Terms of Use

1. The service

Lafta lets businesses send push notifications, in-app messages and automated message journeys to the users of their websites and mobile apps, and measure the results. The features of each plan are described on the Billing page.

2. Your account

• You must give accurate information and keep your password and API keys secret. You are responsible for everything done with your account and keys.
• Keep the REST key on your servers only. Tell us at once at privacy@getlafta.com if you think a key or account was compromised.
• You must be authorised to accept these terms for your organization.

3. Your users and their data

Your app's users ("end users") are your users. For their data you are the controller and Lafta processes it only on your instructions, as set out in the Data Processing Agreement, which forms part of these terms.

• You must have a lawful basis, including any consent the law requires, before sending marketing messages, and you must honour opt-outs. Lafta honours the opt-outs recorded through its SDKs and API automatically.
• Do not put sensitive personal data (such as health, religious, financial account or national ID data) in message content, event properties or attributes.
• You must tell your end users, in your own privacy notice, that you use Lafta to send them messages and measure engagement.

4. Acceptable use

You must not use Lafta to:

• send spam, or messages to people who have not agreed to receive them where the law requires agreement;
• send content that is unlawful in the Kingdom of Saudi Arabia, misleading, fraudulent, harmful, or that infringes others' rights;
• impersonate another person or organization, or collect passwords or payment details through messages;
• test, overload or attack the service, or try to reach other customers' data.

5. Plans, limits and fees

• Each plan has limits (for example monthly active users, messages and events). When a limit is reached some features stop until the next period or an upgrade, as described in the product.
• Fees are in Saudi riyals and exclude value added tax (VAT), which is added at the applicable rate. Invoices follow ZATCA e-invoicing rules.
• Paid plans are billed in advance for each billing period. Unless the law requires otherwise, fees already paid are not refunded.
• We may change prices with at least 30 days' notice; the change applies from your next billing period.

6. Availability and support

We work to keep Lafta available and secure, but delivery of notifications also depends on third parties (Google Firebase Cloud Messaging, Apple Push Notification service and browser push services) and on end users' devices and settings, which we do not control. We do not guarantee that every message is delivered or delivered at a given time.

7. Intellectual property

Lafta, its software, SDKs and brand belong to us. You keep all rights in your content and data. You give us a limited right to process them only to provide and secure the service.

8. Suspension and termination

• You can close your account at any time from the dashboard or by writing to us.
• We may suspend or close an account that breaches these terms or the law, or that puts the service or other customers at risk, with notice where reasonable.
• Free accounts that stay inactive for a long period may be closed after notice.
• After closure we delete your data as described in the Privacy Policy and the Data Processing Agreement. You can export your data before closing.

9. Liability

To the extent the law allows, Lafta is provided "as is". Neither party is liable for indirect or consequential losses, or loss of profit. Our total liability for any claim is limited to the fees you paid us in the 12 months before the claim. Nothing in these terms limits liability that cannot be limited by law.

10. Changes to these terms

We may update these terms. We will tell you of material changes by email or in the dashboard at least 30 days before they take effect.

11. Governing law

These terms are governed by the laws of the Kingdom of Saudi Arabia. Disputes are settled by the competent courts in [Riyadh]. Where the Arabic and English versions differ, the Arabic version prevails.

12. Contact

[Company legal name], a company registered in the Kingdom of Saudi Arabia under commercial registration no. [CR number], with its address at [address]. Email: privacy@getlafta.com.