Mail & workspace
The service handles the messages, attachments, contacts, calendar entries, files, and other workspace content that your organization chooses to store or send.
PRIVACY & DATA HOSTING
Clear information about personal data, Saudi hosting, and your privacy choices.
These clarifications reference Saudi Arabia’s Personal Data Protection Law (PDPL) and guidance from the Saudi Data & AI Authority (SDAIA / سدايا). Applicable obligations depend on your organization’s processing, sector, and service scope. Read the official PDPL.
The service handles the messages, attachments, contacts, calendar entries, files, and other workspace content that your organization chooses to store or send.
Account details, support requests, and operational records support service delivery, troubleshooting, security, and administration. The applicable notice or agreement specifies purposes, lawful basis, recipients, and retention.
Your service agreement identifies the controller and processor roles, authorized instructions, and responsibilities for organization-managed content. Ask Doiteasy for the applicable data-processing terms.
Subject to the PDPL’s conditions, individuals may request information, access, a readable copy, correction, and destruction of personal data. Consent may be withdrawn where it is the basis for processing. See PDPL rights.
For organization-managed mail, contact your organization’s administrator. For Doiteasy service enquiries or to route a privacy request, use Contact Doiteasy. State the request type and the account concerned; provide identity evidence only through an approved secure channel. The right to complain to SDAIA remains available through its official platform.
Saudi hosting is available on demand for primary mail data, backups, and disaster-recovery copies. Activation and scope are recorded in the service order. Explore Saudi hosting.
Retention options are 1, 2, 3, 4, or 5 years under the agreed schedule. The period must fit the processing purpose and applicable legal requirements. Read the DLP and retention policy.
Email sent to external recipients and optional connected services can involve processing outside your hosting environment. Review providers, access, and transfer safeguards before enabling integrations. Cross-border transfers are subject to the applicable Saudi requirements. Read the transfer regulation.
Website human-verification processing is explained separately in the verification privacy notice.
Updated 19 October 2026