HARIS AGENT is the controller of the personal data described here. For anything in this notice, write to info@harisagent.ai.

Only what a specific purpose needs:

• If you create an account — your name, organization, role, country, mobile number and email address.
• If you contact us — whatever you put in the form or the email, including your phone number if you give it.

Assessments stay on your device. Everything you enter into the assessment toolkit — asset registers, vulnerabilities, adversary profiles, scores — is held in your own browser and is never transmitted to us. We hold no copy and could not produce one if asked. Saving downloads a file to your computer; clearing your browser data erases the work.

Account details let us give you access to the tools and tell you when something material changes. Contact details let us answer you. We do not sell personal data, and we do not use it for advertising.

Being plain about this matters more than sounding reassuring:

• Website hosting is currently served from outside the Kingdom. The site itself carries no personal data.

Where a transfer outside the Kingdom is required, we will carry it out only on a basis permitted by the Personal Data Protection Law and its transfer regulations.

Account details for as long as the account exists, and for a limited period afterwards where a legal obligation requires it. Correspondence for as long as it is useful to the matter it concerns. Delete your account and the profile record goes with it.

Under the Personal Data Protection Law you may ask us to confirm what we hold about you, give you a copy, correct it, or delete it. You may withdraw consent at any time where consent is what we relied on. Write to info@harisagent.ai and we will respond within the period the law allows.

If you are not satisfied with how we have handled a request, you may complain to the Saudi Data & AI Authority.

Sign-in is handled by a dedicated authentication service; we never see or store your password. Account records are readable only by the account holder. No system is perfect, and we would rather say so than imply otherwise.

Some HARIS AGENT tools run on separate platforms under their own arrangements, including the CCTV field-of-view study. Those services handle uploads and accounts under terms of their own, and this notice does not describe them. Read the notice published on each service before uploading anything sensitive to it.

If this notice changes in a way that affects you, we will say so on this page and date it.

HARIS AGENT advises; people decide. Every output — an assessment, a rating, a recommendation — is indicative and requires verification by a qualified security professional and, where it applies, by the relevant regulatory authority. Nothing produced here is a final security assessment or a substitute for professional judgment.

The tools are offered for legitimate professional security work. Do not use them to plan or assist anything unlawful, and do not attempt to disrupt the service or reach data that is not yours. We may withdraw access where that happens.

What you enter into the assessment toolkit stays on your device and remains yours; we claim nothing in it. You are responsible for handling exported files with the sensitivity they deserve, and for the lawful basis on which you hold information about other people.

The tools are provided as they are. We do not promise uninterrupted availability, and features that depend on third parties may change or stop.

To the extent the law allows, HARIS AGENT is not liable for loss or damage arising from reliance on any output of these tools. This does not limit anything that cannot lawfully be limited.

These terms are governed by the laws of the Kingdom of Saudi Arabia.