Privacy Policy

stageOS is a Saudi technology company building the embedded operating system for the events sector. stagePay is our embedded vendor-finance product, delivered in partnership with SAMA-licensed financing providers.

Data controller: stageOS, Riyadh, Kingdom of Saudi Arabia.
Contact: hello@stageos.ai

When you join the waitlist or contact us, we collect:

• Identity details: full name, email address, phone number.
• Professional context: role/persona, organisation name, vendor type, contract size band, annual events handled or procurement spend band.
• Optional comments you choose to share.
• Technical metadata: IP address, browser user-agent, page referrer, timestamps. Used solely for spam protection and analytics.

We do not collect financial account details, ID copies, or biometric data on this site.

We process your data on the following lawful bases under PDPL:

• Consent: when you submit the waitlist form.
• Legitimate interest: for site security, fraud prevention, and product improvement.
• Contract: if you progress to onboarding with stagePay or a partner.

• To contact you about stagePay availability in your segment.
• To prioritise onboarding when stagePay opens to early partners.
• To improve the product based on aggregated demand patterns.
• To detect and block spam, abuse, and fraudulent submissions.

We do not use your data for unsolicited marketing or send it to third-party advertisers.

We share data only with parties who help us deliver stagePay:

• SAMA-licensed financing partners — only when you progress to onboarding for an advance.
• Infrastructure providers — cloud hosting and database providers operating in the Kingdom of Saudi Arabia.
• Authorities — where required by Saudi law, regulation, or valid legal process.

We never sell your personal data.

Personal data is stored on infrastructure located in the Kingdom of Saudi Arabia in line with the Personal Data Protection Law (PDPL) and its implementing regulations. Cross-border transfer, where strictly necessary, will only occur in compliance with SDAIA's transfer requirements.

Waitlist submissions are retained for up to 24 months from your last interaction. If you join stagePay as a customer, your data is retained for the duration of the relationship plus the periods required by Saudi commercial, tax, and AML/CFT law (typically 10 years).

We use industry-standard technical and organisational measures: encryption in transit (TLS) and at rest, role-based access control, audit logging, and regular security reviews. Access is restricted to staff with a legitimate operational need.

You have the right to:

• Be informed about how your data is processed.
• Access a copy of your personal data.
• Request correction of inaccurate data.
• Request deletion of your data, subject to legal retention requirements.
• Withdraw consent at any time.
• Lodge a complaint with the Saudi Data & AI Authority (SDAIA).

To exercise any of these rights, email hello@stageos.ai. We respond within 30 days.

We use a small number of strictly necessary cookies for site function and basic, anonymised analytics to improve the page. We do not use third-party advertising or cross-site tracking cookies.

We may update this Privacy Policy as the product evolves. Material changes will be communicated by email if we have your address, and the "Last updated" date above will be revised.

Questions, concerns, or PDPL requests: hello@stageos.ai