Privacy policy

Rizi is an event platform and service operated within IB — مؤسسة اعمال التكاملية للاتصالات وتقنية المعلومات (Integrated Business), unified number 7040798774. In this policy, “Rizi”, “we”, “us” and “our” mean IB in its capacity as the operator of Rizi services, rather than an assumed separate legal entity.

This policy explains data processing when you use the Rizi website, Organizer and Visitor apps, register for events, contact us or request Rizi Elite White Glove services. An event organizer may provide an additional notice describing its own purposes.

IB determines the purposes of account, contracting, support, platform-security and customer-relationship processing. For guest information collected or uploaded by an organizer for its event, the organizer generally determines the purposes and Rizi processes it to deliver the service under lawful instructions and the applicable agreement.

Using Rizi does not by itself give an organizer access to other organizations’ guest lists. Organizers may grant their teams or partners access through assigned permissions. To amend an event registration or raise concerns about organizer communications, contact that organizer or Rizi support for assistance routing your request.

Information may include your name, email, telephone number, organization and account details; event details, registration answers, guest lists and categories, entry codes, RSVP status, and scanning or arrival records.

We also process messages and attachments sent to support or with a service enquiry; orders, invoices and payment status when paid features are used; and technical information such as IP address, browser and device type, usage and error logs, and session information. Apps may process device notification tokens when notifications are enabled.

Sources include you, the event organizer and its authorized staff, your use of the service, and integrations enabled by the account holder. Required fields are identified in forms; withholding them may prevent registration or service delivery. Do not submit sensitive information or identity documents unless needed for a specific lawful purpose explained to you.

We use information to create accounts and verify access; operate event pages, registration, invitations, RSVP, QR passes, reception and reporting; deliver agreed services; handle support and payments; diagnose faults; protect users; and meet legal obligations.

The legal ground depends on the purpose: performing an agreement with you, meeting a legal obligation, consent where required, or a legitimate interest where permitted and after considering your rights. Browsing the site is not blanket consent to purposes unrelated to the service.

You may receive verification messages, registration updates, invitations, reminders and messages necessary for a requested service. Organizers may use email or messaging channels for their events and are responsible for the required legal ground, message content and marketing opt-out options.

You may request that marketing stop through the sender or contact us. Opting out of marketing does not stop messages necessary for account security or an existing order. When you move to an external messaging service, that service also processes information under its own policies.

Necessary information is shared with the relevant organizer and its authorized team, and with service providers supporting hosting, operations, communications, support, payment processing or technical services associated with the feature used. Access is tied to need, purpose and appropriate data-protection obligations.

We may disclose information where legally required or requested by a competent authority, or as necessary to protect rights and address misuse under applicable law. We do not sell your personal information. This does not mean every event page is free of tracking tools enabled by its organizer; see the next section and the event notice.

The platform uses cookies, local storage and similar technologies for sign-in, session security and some preferences. Organizers may enable analytics or tracking tags on their event pages; providers of those tools may receive visit, device and interaction information.

Organizers are responsible for disclosing their tools and establishing the lawful basis and any consent required before activation. Browser settings let you manage cookies and storage; blocking essential technologies can affect sign-in or registration. Controls available on an event page may differ according to the organizer’s setup.

When you use assistance to draft content or design a page, the instructions and information you provide are processed to generate a response, which may involve a technical provider supporting that processing. Include only what the task needs and avoid guest lists or sensitive data unless required by the feature and its stated purpose.

Organizers should review outputs before publishing and verify accuracy and content rights. Generated text is not a determination of a person’s eligibility or a substitute for human review of consequential decisions.

Retention depends on the data, purpose, contractual relationship and legal requirements. Account information needed to deliver the account is retained while it is used; event records depend on ongoing management and organizer instructions. Financial, contractual or security records may still be needed for a legal obligation or a claim.

Request account deletion through the available in-app feature or support. Deleting an organizer account may delete its events and associated data; read the confirmation carefully. Deleting your Rizi account does not delete copies lawfully held by an independent organizer or another party. Backup copies may remain until replaced within the operational backup cycle.

We use technical and organizational measures appropriate to the service, including permission management, protected connections and misuse monitoring. No storage or communication method guarantees absolute security; report suspected unauthorized access.

Some processing may involve service providers or infrastructure outside Saudi Arabia. Transfers are subject to applicable legal requirements and safeguards appropriate to the circumstances. This policy does not promise that all information is stored within Saudi Arabia. Contact us about processing relevant to your service.

Subject to applicable law, rights include information about processing purposes, access to and a copy of your data, correction or updating, destruction where the conditions apply, and withdrawal of consent for processing based on it. Withdrawal does not invalidate earlier lawful processing and may limit a feature requiring that consent.

Send requests to support@rizi.app with a description and suitable contact details, without unnecessary sensitive documents. We may request proportionate identity verification to protect information. If the organizer is the relevant controller, we assist in routing the request. Requests are handled within statutory periods, with reasons for applicable exceptions or additional information needed. You may complain to the competent personal-data protection authority.

Organizers determine event age suitability and guardian-consent requirements where applicable. They should not collect minors’ information without the necessary legal basis and permissions.

An app may request camera access for entry-code scanning, image-selection access or notifications when you use the relevant feature. Manage permissions in device settings; refusing a permission can disable the associated function.

We identify the update date and publish the current policy here. Material changes are explained and additional consent obtained where required. Updates do not automatically authorize new uses without a lawful basis.

For questions and privacy requests: support@rizi.app or +966 53 966 0700. These channels relate to Rizi services operated by IB. This policy complements the Terms and Conditions and does not limit statutory rights.