How KTC (Ktechclans) collects, uses, and safeguards your information.
Last updated: 16 July 2026This Privacy Policy explains how KTC (Ktechclans) ("KTC", "we", "us", or "our") collects, uses, discloses, and protects your information when you use the KTC ZATCA E-Invoicing System and related websites, applications, and services (collectively, the "Service").
We are committed to protecting your privacy and to processing personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its implementing regulations, as well as the requirements of the Zakat, Tax and Customs Authority (ZATCA). By using the Service, you agree to the practices described in this policy.
We collect the following categories of information:
We use your information to:
To deliver a compliant e-invoicing (Fatoora) experience, the Service processes invoice and tax data and, where you use Phase 2 (Integration), transmits required invoice data to ZATCA's platform in the formats mandated by the Authority. This processing is necessary to meet your legal obligations under Saudi e-invoicing regulations. You remain the controller of your business and customer records; KTC processes this data on your behalf to enable compliance.
We process personal data where: (a) it is necessary to perform our contract with you; (b) it is necessary to comply with a legal obligation, such as tax and e-invoicing laws; (c) you have given consent; or (d) it is necessary for our legitimate interests in operating and securing the Service, balanced against your rights.
We use essential cookies to keep you signed in and to remember preferences such as your chosen language. We may use limited analytics to understand how the Service is used and to improve it. You can control cookies through your browser settings; disabling essential cookies may affect functionality.
We do not sell your personal data. We may share information with:
We apply bank-grade security measures, including encryption in transit and at rest, access controls, and regular backups, to protect your data against unauthorized access, alteration, or loss. While no system is completely immune to risk, we work continuously to safeguard your information.
We retain your information for as long as your account is active and as required to provide the Service. Invoice and tax records are retained for the periods required by Saudi tax and e-invoicing regulations. When data is no longer required, we securely delete or anonymize it.
We aim to store data on infrastructure appropriate for the Kingdom of Saudi Arabia. Where any transfer outside the Kingdom is necessary, we do so in line with the PDPL and apply appropriate safeguards to protect your data.
Subject to applicable law, you have the right to: be informed about how your data is processed; access your data; request correction of inaccurate data; request deletion; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise these rights, contact us using the details below.
The Service is intended for businesses and is not directed at children. We do not knowingly collect personal data from children under the age of 18.
We may update this Privacy Policy from time to time. We will post the updated version on this page and revise the "Last updated" date. Significant changes may be communicated to you directly.
If you have any questions about this Privacy Policy or how we handle your data, please contact us:
Open a free demo of the system that matches your business.