Privacy Policy

1. Who is responsible for your data

The party responsible for processing personal data in "Sure INSTANT" is Sure Execution, the provider of the service. This policy is written under the Saudi Personal Data Protection Law (PDPL) and the Saudi E-Commerce Law, and takes account of the Egyptian Personal Data Protection Law for users in Egypt and of the General Data Protection Regulation (GDPR) and the UK GDPR for visitors from the European Economic Area and the United Kingdom. The principle: your data is yours, we use it only to provide the service, and we do not sell it.

2. What we collect

• Account data: your e-mail address, your name if you enter it, and language. We do not collect a phone number.
• Source of the visit: the advertising platform or referring site, the campaign name, whether the visit came from a paid ad, the landing page and the time of the first visit. We keep only the kind of ad click identifier, never the identifier itself. We use this to measure our advertising, and it is not collected if you decline advertising cookies.
• Sign-in provider identifier: when you sign in with Google, Facebook or Hawees we receive your account identifier at the provider and your e-mail address verified there; your password with the provider never reaches us.
• Country: you choose it at the payment step; it is first suggested from your IP address.
• Content: the files you upload, the links you submit and the results produced from them, deleted automatically 24 hours after the job.
• Billing data: pack and tool, invoices, payment status, the ledger of tool balances and the general balance, and card brand, last four digits and issuing country where the gateway provides them. Card numbers never reach the company.
• Consent records: the terms version you accepted, the time, IP address and browser, as proof of the contract.
• Technical and security data: IP address, browser and device type, sign-in, operation and audit logs, for security and to prevent fraud and abuse of free previews (legitimate interest). Operational logs are kept for 90 days.

3. Why we use it and the legal basis

• Performing the contract: providing the service, running the operations you request and managing your balances and subscription.
• Legal obligation: invoicing, tax, accounting and responding to competent authorities.
• Legitimate interest: securing accounts, preventing fraud and abuse and improving the service with aggregated statistics.
• Consent: where your explicit consent is required, such as analytics and advertising cookies and recording the source of the visit, which you can withdraw at any time.

4. Your files

Your files are processed only when you run a tool yourself, and only as needed for that operation. Uploaded files and results are deleted automatically 24 hours after the job, you can delete them sooner from "My results", and downloads use short-lived links. Metadata is stripped from output files by default. Some free tools process the file entirely in your browser, so it never reaches us. Our staff do not open customer files except to handle a support request, with a logged reason. We do not use your files to train any model.

The "Instant AI" tool (AI analysis): what you submit to this tool (text, a photo, a file or a link) is processed only when you run it yourself, and only the content needed for that request, through a contracted cloud AI processing provider acting as our processor and bound by confidentiality. We do not keep what you submitted: the text and files are deleted as soon as the job ends, and only the result stays for 24 hours (or the period you choose); you can delete it at once from "My results". We do not use your content to train general-purpose AI models. Results are automated suggestions that may be inaccurate or incomplete and are not legal, medical or financial advice; review them before relying on them. The tool only prepares: it never sends anything or carries out an action for you.

5. Sharing and transfers

We do not sell or rent your data, and nothing from your account or files is ever shared for advertising. The only exception is the measurement tools on the site after your consent (see "Cookies"). We share your data only with service providers acting for us and only as needed (payment gateways, e-mail delivery, the sign-in provider you choose, attack protection), or when required by law or court order. Data is hosted on the company's servers in —, and some data may be processed outside your country by providers offering appropriate protection, as the law allows. The site links to Sure Execution's own social media pages; when you open one, that platform's privacy policy applies.

6. Security and retention

Data travels encrypted over HTTPS/TLS; we store no passwords, because sign-in uses a one-time code or a sign-in provider; sensitive secrets are stored encrypted, and we apply permissions and audit logs. No system is 100% secure; we notify you and the authorities of a breach affecting your data as the law requires. We keep account data while the account exists and delete it within a reasonable period after it is deleted, except what the law requires us to keep, such as invoices and consent records (usually ten years for financial records). Files and results are deleted after 24 hours, and operational logs after 90 days.

7. Cookies

We use cookies and local storage for sign-in and your preferences. Only strictly necessary cookies run by default; analytics tools and advertising pixels are loaded only after your consent, which you can withdraw at any time as the Cookie Policy explains.

8. Your rights

• To be informed how your data is processed, and to access, get a copy of and export it.
• To correct or complete inaccurate data.
• To request destruction of your data and deletion of your account when no longer needed, subject to what must be kept by law.
• To withdraw consent and to object to or restrict certain processing where the law provides.
• To complain to the data-protection authority in your country.

You can delete your account and export your data yourself from "Profile". To exercise your other rights: support@sureinstant.net. We reply within 30 days and may ask to verify your identity. Visitors from the European Economic Area and the United Kingdom have the rights given by the GDPR and the UK GDPR, including a complaint to the supervisory authority of their country of residence.

9. Children

The service is intended for people aged 18 or over, and we do not knowingly collect data from anyone younger. If we learn of a minor's account we delete it, and we delete a child's data when the guardian asks.

10. Updates

We may update this policy; the version date is shown at the top of the page, and we notify you of material changes before they take effect.