Zaffah · زفّة

Privacy Policy

Last updated: 11 July 2026

Who we are

Zaffah (زفّة) is a Saudi wedding-planning and venue-booking platform based in Riyadh. The data controller is the Zaffah founding team; upon completion of our company registration, this responsibility passes automatically to the registered Zaffah entity, with no change to our obligations to you. We comply with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations, under the supervision of the Saudi Data & AI Authority (SDAIA).

Privacy contact: hello@zaffahapp.com

What we collect

Only what the product actually needs:

• Account & sign-in: your mobile number (verified by an SMS one-time code), your name and city.
• Wedding journey: your wedding date, checklist tasks, and budget items you record.
• Guest list: the names and phone numbers of your guests, if you add them. This is other people’s data entered by you: add only people you genuinely intend to invite. Anyone on a guest list may ask us to remove their details (see "Guests' rights").
• Invitations: the invitation text, couple names, date and venue, shared by link or SMS; we count link opens.
• Chat: text and images exchanged with venues. Messages are automatically scanned to block the sharing of off-platform contact details or payment details (such as IBANs), to protect both sides.
• Reservations & reviews: booking requests you send, and reviews published after moderation.
• Venue partners: organisation and staff account details, roles and hall access, venue photos, prices, and calendars.
• Notifications: device tokens and web-push subscriptions used to deliver alerts.
• Waitlist (zaffahapp.com): your email and optional first name, with your consent, solely to notify you at launch.
• Technical logs: basic operational and audit logs for platform security and troubleshooting.

We do not process any payments or deposits in this version of the product.

Why we collect it (legal basis)

We process your data to perform the service you asked for, creating your account, organising your wedding, messaging venues, handling booking requests, and with your consent where the law requires it (such as the waitlist and notifications). We do not sell your data or use it for third-party advertising.

Who sees your data

• Venues see only what your request needs: your name, event date, request details, and your messages to them. They never see your guest list or budget.
• Processors acting for us: our SMS provider (verification codes and invitations), hosting provider, and push-notification provider, under contracts that bind them to protect your data, receiving only the minimum necessary.
• We disclose data to no one else except where the law requires.

Storage & PDPL

Your data is stored with a hosting provider under our security controls, and every storage-location or cross-border decision is made in compliance with the PDPL and the Data Transfer Regulations. Plain-language caveat: the launch waitlist is temporarily held in a cloud spreadsheet tool whose servers may be outside Saudi Arabia; we keep it to the minimum and will migrate it into our own systems before launch.

Retention

• Account and wedding data: as long as your account exists; deleted when you delete it.
• One-time codes: minutes, then purged automatically.
• Chat: while your account is active.
• Waitlist: until launch, then deleted unless you create an account.

Your rights

You may access, export, correct, and delete your data. In practice: the app includes Export my data and Delete my account (a full deletion covering your profile, wedding journey, and guests). For corrections or anything else, email hello@zaffahapp.com; we respond within the statutory timelines.

Guests' rights

If someone added your name or number to their guest list on Zaffah, email hello@zaffahapp.com and we will remove your details, no account required.

Cookies & analytics

Honestly: our landing page currently uses no tracking cookies and no analytics. If that changes, we will update this policy before enabling them.

Changes

We will notify you in-app or by email before any material change takes effect, with the last-updated date shown above.

Contact

Zaffah team, Riyadh, Saudi Arabia · hello@zaffahapp.com