Privacy policy

Last updated: 17 October 2026. النسخة العربية في الأسفل

NotifyBMS ("we") provides a service that sends building management system (BMS) alarms to people by SMS and phone call. This policy explains what personal data we handle and why. We aim to follow the Saudi Personal Data Protection Law (PDPL).

1. Data we collect

• When you contact us through the website form or WhatsApp: your name, company, mobile number, email, number of sites, your message, and the page or advert that brought you to us.
• When you use the service: the names, mobile numbers and languages of the people who receive alarms; the alarm emails your BMS sends; the alarm history (time, message sent, delivery result, who replied); the status of the site PC and alarm phone (online, battery, signal, SIM operator); and the login details of your portal users.
• Email access: to read alarm emails we use a Gmail address and app password that you provide for the site. It is used only to read alarm emails.

2. How we use it

• To deliver alarms, run escalation, show the portal, send problem alerts and monthly reports.
• To reply to your enquiry and send you a quote.
• To keep the service secure and to fix technical problems.

We do not sell personal data and we do not use it for advertising to third parties.

3. Service providers

• Hosting: Oracle Cloud, Riyadh region (Saudi Arabia).
• Message writing: the text of an alarm may be sent to an AI service (Anthropic) to write the SMS in each person's language. Only the alarm text is sent, not the recipients' phone numbers.
• Email: Google (Gmail) for reading alarm emails and sending notifications.
• SMS and calls: sent from your site's SIM card through your mobile operator. If you choose spoken voice calls, the call is placed through Vonage.
• Website analytics and advertising: if switched on, Google Analytics, Google Ads and Meta may set cookies to measure visits and adverts.

4. How long we keep it

Alarm history and activity logs are kept for 6 months. Enquiries are kept for up to 2 years unless you ask us to delete them. Client data is deleted when the service ends, unless the law requires us to keep it.

5. Security

Each client can see only their own site. The portal uses HTTPS, passwords are stored as one-way hashes, and administrator accounts can use 2-step sign-in.

6. Your rights

You can ask to see, correct or delete your personal data, or withdraw your consent, by emailing info@notifybms.com. We reply within 30 days.

7. Contact

NotifyBMS, Riyadh, Saudi Arabia. Email info@notifybms.com, WhatsApp +966 56 600 4374.

---