchat, Google Ads)

The Ad Campaigns page lets you connect your own advertising accounts so you can see and manage them in one place. We connect only when you click "Connect" and approve the platform's own permission screen. We use each platform's official API: the Meta Marketing API (Facebook and Instagram ads), the TikTok API for Business (Marketing API), the Snapchat Marketing API and the Google Ads API. Some platforms may not be available in your account yet.

  • What we access: the ad accounts you can use (name, currency, time zone, status and the business that owns them); your campaigns, ad sets / ad groups / ad squads and ads with their status, budget and schedule; and performance reports for them (spend, impressions, reach, clicks, conversions and results). For Meta we also read the Facebook Pages, Instagram accounts and pixels linked to your ad account so you can choose them for an ad, and Meta's description of the payment method on the ad account (for example card type and last four digits) so we can warn you about payment problems; we never see full card numbers. For Google Ads we also read the email address of the Google account you connect, to show you which account is linked.
  • Why: to show your spend and results from all your platforms in one dashboard, to give you automatic alerts (for example spend without results or a rejected ad), and, if you ask, to summarise what worked in your past campaigns.
  • Creating and changing campaigns: where campaign creation is available, we create a campaign in your ad account only when you ask, and it is always created paused. It goes live, or its budget or dates change, only after you confirm explicitly. Spend is charged by the platform to your own ad account and payment method. Images or videos you choose for an ad are sent to the platform only when you create that ad.
  • What we store: the access tokens (and refresh tokens where the platform issues them), stored encrypted (AES-256) and used only for the actions above; the list of your ad accounts and which ones you selected; and a record of the campaigns you created or changed through Alaamah One and of each action taken (time, type and the platform's response), so you and we can review what was done on your behalf. Report data is cached temporarily: up to 15 minutes for the dashboard, with a backup copy for up to 24 hours used only if the platform is unavailable; the "learn from your campaigns" analysis is cached for up to 24 hours.
  • What we do not do: we do not sell or share your advertising data with third parties, use it to advertise to you or anyone else, or use it to train AI models. If you request the optional AI summary of your campaign learnings (currently for Meta only), the aggregated figures are sent to our AI model provider only to write that summary for you (see section 5). Google Ads data is not sent to AI providers.
  • Disconnecting and deletion: you can disconnect any platform at any time from the Ad Campaigns page. This immediately deletes its tokens and your ad-account list from Alaamah One, and cached reports expire within 24 hours. For Google Ads we also ask Google to revoke our access. Your campaigns on the platform are not changed. The record of campaigns created through Alaamah One is kept with your account and deleted with it as described in section 6, or earlier on request at info@alaamah.com.
  • Revoking access at the platform: Meta: Facebook Settings → Business integrations (https://www.facebook.com/settings/?tab=business_tools) · TikTok: your TikTok for Business account settings, or TikTok Business Help Center (https://ads.tiktok.com/help/) · Snapchat: Manage apps at https://accounts.snapchat.com/accounts/oauth2/apps · Google: https://myaccount.google.com/permissions.

Google Analytics (GA4) Connection

The Analytics page lets you connect your own Google Analytics 4 property so you can see your website traffic next to your sales, ads and social media results. We connect only when you click "Connect" and approve Google's permission screen. We request the read-only scope https://www.googleapis.com/auth/analytics.readonly and use the Google Analytics Admin API and Google Analytics Data API.

  • What we access: the list of Google Analytics accounts and GA4 properties you can view (names and IDs), so you can choose one; for the property you choose, aggregated reports such as users, sessions, page views, key events, revenue and transactions by date, traffic source / medium / campaign, page and event name; and the email address of the Google account you connect, to show you which account is linked.
  • Why: only to show these reports to you inside Alaamah One. We never create, change or delete anything in your Google Analytics account.
  • What we store: the access and refresh tokens, stored encrypted (AES-256); the property you selected (ID, name, account name and currency). Report data is cached temporarily (about 15 minutes, with a backup copy for up to 24 hours used only if Google is unavailable) and is not stored permanently.
  • Deletion and revoking access: when you click "Disconnect" on the Google Analytics card in Connected accounts we ask Google to revoke our access and immediately delete the tokens and the selected property. You can also revoke access at https://myaccount.google.com/permissions.

Google Drive Backup

The Google Drive backup feature copies your own work from Alaamah One to your own Google Drive. We connect only when you click "Connect" and approve Google's permission screen. We request only the scope https://www.googleapis.com/auth/drive.file, which lets Alaamah One see and manage only the files and folders it creates; we cannot see, read or change any other file in your Drive.

  • What we do: we create a folder named "Alaamah One" in your Drive and upload into it the works you create in Alaamah One (images, videos, designs, motion videos and quote documents) about every hour, and, if you enable it, a weekly CSV export of your own Alaamah One data (customers and quotes). You choose what is copied on the backup page.
  • What we store: the access and refresh tokens, stored encrypted (AES-256); the email address of the connected Google account; the IDs of the folders we created; and a log of the files we uploaded (name, size, time and status) so we do not upload the same file twice.
  • Deletion and revoking access: when you click "Disconnect" we ask Google to revoke our access and delete the tokens immediately. The files already in your Drive stay there because they are yours. You can also revoke access at https://myaccount.google.com/permissions.

Google User Data

Alaamah One's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, we use data received from Google APIs (Google Ads, Google Analytics and Google Drive) only to provide and improve the user-facing features described above for the user who connected it; we do not transfer it to others except as necessary to provide those features, to comply with the law, or as part of a merger or acquisition with your notice; we do not use it for advertising, sell it, or use it to train generalised AI or machine-learning models; and no person at Alaamah reads it unless you give us permission (for example in a support request), it is needed for security or to comply with the law, or it is aggregated and anonymised for internal operations. Google's handling of your data is described in the Google Privacy Policy (https://policies.google.com/privacy).

4. How We Use Your Data

  • Operate the platform and deliver the services you request.
  • Process your content through AI model providers to generate outputs.
  • Calculate credit usage and manage your subscription.
  • Provide support and communicate about your account.
  • Improve service quality, security, and prevent abuse.

We do not sell your data or content, and we do not use your content to train general-purpose AI models.

5. Third-Party Sharing

We share the minimum necessary with: AI model providers (to process your requests), our hosting provider, our payment gateway, and the social and advertising platforms you connect yourself. Each processes data under confidentiality obligations. We may disclose data where legally required by a competent authority.

6. Data Retention and Deletion

We retain your data while your account is active. On account deletion, your data and content are removed within 30 days, except records we must retain by law (e.g. financial records). See Data Deletion Instructions.

Media files: once a post has been published successfully to all the platforms you selected, we delete our copy of the image or video from our servers about one hour later. Your post remains live on the social platform itself. Media from failed posts is deleted after 7 days; the post record stays in your account. Media from scheduled, draft or recurring posts is kept until they are published.

7. Your Rights

You may access, correct, or delete your data, withdraw consent for any connected account, and request a copy of your content. Email info@alaamah.com; we respond within 30 days.

8. Cookies

We use essential cookies for session management and preferences such as language and dark mode. You may disable them in your browser; some features may stop working.

9. Security

We use SSL encryption in transit, hash passwords, encrypt the access and refresh tokens of connected social and ad accounts at rest (AES-256), and take daily backups. No internet system can guarantee absolute security.

10. Children

The platform is intended for businesses and is not offered to anyone under 18. We do not knowingly collect their data.

11. Changes

We may update this policy and will notify you of material changes by email or in-platform notice before they take effect.

12. Contact

info@alaamah.com