Terms of Service

Last updated: 18 October 2026 · Version: terms-2026-10-17

Draft — the company registration details shown in [brackets] will be completed once the company's commercial registration is issued.

These terms are the agreement between your company and Muqawil for using Muqawil ERP, the Muqawil web, mobile and desktop apps, Muqawil Mail and our website. Please read them before you send a request or use the service. Our Privacy Policy (muqawil.app/privacy) and Data Processing Terms (muqawil.app/dpa) form part of these terms.

1. Who we are and who these terms are for

The service is provided by [LEGAL ENTITY NAME], a company registered in the Kingdom of Saudi Arabia under Commercial Registration No. [CR NUMBER], VAT registration No. [VAT NUMBER], registered address: [REGISTERED ADDRESS] ("Muqawil", "we", "us"). Contact: support@muqawil.app.

Muqawil is a service for businesses. The "Customer" is the company or establishment that requests or uses the service. The person who accepts these terms confirms that they are an adult authorised to act for the Customer. Accepting these terms electronically (for example by ticking the box on our form or clicking to confirm) creates a binding agreement under the Electronic Transactions Law; we keep a record of who accepted, when, and which version.

2. Definitions

• "Service": Muqawil ERP, the Muqawil apps, Muqawil Mail, and related support.
• "Customer Data": all data, including personal data, that the Customer or its users put into the Service.
• "User": a person the Customer allows to use the Service, including employees using employee self-service.
• "Package": the plan, features, limits and price shown on our pricing page or in the Customer's order.
• "Subscription period": the paid month or year shown in the order or invoice.

3. The service

Muqawil is an online system for running a contracting company — for example site cash and expenses, workers and iqamas, attendance, payroll, projects, quotations and invoicing (including ZATCA e-invoicing tools), books, documents and Muqawil Mail. The features and limits included depend on the Package. The Service is available in a web browser and, as they are released, in mobile apps (Android, iOS) and a Windows desktop app. We improve the Service regularly; we will not remove a core feature of your Package during a paid period without offering a fair alternative or a refund for the unused part.

4. Requests, trial, accounts and users

• You request access through our website. We review every request and may accept or decline it. A trial does not start automatically — it starts when we approve it.
• Unless we agree otherwise, a free trial lasts 14 days. At the end of the trial the account becomes "payment due": you can still sign in and export your data, but we may limit new entries until a Package is paid.
• The Customer's admin creates users and decides their permissions, including employee self-service sign-in (company code, iqama number and PIN). The Customer is responsible for its users' actions in its system and for removing users who leave.
• Keep passwords and PINs secret, do not share one login between people, and tell us at once if you suspect unauthorised use.
• The information you give us (company name, CR, VAT number, contacts) must be true and kept up to date.

5. How the subscription is made, fees, renewal and taxes

• Steps: you choose a Package, we send an order or invoice showing the Package, the subscription period, the price, VAT and the total, and the subscription starts when you pay or confirm the order. Before you pay you can review and correct the details; if you notice an input error after sending an order, tell us within 24 hours and we will correct it, as long as the paid service has not been used.
• Fees are in Saudi riyals. The total you pay, including VAT at the legal rate (currently 15%), is shown before you pay and on our tax invoice.
• Packages are paid in advance, monthly or yearly. A subscription renews automatically for the same period unless you cancel before the renewal date. We remind you by email at least 7 days before each renewal, with the renewal price including VAT.
• Card payments are processed by our payment provider (Moyasar). We do not store full card numbers.
• If a payment is late we remind you first. Your data is not deleted because of late payment; see section 13 for suspension.
• We may change prices with at least 30 days' notice. A new price applies from your next renewal, not during a period you have already paid for.

6. Cancellation and refunds

• You can cancel renewal at any time from your account or by writing to support@muqawil.app; the cancellation takes effect at the end of the paid period, and you keep access until then.
• If you pay for a Package and have not started using the paid service, you may cancel within 7 days of the payment and receive a full refund, in line with Article 13 of the E-Commerce Law. Once the paid service has been used, this right ends.
• If we do not activate a paid Package within 15 days of payment for a reason that is not yours, you may cancel and receive a full refund.
• We also refund the unused part of a paid period if we end the agreement without a reason that is your fault, if we remove a core feature under section 3, or if you end part of the Service because of a data protection objection under the Data Processing Terms.
• Otherwise, fees already paid are not refunded for part of a period, unless the law requires it.
• Refunds are paid to the original payment method within 14 days of approval.

7. Your data and your responsibilities

Customer Data belongs to the Customer. The Customer is the controller of the personal data it puts into Muqawil — about its employees, workers, clients, vendors and others — and Muqawil processes it as a processor under the Data Processing Terms. The Customer is responsible for:

• Having a lawful basis under the PDPL for that data, and telling its employees and workers how their data is used, for example through its own employee privacy notice.
• Sensitive data: collecting fingerprint, face or health data only where it is needed and lawful, with explicit consent where the law requires it, and carrying out an impact assessment where the law requires one (for example for continuous attendance monitoring). Muqawil does not receive biometric templates.
• Location: telling workers and supervisors before turning on location stamping for attendance or site reports.
• Identity documents: keeping copies of iqamas or other official identity documents only where a law requires it or a competent public authority asks for it (PDPL Art. 28).
• Keeping employee records in Arabic where the Labour Law requires it (Labour Law Art. 9); the Service supports Arabic text.
• Uploading only the data it needs, keeping it accurate, giving lawful instructions, and answering its own employees' requests about their data. We provide tools and help.

8. Tax records, ZATCA and professional advice

• Muqawil provides tools for ZATCA e-invoicing, VAT, payroll, GOSI and end-of-service calculations. The Customer remains responsible for the content of its invoices, its VAT returns, its ZATCA onboarding and device credentials, meeting deadlines, and checking calculations before relying on them.
• Record location: the VAT Implementing Regulations (Art. 66(3)) require a VAT-registered taxable person resident in the Kingdom to keep its VAT records in electronic form on a computer or server located inside the Kingdom. Muqawil's main database is currently in Frankfurt, Germany. Until Muqawil offers storage inside the Kingdom, the Customer must keep a complete and current copy of its tax invoices (including e-invoice XML files), books and VAT records on its own computer or server inside the Kingdom, using the Service's export tools. Muqawil keeps records for the Customer only as a third party under Art. 66(4); the Customer remains directly responsible for compliance.
• Retention: the Customer must keep its tax invoices, books and records for the periods Saudi law requires — for example at least 6 years from the end of the tax period for VAT records, longer for capital assets, at least 15 years for real-estate records, and at least 10 years for commercial books. Export them before the subscription ends; after the export period we delete them (section 14).
• Muqawil is software, not a law, tax or accounting firm. Texts, guides, calculations and AI answers in the Service are general information, not professional advice.

9. Government, critical-infrastructure and financial-sector customers

Some customers are subject to rules that require their data to be hosted inside the Kingdom or by a provider registered with the competent authority — for example government entities and their affiliated companies, operators of critical national infrastructure (the National Cybersecurity Authority's controls and the data rules of the National Data Management Office), and banks and other entities regulated by the Saudi Central Bank. Unless we agree otherwise in writing, the Service is not intended for such data, and the Customer must not upload Saudi Government Data classified above "public" or data it is not allowed to host outside the Kingdom. The Customer must tell us before signing up if these rules apply to it.

10. Acceptable use

You and your users must not use the Service to:

• Break any Saudi law, including the Anti-Cyber Crime Law, or help anyone else to do so.
• Access, intercept or interfere with data, accounts, systems or communications without permission, or defame, threaten or invade the privacy of others (Anti-Cyber Crime Law, Arts. 3 and 5).
• Produce, send or store material that harms public order, religious values, public morals or the privacy of others, or that is unlawful (Anti-Cyber Crime Law, Art. 6), or that infringes anyone's rights.
• Commit fraud, phishing or identity misuse, or pretend to be another person or company (Anti-Cyber Crime Law, Art. 4).
• Upload malware, try to get into other companies' data or our systems, test our security without written permission, overload or disrupt the Service, or bypass usage limits, quotas or sign-in protections.
• Copy, resell, reverse-engineer or scrape the Service, or use it to build a competing product.

If we see a breach of this section we may remove or block the content or the sending, suspend the user or the account, and report illegal activity to the competent authorities. Where possible we tell you first and explain what happened; where urgent action is needed we act first and explain afterwards.

11. Muqawil Mail rules

• Muqawil Mail is for business correspondence. Bulk, promotional or newsletter sending is not allowed from Muqawil Mail.
• You may send marketing messages only to people who gave prior consent, with your identity as sender and a free and easy way to opt out, as the PDPL and the Communications, Space and Technology Commission's rules on unsolicited messages require. Bought, rented or scraped address lists are not allowed.
• To protect delivery for everyone, we apply sending limits per hour and per message and may automatically pause sending from an account that shows signs of spam, compromise or a high bounce rate. The admin can contact support to restore sending once the cause is fixed.
• When the Customer uses its own domain, it must keep the domain's DNS records (including SPF, DKIM and DMARC) as we instruct, and remains responsible for the domain.
• Mailbox storage is limited by the Package; when a mailbox is full, sending and receiving may stop until space is freed.
• Report abuse from a Muqawil Mail address to support@muqawil.app.

12. Availability, backups and support

• We work to keep Muqawil available at all times. Planned maintenance is announced in advance where possible. Unless we agree a written service level with you, we do not promise a specific uptime percentage.
• We take daily backups and keep them for up to 7 days. Backups protect the Service as a whole; they do not replace the Customer's own exports.
• Support is by email (support@muqawil.app), in-app support and, for nominated contacts, chat and screen-share, on Saudi business days.
• Our team can see your system only when you give a time-limited support code. That access is read-only and logged.

13. Suspension

We may suspend all or part of the Service: if payment stays overdue after we have reminded you; if there is a security risk; if the Service is used against sections 10 or 11; or if a competent authority orders it. Where possible we warn you first and tell you how to fix it; in urgent cases we explain afterwards. Suspension does not delete your data, you can still request an export, and we restore the Service once the reason is fixed.

14. Ending the subscription, data export and deletion

• The Customer can end the subscription at any time under section 6.
• We may end the agreement if the Customer seriously breaks these terms and does not fix it within 15 days of our written notice, or immediately where the law requires.
• The Customer can export its data at any time with the export and report tools in the Service, and we help with a full export on request, in common formats (for example Excel/CSV and PDF, and XML for e-invoices).
• After the subscription ends, the Customer has 30 days of read-only access to export its data. After that we delete the Customer's data from our live systems within 90 days, and backups are overwritten within their normal cycle (up to 7 days). On request we confirm the deletion in writing. If the Customer asks in writing before deletion, we may agree to keep a read-only archive for a longer period.
• We keep only what the law requires us to keep, such as our own invoices to the Customer and proof of acceptance of these terms.
• Mail addresses on muqawil.app end with the account. If the Customer used its own domain, it can move the domain and its mail to another provider.

15. Intellectual property

Muqawil, its software, design and content belong to us or our licensors. We give the Customer a limited, non-exclusive, non-transferable right to use the Service during the subscription. Customer Data belongs to the Customer; the Customer gives us the right to host and process it only to provide the Service. If you send us suggestions, we may use them freely.

16. Confidentiality

Each side keeps the other side's non-public business information confidential and uses it only for this agreement, unless the law requires disclosure. This duty continues after the agreement ends.

17. Third-party services and app stores

Some features connect to services we do not control, such as ZATCA's platform, WhatsApp, banks, payment providers, attendance devices and the Apple and Google app stores. Their own terms apply to them, and we are not responsible for their availability or actions. Our mobile apps are licensed to you by Muqawil, not by Apple or Google; their stores' standard terms also apply to the download.

18. Liability

• We provide the Service with reasonable care and skill. Apart from what these terms say, we do not give other guarantees, for example that the Service will meet every need or never have an error.
• Neither side is liable for loss that could not reasonably have been foreseen when the agreement was made, or for indirect loss such as lost profit or lost business, or for loss of data that could have been avoided by the Customer's own exports.
• Our total liability under this agreement is limited to the fees the Customer paid us in the 12 months before the event that caused the claim.
• The Customer is responsible for claims that arise from Customer Data it had no lawful right to upload, or from its users' breach of sections 10 or 11.
• These limits do not apply to fraud, gross negligence, harm caused by a harmful act, or anything else for which Saudi law does not allow liability to be limited or excluded (Civil Transactions Law, Art. 173).

19. Events outside our control

Neither side is responsible for delay or failure caused by events outside its reasonable control, such as natural disasters, war, government action, widespread internet or power outages, or failures of government platforms (for example ZATCA) or of third-party services. The affected side tells the other side promptly and does its best to limit the effect. If such an event stops the Service for more than 30 days, either side may end the agreement and we refund the unused prepaid period.

20. Changes to these terms

We may update these terms. We publish the new version here with a new date and version number. For important changes we tell customers by email or inside the app at least 30 days before they take effect. If the Customer does not agree, it may cancel before the change takes effect and receive a refund of the unused prepaid period; continuing to use the Service after that means it accepts the new terms. Changes required by law may take effect sooner.

21. Complaints

Send complaints to support@muqawil.app with your company name and details of the problem. We acknowledge a complaint within 2 business days and aim to resolve it within 10 business days, telling you the outcome in writing. If you are not satisfied, you may contact the Ministry of Commerce (mc.gov.sa) or, for personal data matters, SDAIA (dgp.sdaia.gov.sa).

22. Law and disputes

These terms are governed by the laws of the Kingdom of Saudi Arabia. The parties will first try to settle any dispute amicably within 30 days of written notice. If that fails, the competent courts in [CITY], Kingdom of Saudi Arabia, have jurisdiction, as agreed in writing under Article 17 of the Commercial Courts Law.

23. General

• These terms, with the Privacy Policy, the Data Processing Terms and the Customer's order, are the whole agreement. If one part is invalid, the rest stays in force.
• We send notices to the Customer admin's email or inside the app, and such notices are valid; the Customer sends notices to support@muqawil.app.
• The Customer may not transfer this agreement without our written consent. We may transfer it to a successor of our business with notice.
• Sections on fees owed, data export and deletion, confidentiality, liability and disputes continue after the agreement ends.
• These terms are published in Arabic and English. If there is any difference, the Arabic version prevails.

24. Contact

support@muqawil.app · privacy@muqawil.app · [LEGAL ENTITY NAME], Commercial Registration No. [CR NUMBER], VAT No. [VAT NUMBER], [REGISTERED ADDRESS]

Khulasa (Roman Urdu): Trial hamari manzoori se (14 din). Qeemat + 15% VAT pehle se, khud renew — renew se pehle email par yaad-dihani. Paid package istemal se pehle 7 din me cancel = poori wapsi. Workers ke data ki qanooni bunyad, ZATCA invoices aur VAT records ki zimmedari company ki — VAT qanoon (Art 66) ke mutabiq Saudi company ko records ki copy Saudi ke andar rakhni hai (Muqawil abhi Frankfurt me), export se. Mail se spam/bulk mana. Band karne ke baad 30 din export, phir 90 din me delete. Saudi qanoon; jhagra [CITY] ki adalat.