Terms and Conditions

01Chapter One: Preamble and Scope of Application

Article (1-1): Preamble

This document constitutes the complete and binding legal agreement between Nasaq Alhadithah Lilkhadamat Almahdudah Establishment, a sole proprietorship registered in the Kingdom of Saudi Arabia under Commercial Register (CR) No. 7054964734 in the city of Yanbu Industrial, with its centre of business administration in the city of Jeddah (hereinafter referred to as "the Operator" or "Nusuq"), on the one hand, and every user of the RASA Platform (the User), on the other hand, with respect to regulating the use of the Platform and the rights and obligations of the parties.

This document has been drafted in accordance with the laws of the Kingdom of Saudi Arabia, and is deemed valid and effective immediately upon its electronic acceptance by the User in the manner set out in Chapter Nine.

Article (1-2): Scope of Application

These Terms apply to:

1. Every use of the RASA Platform through any of its approved channels, including without limitation: messaging applications, email, and any dashboard or technical interface approved subsequently.
2. Every interaction between Suppliers and Buyers that takes place through the Platform, whether or not it results in the issuance of a Purchase Order.
3. All information and data provided by Users or generated through their activity on the Platform.

Article (1-3): Supplementary Documents

These Terms are to be read together with the following documents, which are deemed supplementary and complementary to them:

1. The Privacy Policy, which is the very text of Chapter Eight of this document with all of its articles, and which is also published as a standalone page within the Operator's Official Page on nusuq.sa (at the path /ar/privacy-policy), with its courtesy English translation likewise published as a standalone page (at the path /en/privacy-policy) for ease of reference; these Terms and Conditions are published on the same Official Page (at the path /ar/terms-and-conditions, with their courtesy English translation at the path /en/terms-and-conditions); and in the event of any discrepancy between the standalone page and the text of Chapter Eight, the text of Chapter Eight prevails.
2. The provisions on Credits, fees and invitations set out in Articles (5-10), (5-11) and (5-12), and any price offer or package announced through the Official Channels.
3. Any annexes or amendments issued by the Operator subsequently in accordance with Chapter Fifteen.

In the event of a conflict between the provisions of this document and any other document, the text of this document prevails, unless the other document expressly provides otherwise.

Article (1-3a): Automatic Closure Rule for Quotation Requests

This Article applies upon activation of the Organized Offers Service in accordance with Article (3-5), and creates no obligation on the Platform before then.

To ensure the efficiency of the service and fairness among Suppliers, Quotation Requests are closed automatically according to whichever of the following two criteria occurs first:

• The lapse of twenty-four (24) hours from the sending of the request, or
• The receipt of three (3) Offers from different Suppliers.

A Supplier's failure to respond within the Agreed Period is deemed non-participation in that particular request. This is not deemed a breach of the agreement, and does not affect the Supplier's right to participate in subsequent requests. The Platform may use response rates for purposes of Internal Statistics only, without publishing them to Buyers or to other Suppliers.

If twenty-four (24) hours lapse without any Offer being received, the request is closed automatically and the Buyer is notified. The Buyer is entitled to re-issue the request or to request an extension of the period by a maximum of twenty-four (24) additional hours.

Closure of the request does not invalidate the Offers submitted. The Buyer is entitled to accept any Offer during its validity period as declared by the Supplier, even after the request has been closed, provided that the Supplier has not withdrawn the Offer in writing before acceptance.

This rule is mechanical and automatic, and no party is entitled to request its extension or modification for a particular request, except in exceptional cases determined by the Operator in accordance with announced operational policies. This rule applies to all Quotation Requests without distinction.

Article (1-4): Authoritative Language and Published Versions

Arabic is the sole authoritative language of this document and of the Privacy Policy.

The approved Arabic version is published on the Operator's Official Page on nusuq.sa, and a courtesy English translation of the entire document may be published alongside it; the courtesy English translation of Chapter Eight (the Privacy Policy) is published as a standalone page at the path indicated in Article (1-3).

The Arabic text prevails in the event of any conflict or difference in interpretation, and the translation is relied upon only as a tool to facilitate understanding.

Where the User chooses an interface in a language other than Arabic, the User is presented with links to the authoritative Arabic version or its courtesy translation, without prejudice to the User's right to consult the authoritative Arabic text at any time.

In the event of differences between the published forms and versions of the same Arabic text, the rule of precedence set out in Article (17-9) applies.

02Chapter Two: Definitions

The words and expressions appearing in this document have the meanings set out beside each of them, unless the context requires otherwise:

The Operator: Nasaq Alhadithah Lilkhadamat Almahdudah Establishment, a sole proprietorship registered in the Kingdom of Saudi Arabia under Commercial Register (CR) No. 7054964734, the owner and manager of the RASA Platform, also referred to as "Nusuq". The definition includes any legal entity that succeeds it in the ownership or operation of the Platform, and Users are notified thereof in accordance with Chapter Fifteen. Every reference to "Nusuq Company" or "the Company" in any supplementary document, earlier version or translation is to be read in this sense.

The Platform: the RASA digital product across all of its channels (messaging applications, email, and any dashboard or technical interface adopted later) used to search for Suppliers, to connect Buyers with them, and to coordinate Quotation Requests between Suppliers and Buyers.

The User: every natural person who interacts with the Platform through their mobile number in the capacity of a representative of a commercial entity (a company, an establishment or a licensed business) or in the capacity of a sole trader who owns an establishment or holds a Freelance Certificate; the definition includes the entity they represent, and they are referred to as "the Supplier" or "the Buyer" according to their role. The Platform is directed at business-to-business commercial use, and its services are not offered to individuals for personal consumer purposes; whoever uses it in that capacity contrary to the foregoing does so at their own responsibility, while their non-waivable statutory rights remain intact, and the provisions of Chapter Eight and the Privacy Policy apply to their personal data.

The Visitor: anyone who opens the Official Page or browses the Platform's website without registering. The Visitor is subject to the general terms of use relating to privacy and intellectual property by the mere act of browsing, and may withdraw immediately by closing the website. The technical data that automatically reaches the Operator's server logs at the hosting provider when the Official Page is opened is subject to the provisions of Article (8-13).

The Official Page: the two pages of the Terms and Conditions and the Privacy Policy published on the Operator's website nusuq.sa, at their Arabic and English paths set out in Article (1-3); their Arabic text is the reference text of this document in accordance with Articles (1-4) and (17-9).

The Official Channels: the approved channels of communication between the Operator and the User, namely: the conversation with the Platform in the messaging application, the support number announced within the channel, the official email complaints@nusuq.sa, and the Official Page; whatever is announced or notified through any of them is deemed announced in accordance with this document.

The Supplier: every business that appears to the Buyer in Search Results under one of the categories of Article (3-6); wherever "the Registered Supplier" appears, the meaning specified in Article (6-1) is intended.

The Buyer: the entity registered on the Platform to carry out searches for Suppliers, to issue Quotation Requests and to receive Offers from Suppliers, and which has the legal capacity permitting it to issue Purchase Orders.

Quotation Request: the request issued by the Buyer through the Platform to obtain specific prices and terms for items it wishes to purchase.

The Offer: the response submitted by the Supplier to a Quotation Request, including the price, the terms and the validity period.

The Purchase Order: the official document issued by the Buyer to the Supplier after accepting its Offer, which is concluded directly between the two parties outside the Platform, and to which the Platform is not a party.

The Agreed Period: the period of time for responding to a Quotation Request, which is twenty-four (24) hours by default from the sending of the request, or the period expressly specified in the text of the request, if any.

Internal Statistics: the aggregation of data in an aggregate form that is not attributed to any particular User, solely for measuring the Platform's performance, such as: the daily number of requests, the average response time, and the request closure rate. This does not include building predictive models that use the data of any particular User, nor analysing the individual behaviour of any User.

Electronic Consent: the act by which the User expresses their acceptance of these Terms and of the Privacy Policy or of any supplementary document, by pressing the consent button displayed to them in the Messaging Channel, whatever its displayed wording (such as "I have read the Terms and I agree" or its equivalent in the display language), with that act documented electronically in accordance with Chapter Nine.

Force Majeure: any event or circumstance reasonably beyond the control of the parties which prevents the performance of their obligations; examples of it are those set out in the list in Article (13-1), which is the reference for determining what constitutes Force Majeure.

The Applicable Laws: the laws, regulations and decisions in force in the Kingdom of Saudi Arabia, including: the Electronic Transactions Law, the E-Commerce Law, the Personal Data Protection Law (PDPL), the Competition Law, the Anti-Commercial Fraud Law, the E-Invoicing Regulation, and their implementing regulations.

The Fees: the amounts the User pays to the Operator in return for search packages or a subscription in accordance with Article (5-10); they do not include the price of the products or services exchanged between the Supplier and the Buyer.

The Registered Supplier: a commercial entity that has itself completed the registration of its business on the Platform through its channel, has agreed to these Terms, and satisfies the conditions of Article (6-1).

The Verified Supplier: a Registered Supplier whose representative has submitted an image of a Commercial Register (CR) whose number the Platform read automatically and in which the business name matched the name the representative entered. Verification is an automated documentary match between a submitted document and an entered name; it does not mean that the Operator has verified the authenticity of the document or its validity with the issuing authority, nor the relationship of its submitter to the business or their authorisation, nor the quality or capability of the Supplier, and it does not constitute a guarantee from the Operator to any Buyer. Verification is granted only on the basis of a Commercial Register (CR). Verification is displayed in the Search Result with the wording "Verified Supplier (CR matches name)" together with the last four digits of the CR only, in accordance with Article (3-6).

Business Listed from Public Sources: a business that has not registered on the Platform, whose commercial contact data was collected from the sources set out in Article (8-15), which is displayed in Search Results marked "Unverified" in accordance with Article (3-6), and whose data and the rights of its owners are subject to the provisions of Article (8-15).

Business Card: the digital document the Platform issues to the Registered Supplier, together with its Product Catalogue, from the data it provided about its business, and which may carry: the business name, the Commercial Register (CR) number or the Freelance Certificate number, the tax number, the contact number, the categories, cities and delivery range, the International Bank Account Number (IBAN) if the Supplier provided it itself in text or in a bank letter, its Invitation Code, and its verification status once earned. It is delivered to the Supplier alone in accordance with Article (6-9), and it differs from the "Search Result" that appears to the Buyer.

Search Result: what appears to the Buyer about the Supplier upon searching, which, for the Registered Supplier, is: the trade name of the business, the commercial contact number, its categories and specialisation, its cities and delivery range, and its verification status together with the last four digits of the Commercial Register (CR) if it is verified; and, for the Business Listed from Public Sources: the business name, its contact data, its classification and its city, marked "Unverified". The full Commercial Register (CR) number, the tax number, the IBAN and any official document do not appear in the Search Result. The Search Result is displayed and ranked in accordance with Articles (3-6) and (3-7), and the sharing of its data is governed by Article (5-8).

Search: every request submitted by the Buyer as text, an image or a file which the Platform processes in order to match it with Suppliers.

Internet Search: a live search in public sources on the internet conducted when matching in the Platform's database is not possible, which is charged at double weight from the Credit in accordance with Article (5-11).

Credit: a counter of the searches available to the User in accordance with Article (5-11); it has no monetary value.

Invitation Link: a fixed link or code for each User that allows others to register through it, in accordance with Article (5-12).

Guaranteed Request: one additional seat for the Registered Supplier appearing in the distribution of the first Quotation Request matching its category after earning it, in accordance with Article (5-12).

Consent to Appear: the Registered Supplier's independent consent to the display of its business data to Buyers and to receiving matching Quotation Requests automatically, in accordance with Article (6-10).

03Chapter Three: Nature of the Platform and the Limits of Its Role

The Platform is a neutral technical coordination tool only. It is not a seller, not a buyer, not a financial intermediary, not a guarantor of any transaction, and not part of the supply chain in any form.

Neutrality in this Chapter means that the Platform does not attest to the quality of any Supplier and does not select one on the Buyer's behalf; it does not mean that the Platform displays results without ranking. The ranking and distribution criteria are published in Article (3-7), and the categories of results and their sources are set out in Article (3-6).

Article (3-1): The Legal Nature of the Platform

The RASA Platform is a technical infrastructure that enables Buyers to search for Suppliers matching their requests and to contact them, and enables Registered Suppliers who have consented to appear to receive Quotation Requests matching their declared categories.

The Platform ranks results and selects the recipients of requests automatically according to technical criteria published in Article (3-7), namely: verification status, then self-registration with consent to appear, then the degree of match of category, description and city, with an equal daily cap on the number of requests reaching any single Supplier, and the seats of the Guaranteed Request program published in Article (5-12).

Results may include Businesses Listed from Public Sources or from Internet Search, which are labelled as unverified in accordance with Article (3-6).

The Platform does not attest to the quality, eligibility or reputation of any Supplier, does not select one on the Buyer's behalf, and neither the ranking of results, the label, nor the guaranteed seat constitutes a recommendation or a guarantee.

The final decision to purchase, the selection of the Supplier, the verification of its identity and licensing, and the issuance of the Purchase Order are the Buyer's sole decision, taken under its full responsibility on the basis of what it receives from Suppliers directly.

Article (3-2): What the Platform Provides

The functions of the Platform in its current phase are limited to the following:

1. Receiving the Buyer's request as text, image or file via the approved Messaging Channel, and extracting and organising its items automatically using artificial intelligence technologies in accordance with Chapter Eight.
2. Searching for Suppliers matching the request in the Platform's database and, where no match can be made and at the Buyer's request, conducting an Internet Search in public sources within the published quotas in accordance with Article (5-11).
3. Displaying the commercial contact details of matching Suppliers to the Buyer as soon as the Search Result is issued, classified according to their categories set out in Article (3-6), so that the Buyer contacts them directly under its own responsibility.
4. Preparing a message text or a Quotation Request Form for the Buyer, and a link that opens the Supplier's chat from the Buyer's own account, in accordance with Article (7-11).
5. With the Buyer's consent, automatically notifying the matching Registered Suppliers who have consented to appear of the Quotation Request, in accordance with Articles (5-8) and (6-10).
6. Operating the Credits, Invitations and Guaranteed Request program in accordance with Articles (5-11) and (5-12).
7. Issuing a Business Card and a Product Catalogue for the Registered Supplier in accordance with Article (6-9).
8. Keeping records of requests and consents for operational and regulatory purposes in accordance with Article (8-7).

The receipt of offers, negotiation, acceptance and the issuance of Purchase Orders take place between the Buyer and the Supplier directly outside the Platform; in its current phase the Platform does not receive offers, display them or compare them, and does not close requests, in accordance with Article (3-5).

Article (3-3): What the Platform Does Not Do

The Platform does not carry out any of the following activities, and no clause of this document may be interpreted as implying otherwise:

• It does not sell products or services in the capacity of a seller.
• It does not buy products or services in the capacity of a buyer.
• It does not take possession of products, store them, ship them, transport them, or handle them in any physical form.
• It does not receive any monetary amounts relating to a Purchase Order or an invoice between a Supplier and a Buyer.
• It does not guarantee the quality of products, the accuracy of specifications, or their compliance with regulations.
• It does not guarantee that delivery will be performed on time or in the agreed manner.
• It does not guarantee the correctness of the prices or terms submitted by Suppliers.
• It is not a party to the sale contract concluded between the Supplier and the Buyer.
• It does not guarantee Suppliers the winning of any request or the receipt of a specific number of requests.
• It does not guarantee Buyers the availability of offers or the obtaining of the lowest price in the market.
• It does not intervene in the settlement of disputes between the parties except as an optional amicable mediator at the request of all parties.

Article (3-4): Disclaimer of Agency or Partnership

Neither this document nor any interaction between the parties through the Platform creates any relationship of agency, partnership, joint venture, employment or representation between the Operator and any of the Users. Each party acts in its own independent capacity.

Article (3-5): Current Operating Phase and Suspension of the Offer Cycle Provisions

The Platform currently operates under the "Search and Connect" model described in Article (3-2), and does not operate an organised offers service within it at this phase.

As for the provisions relating to the offer cycle within the Platform, namely:

• Article (1-3a).
• Articles (6-2) and (6-3) as regards offers submitted through the Platform.
• Article (6-4).
• Article (7-3) as regards offers submitted through the Platform.
• Articles (7-6) and (7-7).
• The definitions of "the Offer" and "the Agreed Period" as they relate to the Platform's mechanism.

these apply only to the Organized Offers Service upon the announcement of its actual activation through the Official Channels of the Platform, create no obligation on the Platform before that, and the announcement of activation is deemed a Material Amendment subject to Chapter Fifteen.

Until then, the obligations of honesty and non-misleading set out in those Articles apply to everything the Supplier or the Buyer sends directly to the other party on the basis of a request issued through the Platform, without the Platform bearing any obligation to collect, compare, close or verify offers.

Wherever the expression "offers displayed to the Buyer" or an expression of equivalent meaning appears in this document, it is to be read in the current phase as meaning what the Buyer receives from Suppliers directly outside the Platform.

Article (3-6): Sources of Supplier Data, Categories of Results and Limits of Verification

The Platform displays three categories of Suppliers and distinguishes between them in the search results:

A. Verified Supplier (CR matches name)

This is the Registered Supplier to whom the definition of "Verified Supplier" set out in Chapter Two applies; the label carries only the meaning and limits set out in that definition, including that the Platform does not verify the validity or currency of the Commercial Register (CR) with the issuing authority, and that the label does not constitute an endorsement of the Supplier's commercial merit. A Freelance Certificate does not suffice to grant this label, even though it suffices for registration in accordance with Article (6-1).

B. Registered, Unverified Supplier

This is a Supplier who completed its registration itself and consented to appear in accordance with Article (6-10), and either did not submit a Commercial Register (CR), or submitted one whose name did not match the name of its business.

C. Business Listed from Public Sources

This is a business that has not registered on the Platform and is contacted only with a single introductory message in accordance with Article (8-16), whose commercial contact details were collected from the sources set out in Article (8-15), including publicly available material, User contributions and Internet Search, and which is displayed labelled "Unverified". The Platform does not automatically send any request to this category, and does not verify its identity, licensing or actual existence.

The Buyer acknowledges that the results of categories (B) and (C) are commercial contact details and not a certification, and that before any payment or contracting it must itself verify the Commercial Register (CR) through the Saudi Business Center, the tax number through the Zakat, Tax and Customs Authority (ZATCA), and the identity of the person it deals with. The label of category (A) does not exempt it from this verification.

The Platform bears no liability for any loss arising from the Buyer's dealings with a business of any category, in accordance with Chapters Four and Twelve.

Every Business Listed from Public Sources has the right to request the correction of its data or its removal from the search results via the official email (complaints@nusuq.sa); removal is carried out within five (5) business days while its number is retained on the do-not-list-and-do-not-contact list, in accordance with Article (8-15).

Article (3-7): Ranking, Distribution and Badge Criteria

Search results are ranked for the Buyer automatically according to the following criteria, in their order:

1. Verification status in accordance with Article (3-6).
2. Self-registration with consent to appear in accordance with Article (6-10).
3. The degree of match of category, description and city as assessed by the artificial intelligence model, with the reason for the suggestion shown to the Buyer where available.

The recipients of the automatic Quotation Request are selected from the matching, appearing Registered Suppliers only, in order of verification first, with a maximum number per single batch and an equal daily cap on the number of requests reaching any single Supplier, the values of both being published through the Official Channels of the Platform, to which one seat is added for the Guaranteed Request in accordance with Article (5-12).

The "Verified Supplier (CR matches name)" badge carries only the meaning specified in the definition of "Verified Supplier" in Chapter Two and Article (3-6).

The Operator may amend these criteria or their values by notice through the Official Channels; this is not deemed a Material Amendment as determined by Article (15-2), and neither ranking nor distribution creates any right for the Supplier to appear at a particular rank or to receive a particular number of requests, in accordance with Article (3-3).

Article (3-8): Nature of the Service and Its Automated Outputs

The Platform is offered at an early stage of development; features may be added, modified or discontinued, and the User is notified of any such change affecting its rights in accordance with Chapter Fifteen.

The Platform relies on artificial intelligence models from external providers set out in Article (8-13) to read requests, images and files, extract items, quantities and cities, classify Suppliers and match them to requests, and summarise search results.

These outputs are automated and approximate, may contain errors, omissions or outdated data, and do not constitute advice, a recommendation, a certification, or a verification of any Supplier, product or price.

Where outputs are displayed to the User before approval, the User's approval of them or sending of the request constitutes an acknowledgement of having reviewed them, and in all cases the User must itself verify any Supplier, its data and its register before contracting or paying, in accordance with Article (3-6).

The Operator is not liable for a decision taken in reliance on an automated output unless the damage arises from fraud or gross fault on its part, subject to the provisions of Chapter Twelve.

Article (3-9): The Channel, the Messaging Application and the Third Party

The Platform's services are currently provided through the WhatsApp Business application operated by Meta Platforms, and are subject in this respect to Meta's terms and policies, over which the Operator has no control.

The Operator is not liable for the malfunction or restriction of the application, the blocking of the number, the rejection of message templates, delayed delivery, or any action taken by the Channel Provider; it endeavours to make an alternative channel available when the primary channel fails, without this constituting an obligation on it.

Messages sent from the Platform to the mobile number registered in the messaging application are deemed an official notice received at the time of their delivery to that number according to the application's report, consistent with the notification provisions in Chapter Seventeen, and the User must inform the Platform upon changing its number.

04Chapter Four: Disclaimer of Liability for Damages

Article (4-1): Scope of the Disclaimer of Liability

The Operator is not a seller, manufacturer, importer, distributor or carrier of any product or service identified through the Platform, and is not a party to any contract of sale or supply concluded between Users.

Accordingly, to the fullest extent permitted by law, the Operator does not bear civil liability, whether direct or indirect, for damages suffered by any User or third party as a result of transactions carried out between Users or as a result of the use of a product or service identified through the Platform; liability for such damages rests with the Supplier or the Buyer, as the case may be, in accordance with the applicable laws, unless the damage arises directly from fraud or gross negligence on the part of the Operator itself.

This includes in particular, without limitation, the following damages:

A. Physical and Health Damages

• Physical injuries, of whatever degree, resulting from the use of a product identified through the Platform.
• Death, God forbid, or any Sharia-based or statutory compensation that follows from it.
• Cases of food poisoning, chemical poisoning or any other form of poisoning.
• Allergies, allergic reactions, or the contraction of skin, respiratory or digestive diseases.
• Injuries resulting from products that are expired, adulterated, counterfeit or non-compliant with specifications.

B. Psychological and Moral Damages

• Psychological or moral damages arising from any transaction through the Platform.
• Damage to commercial reputation, loss of trust, or any similar moral damage.

C. Indirect Financial Damages

• Loss of expected or potential profits.
• Loss of business opportunities.
• Business interruption resulting from delayed supply or non-supply.
• Costs of re-purchasing from an alternative source.
• Consequential damages of any kind.

D. Operational Damages

• Damages resulting from delayed supply or non-supply.
• Damages resulting from the misuse of a product by the Buyer or by anyone acting on the Buyer's behalf.
• Damages resulting from improper storage or unsuitable transport.

Article (4-2): Transfer of Liability Without Prejudice to Statutory Rights

No clause in this Chapter, or in the document as a whole, is to be understood as waiving the Users' statutory rights established under the laws of the Kingdom of Saudi Arabia (the Consumer Protection Law, the Anti-Commercial Fraud Law, the Product Safety Law, the E-Invoicing Regulation, the Personal Data Protection Law (PDPL), and any other law in force). The clauses herein govern the relationship between the parties in what goes beyond those rights, not in what conflicts with them.

Within this framework, liability is allocated as follows:

The Supplier is fully liable, towards the Buyer and towards any third party, for the safety of its products, their compliance with the laws, their commercial soundness, their fitness for the declared use, and all express or implied warranties relating to them, as required by the laws of the Kingdom, in particular the Product Safety Law and the Anti-Commercial Fraud Law.

The Buyer is responsible for its decision to purchase, for its selection of the Offer or the Search Result it chose, for its use of the product after receiving it, and for any action it takes on the basis of the information it received through the Platform, without prejudice to its statutory rights against the Supplier.

Article (4-3): Acknowledgement by the User

By using the Platform, the User acknowledges that it has read this Chapter, understood the allocation of liability set out in it and agreed to it, and that its claims relating to products, services and transactions are to be directed to the party legally responsible for them (the Supplier or the Buyer) and not to the Operator.

This is without prejudice to the User's non-waivable statutory rights, and without prejudice to the Operator's liability for its own fraud or gross negligence in accordance with Article (12-4).

05Chapter Five: Provisions Common to All Users

Article (5-1): Eligibility of the User

In order for any person to use the Platform, they must satisfy all of the following conditions together:

1. They have reached the legal age of majority (eighteen (18) Hijri years or older).
2. They enjoy full legal capacity in accordance with the applicable laws.
3. If they represent a legal entity, they acknowledge that they are authorised by that entity by virtue of: (a) an express written authorisation, or (b) a job role directly connected to procurement, sales, or supplier management (procurement manager, operations manager, head of a supply department, finance manager, or the equivalent), with the entity being bound to object in writing through the Official Channels if no such authorisation exists.
4. The account on the Platform is linked to a mobile number on the messaging application; the user of that number acknowledges that they use it in their capacity as a representative of the registered entity, and that they are authorised to represent it in everything they carry out through the Platform. If the entity denies the authorisation or its absence is established, the user of the number is personally bound by all obligations under these Terms and by compensating the Operator for any damage it suffers as a result, and the Operator may hide the business from Search Results or suspend the account as soon as it receives a documented objection from the entity via the official email complaints@nusuq.sa.
5. They are not legally prohibited from engaging in commercial activities, nor subject to judgments preventing them from doing so.

If any of the acknowledgements set out in this Article is proven to be false, the person making the acknowledgement bears the full legal and financial consequences arising therefrom, the Platform is released from any liability resulting from their dealings, and the Operator is entitled to suspend their account immediately and to claim compensation for damages.

Article (5-2): The Operator's Right to Refuse Registration

The Operator reserves its absolute right to accept or refuse any registration request, without the need to give detailed reasons, provided that there is no discrimination contrary to the laws (discrimination based on nationality, race, gender, religion, or region). Refusal occurs in order to protect the quality of the Platform and the trust of its Users. No compensation is due to the applicant as a result of the refusal of registration. This also applies to suspension or termination carried out in accordance with Chapter Fourteen.

Article (5-3): The Single Account and Its Link to the Mobile Number and the Entity

The account on the Platform is linked to a mobile number on the messaging application and to the entity registered under its name in accordance with Article (5-1). A single entity may have more than one registered number if each number is used by a representative authorised by it in the name of the same entity, and all of these are deemed representatives of a single entity to whom the provisions of Article (5-5) apply.

The entity or its representatives are prohibited from registering the same entity under different names or capacities, or from using multiple numbers or accounts to circumvent the Credits and quotas set out in Article (5-11), or the Invitation Program set out in Article (5-12), or a suspension or termination carried out in accordance with Chapter Fourteen. This is deemed a serious breach of these Terms.

The Platform is not obliged to detect multiple accounts on its own initiative; whenever the Operator becomes aware that multiple numbers belong to a single entity (with the same Commercial Register (CR), the same tax number, or the same beneficial owner), it may treat them as a single account for the purposes of Credits and quotas, and suspend those of them used for circumvention.

Article (5-4): General Obligations of the User

The User undertakes the following:

• To provide correct, up-to-date, and complete information about themselves and about the entity they represent.
• To keep their information up to date as soon as any of it changes; the name, email, contact number, categories, cities, and documents are updated by a request within the same conversation, or by uploading the new document, or by writing to the official email, and the update is carried out within a reasonable period.
• To use the Platform for legitimate commercial purposes only, in accordance with the applicable laws.
• Not to use the Platform to send annoying, unsolicited, fraudulent, or unlawful content.
• Not to impersonate another person or another entity.
• Not to attempt to breach the Platform, or to harm its systems or its Users.
• To respect the privacy of other Users, and not to use their data outside the framework of the Platform.
• Not to use automated tools or multiple accounts or numbers to extract or aggregate Supplier data or Search Results, and not to use the Platform or its results to build a competing database, directory, or service, or to republish them.
• Not to assign or transfer the account, and not to transfer the mobile number linked to it to another entity without informing the Operator; the account is linked to the mobile number and the registered entity together.
• Not to manipulate the Invitation Program or the promotional Credits set out in Articles (5-11) and (5-12) using numbers or accounts owned or controlled by the User; the Operator may withdraw Credits earned in that manner.
• To comply with the agreements and contracts they conclude with other parties through the Platform.
• To disclose immediately any error or vulnerability they discover in the Platform.

Article (5-5): The Relationship of the Legal Entity with Its Employees

A legal entity that uses the Platform through its employees is bound by all of their actions on the Platform, regardless of the existence of an express written authorisation, as long as the action was carried out from the mobile number registered under the entity's name on the Platform or from a number used by its acknowledging representative in accordance with Article (5-1).

The entity must designate its authorised employees internally; otherwise, anyone who used a number registered under the entity's name is deemed an implicitly authorised employee, and the entity bears the full consequences of their actions.

Article (5-6): Prohibition on the Sale of Data

Every User undertakes not to sell, lease, exchange, or transfer the data of other Users (Suppliers or Buyers) obtained through the Platform to any third party, under any circumstances, whatever the consideration.

This obligation remains in force as provided in the unified confidentiality Article (8-11).

Article (5-7): Prohibition of Anti-Competitive Practices

Every User undertakes, in accordance with the Saudi Competition Law and its implementing regulations, not to agree with other Users or with parties outside the Platform on any anti-competitive practice, including without limitation:

• Fixing selling or purchasing prices (prior agreement on a specific price).
• Dividing markets or customers among multiple Suppliers.
• Collective boycott of a Supplier, a Buyer, or a specific category.
• Exchanging confidential information with the aim of restricting competition.
• Sham or pre-arranged tenders.

The violator bears the statutory penalties prescribed, and the Operator is entitled to suspend their account immediately and refer them to the General Authority for Competition, as required by the law.

The Platform's Commitment to Neutrality of Market Data

In compliance with the Competition Law, the Platform does not share any Supplier's price data with other Suppliers, nor any Buyer's prices with other Buyers. The Platform does not publish market benchmarks that reveal profit margins or individual prices. Aggregate analytics, if issued, are anonymised so that the identity of any party cannot be inferred.

Article (5-8): Rules for Sharing Data Between Users

A. Concerning Registered Suppliers

By the Supplier's acceptance of these Terms and of appearing in accordance with Article (6-10), the "Search Result" data, with the fields specified in its definition in Chapter Two, is displayed to Buyers whose requests match its category, as soon as the Search Result is issued and without waiting for any Offer, in accordance with Articles (3-6) and (3-7); of its Commercial Register (CR), only the last four digits appear therein, as an indication of its verification status.

The Platform does not display within Search Results the Supplier's full Commercial Register (CR), nor its tax number, nor its IBAN, nor its official documents (the Commercial Register (CR), the tax certificate, the IBAN letter, and the like), and does not share these documents with any Buyer; rather, the full Business Card is delivered to the Supplier alone in accordance with Article (6-9). The Buyer may request these documents from the Supplier directly through the contact details made available to them, and the Supplier's refusal is not deemed a breach of these Terms.

As for Businesses Listed from Public Sources, their data is displayed in accordance with Articles (3-6) and (8-15).

B. Concerning Buyers

The Buyer data that reaches Suppliers differs according to the sending path the Buyer chooses:

1. In the self-sending path: the Platform does not send any of the Buyer's data to any Supplier; rather, it prepares for them a draft containing their name as they registered it and a description of their need, which they send themselves from their own account and may amend in accordance with Article (7-11).
2. In the automatic sending path: by the Buyer's approval of sending the Quotation Request through the Platform, whether by selecting the permanent preference or by pressing the send button for a specific request, they consent to the following being sent to the matching Registered Suppliers, in a message with an attached Quotation Request Form: the name of their business, the name of the contact person, the contact number they specified or otherwise the number of their account on the messaging application, their email, their Commercial Register (CR), their tax number, and their sector if they had provided them, and the items of the request, their quantities, the city of delivery, and any notes they wrote. The Buyer may change their preference to self-sending at any time by writing the announced word within the channel, after which nothing is sent automatically.

C. Obligation of the Recipient of the Data

Everyone who receives the other party's data is bound by the confidentiality provisions in Article (8-11) and by not using it except for the commercial purpose for which it was sent.

Article (5-9): Protection of Minors and Legal Capacity

The Platform does not deliberately collect any personal data of minors (those under eighteen years of age). If the Operator becomes aware of the existence of a minor's data, it undertakes to delete it immediately.

If it is discovered that the User was a minor or legally incapacitated at the time of accepting the Terms, their contract is void, and their legal guardian, or whoever provided false information in their name, bears the consequences of any damage caused by their use of the Platform.

Article (5-10): Fees, Method of Payment, Invoices, and Subscription

A. Current Free Provision and the Transition to Fees

The service is currently provided without fees within the Credits and Operational Quotas described in Article (5-11). This does not create any vested right to the continuation of free provision.

The Operator may at any time, by prior notice through the Official Channels before the fees take effect, impose fees on all or part of the service, or change its prices or packages, or make the use of the Platform restricted to paid subscribers for all Users or for a category of them, without being bound by any minimum notice period and without being bound to keep any part of the service free. None of this is deemed an amendment to this document requiring fresh consent; rather, it applies upon notice.

No fees are imposed retroactively on use prior to their taking effect. After the fees take effect, provision of the service ceases for those who have not paid, and no compensation or liability on the part of the Operator arises from this cessation.

Every subscription or Credit paid for before the fees take effect or are changed is honoured until the expiry of its period or its consumption, and no change in price applies to an existing paid subscription except from its next renewal.

B. Packages and Subscription

The Operator may make available paid search packages and a monthly subscription with an announced monthly search quota, not unlimited use. Prices and quotas are announced within the channel or on the Platform's page before payment. The subscription begins from the date of activation, its period is thirty (30) days for each month, and an existing subscription is extended from its expiry date.

C. Method of Payment and Activation

Payment is made by bank transfer to the Operator's announced account, or through a licensed payment gateway announced upon its activation. The User undertakes to state the transfer reference and to send proof of payment, and no Credit or subscription is activated without a documented transfer reference. The Credit or subscription is activated manually within a reasonable period not exceeding five (5) business days from receipt of the transfer, with the User being notified. Images of the receipts sent by the User are kept with the billing record for the period set out in Article (8-7).

D. Invoices

The Operator issues, in its full legal name set out in the Document Details card, an electronic invoice for every amount it receives from the User in return for a subscription, package, or service on the Platform. As long as the Operator is not registered for value added tax, the invoice is a non-tax invoice that does not include tax, and this is stated in its body. Upon registration for tax, electronic tax invoices compliant with the requirements of the Zakat, Tax and Customs Authority (ZATCA) are issued from the date of registration without the need to amend this document, and tax is added to the announced prices unless they are stated to be inclusive.

The User undertakes to provide correct billing details (the legal name or trade name, the number of the Commercial Register (CR) or Freelance Certificate, the tax number if any) before the activation of any paid service, and bears sole responsibility for their correctness.

E. Refunds and Remedy for Interruption

Amounts paid are non-refundable after activation and the consumption of any part of the Credit or quota, except in the following cases:

1. The User requests a refund within fourteen (14) days of the activation of the subscription without having consumed any of their quota, in which case the amount is refunded in full.
2. The service could not be activated within the period set out in paragraph (C) for a reason attributable to the Operator, in which case the amount is refunded in full.
3. The service ceases entirely for more than seven (7) consecutive days for a reason attributable to the Operator, in which case the subscriber has the choice between extending their subscription or the validity of their package by the period of the cessation in accordance with Article (12-3), and a refund of the amount in proportion to the remaining period or the unconsumed quota.
4. The Operator discontinues the service or suspends it entirely in accordance with Article (12-3) before the expiry of a paid subscription or package, in which case the amount is refunded in proportion to the remaining period or the unconsumed quota, and this is the Operator's sole obligation towards the subscriber in this case.

As for a total cessation exceeding three (3) consecutive days without exceeding seven (7) days, its remedy is the extension of the subscription or the validity of the package by the period of the cessation in accordance with Article (12-3), without a refund.

The refund is made by bank transfer to the account from which the payment was received within fifteen (15) days of the request.

F. Fate of the Paid Credit

The paid Credit lapses upon the expiry of its announced validity, or upon termination of the account at the User's request, or upon its suspension due to a serious breach in accordance with Chapter Fourteen, without a refund, subject to what is set out in paragraph (E).

Article (5-11): Credits and Operational Quotas

1. Upon completing their registration, the User is granted an opening Credit of search operations, and earns additional Credit in accordance with the Invitation Program in Article (5-12). The value of the opening Credit, the rewards, and the quotas are announced within the channel at the time of granting. Credits granted without consideration are an operational grant and not a vested right; the Operator may amend their values for the future, reduce them, or cancel them at any time by notice through the Official Channels, including upon the transition to fees in accordance with Article (5-10), without this being deemed a Material Amendment in accordance with Article (15-2) and without any compensation. None of this has any effect on a paid Credit or the quota of a paid subscription.
2. One (1) search operation is deducted for every request that returns results, and an Internet Search is counted with the weight of two (2) operations due to its higher cost. No Credit is deducted for a search that returned no results or could not be completed, and whatever was reserved for it is returned automatically.
3. Search operations are subject to Operational Quotas that protect the continuity of the service, currently including: an individual monthly ceiling for Internet Search, a general daily ceiling for it at the level of the Platform after which searching continues in the Platform's database, a monthly quota for the paid subscriber, and a daily ceiling on the number of requests that reach a single Supplier. Their values are announced within the channel and may be amended by notice.
4. Credits and quotas are usage counters with no monetary value; they are not transferable between accounts, non-refundable, and non-inheritable, and they lapse upon termination of the account or its suspension due to a serious breach. Promotional Credit is consumed before the paid subscription Credit or together with it, as announced by the Platform.
5. Exploiting Credits or quotas by automated means, multiple accounts, or sham requests in accordance with Article (5-4) is prohibited, and this is deemed a serious breach entitling the Operator to cancel the Credit earned and suspend the account in accordance with Article (14-2).

Article (5-12): The Invitation Program and the Guaranteed Request

1. Every User has an invitation link with a fixed code displayed to them within the channel, and they may share it with the Suppliers and Buyers they know, on their own responsibility and without causing annoyance, in accordance with Article (7-11). The Invitation Code of the Registered Supplier is the same as the verification code set out in the Business Card in accordance with Article (6-9); the Buyer may verify the status of any Supplier by sending this code to the Platform's channel in the format "تحقق RS-XXXX" ("Verify RS-XXXX"), and the reply is as described in Article (6-9).
2. Invitation reward for the Buyer and the Supplier: the inviter is granted a Credit of search operations at the announced value for every Supplier who completes the registration of their business through the inviter's link, and no Credit is granted for the mere entry of an invitee or for the registration of a Buyer. Whoever shared a Supplier's number within the professional group or through the Platform is deemed that Supplier's inviter if that Supplier later registers themselves, as announced by the Platform. The Operator may set a ceiling on the number of rewarded invitations or amend the value for the future by notice.
3. The Guaranteed Request for the Supplier: the visible Registered Supplier with a specified category is granted one (1) Guaranteed Request for every User, whether a Supplier or a Buyer, who completes their registration through the Supplier's link, subject to an announced cumulative ceiling. The Guaranteed Request means exclusively: including the Supplier in one additional seat in the distribution of the first approved Quotation Request that matches its category after it is earned, even if the batch is complete or the Supplier has reached its daily ceiling, provided that it is among the actual matching results of the request. The Guaranteed Request does not guarantee the existence of requests, nor a date, nor a reply from the Buyer, nor a contract, and it is consumed upon delivery of the request to the Channel Provider for sending.
4. Notification: the inviter is notified of the name of the invitee's business or their name as they registered it upon the completion of their registration through the inviter's link, and the invitee is notified of the name of the person who invited them upon their entry through the link; the basis of this notification is the implementation of the provisions of this program, which both parties accepted by accepting these Terms, in accordance with Article (8-14) First. The invitee may object to their inviter being notified of their name upon registration, in which case the inviter is not notified of the name, while the reward continues to be counted for them.
5. Credits and Guaranteed Requests are operational tools with no monetary value, non-transferable and non-refundable, and the Operator may amend or discontinue the program by notice through the Official Channels while honouring what was earned before the notice within a reasonable period. Whatever was earned through self-invitation, fictitious accounts, accounts belonging to the same entity, sham registrations, or automated means is cancelled, and this is deemed a serious breach in accordance with Article (14-2).

06Chapter Six: Special Provisions for Suppliers

The provisions of this Chapter apply to the Registered Supplier alone, within the meaning set out in Chapter Two and Article (6-1). Articles (6-2) to (6-4), concerning price quotations, their acceptance and Purchase Orders, are read in light of Article (3-5), which suspends the operation of the provisions of the offer cycle until the Organized Offers Service is activated and announced within the channel.

Article (6-1): Qualifications of the Registered Supplier

For an entity to be registered as a Supplier on the Platform, it must satisfy the following conditions and declare them upon registration:

1. That it is a licensed commercial entity in the Kingdom of Saudi Arabia, holding a valid Commercial Register (CR) or a valid Freelance Certificate.
2. That it is registered for tax with the Zakat, Tax and Customs Authority (ZATCA), where its activity so requires.
3. That it provides correct and up-to-date data (the name of the business, the Commercial Register (CR) or Freelance Certificate number, the contact representative and their number, and the categories and cities it serves), and that it provides, upon the Operator's request, evidence of the tax number, the address and any special licences, if any.
4. That it has the actual and lawful capacity to fulfil requests in the categories in which it registers.
5. That it complies with the laws of the Kingdom, including the Competition Law, consumer protection, tax, customs and the Anti-Commercial Fraud Law.

The Platform relies on the Supplier's declaration and on the automated reading of the documents it submits in accordance with Article (3-6); it does not verify with the issuing authority, and the Supplier alone bears the consequences of any incorrect declaration in accordance with Article (5-1).

The status of "Verified Supplier (CR matches name)", within the meaning set out in the definition of the "Verified Supplier" in Chapter Two and Article (3-6), is granted only to a Supplier who has submitted a Commercial Register (CR) whose validity it declares; a holder of a Freelance Certificate is registered and appears without this status.

This Article does not apply to Businesses Listed from Public Sources that have not registered on the Platform; their data and the rights of their owners are governed by Article (8-15).

Article (6-2): Supplier Obligations - Prices and Offers

• Maintaining the accuracy of the price list and updating it as soon as any price or condition changes.
• Full and explicit disclosure of delivery terms, the minimum order, the validity period of prices, and any other relevant conditions.
• Clearly specifying the validity period of each Offer.
• Not providing misleading or inaccurate information about the product, the price or the conditions.

Article (6-3): Supplier Obligations - Dealings

• Responding to Quotation Requests within the Agreed Period.
• Honouring the validity of the submitted Offer. An Offer may not be withdrawn or amended after its acceptance by the Buyer except in cases of gross error in accordance with Article (6-4) below.
• Complying with the delivery terms announced in the Business Card and the Product Catalogue, or in the submitted Offer.
• Communicating professionally with Buyers, in a manner that preserves the reputation of the Supplier and the Platform.
• Executing the Purchase Orders issued by Buyers on the basis of accepted Offers, in accordance with the agreed conditions.

Article (6-4): Technical Error in the Offer

The Supplier is bound by the submitted Offer once it has been accepted by the Buyer and a Purchase Order has been issued on the basis of it, provided that the Offer was displayed correctly and in conformity with the Supplier's approved price list at the time of its submission.

A "gross technical error" in a price quotation is defined exclusively as one of the following cases:

• An error in which the displayed price deviates by more than twenty per cent (20%) from the approved price in the Supplier's price list at the time of the Offer.
• An error in which the displayed quantity exceeds by more than one hundred per cent (100%) the quantity actually available with the Supplier.
• An error in the unit of measurement or the currency (for example: riyal instead of dollar, kilogram instead of tonne, pack instead of carton).
• Displaying an expired price that was not updated in the system despite the Supplier's documented attempt to update it.

Where the occurrence of a gross technical error under one of the above criteria is established, the Supplier is entitled to cancel the Offer within two (2) business hours of the Buyer's acceptance, or until ten o'clock in the morning of the following business day, whichever is longer, by written notice to the Platform and the Buyer through the Official Channels, together with evidence establishing the error.

Cancellation after the expiry of this period requires the Buyer's express consent, and the Supplier remains responsible for the Offer if this consent is not granted. Repeated claims of technical error (more than three times in a year) are deemed an indicator of gross negligence and expose the Supplier to suspension.

Article (6-5): Supplier Obligations - Ethics

• Not offering bribes, gifts or personal commissions to the Operator's employees or to Buyers with the aim of influencing purchasing decisions or favouring the Supplier.
• Not using Buyers' data received through the Platform for any purpose other than responding to their request, and not contacting them with unsolicited offers or repeated messages.
• Not attempting to influence the Offers of other Suppliers by any means, whether lawful or unlawful.
• Not using Buyers' data for marketing purposes outside the Platform without their express consent.
• Not participating in any collusive agreement with other Suppliers to raise prices, divide markets or restrict competition.

Article (6-6): Rights of the Registered Supplier

The Platform endeavours to deliver Quotation Requests that are likely to match the Supplier's registered categories and cities, on the basis of the information available at the time of the request and in accordance with the criteria of Article (3-7). The Platform does not guarantee the accuracy of matching to a specified percentage nor any number of requests, and the Supplier is free to ignore any request that does not interest it without any obligation.

The Registered Supplier is entitled to:

• Appear to matching Buyers and receive their requests automatically after consenting to appear, and to stop or resume this at any time in accordance with Article (6-10).
• Obtain a Business Card and a digital Product Catalogue in accordance with Article (6-9), and an invitation link and Guaranteed Requests in accordance with Article (5-12).
• Upload its price quotations, catalogues and documents to be kept in its profile, and update them or request their deletion at any time.
• The Platform may in future make available summaries of its activity or ways of displaying its prices or Buyers' feedback; this is announced upon its launch and is not deemed a right before the announcement.
• Request the deletion of its data from the Platform in accordance with Article (8-8), subject to the retention of what the laws require to be retained in accordance with Article (8-7).
• Withdraw from the Platform at any time without notice period and without fees in accordance with Article (14-1), by writing its request in the same conversation in the messaging application or by writing to the official email; and stop the appearance of its business data in Search Results in accordance with Article (6-10).

After the termination of the Supplier's account, it is free to deal directly with any party it has come to know, and it is not obliged to respond to requests that reached it before the termination. The confidentiality obligations set out in Article (8-11) remain in force for their stated duration.

Article (6-7): Supplier Obligations - Product Liability

The Supplier is fully and solely responsible for the safety of its products, their conformity with the laws, and the guarantee of their quality. The Operator bears no liability whatsoever in this regard.

The Supplier is in particular obliged to:

• Ensure the conformity of the products with the applicable Saudi and international specifications.
• Maintain the validity of the products and not sell expired products.
• Obtain the licences necessary for selling its products (such as food and drug licences and customs licences).
• Bear full liability for any damage arising from its products.
• Insure its commercial activity sufficiently to cover the potential risks.

Article (6-8): Operational Data about the Supplier

The Platform retains operational data about each Registered Supplier for the purposes of operation, support and quality control, including: the number of requests that reached it and their dates, its uploaded price quotations and catalogues, its verification and appearance status, its Credit of Guaranteed Requests, and any report received about it in accordance with Article (8-12). This data is not included in the Internal Statistics, within the meaning set out in Chapter Two, except in an aggregate form that is not attributed to it.

This data is not published to Buyers or to other Suppliers in a detailed form that affects its reputation, is not sold to any third party, and is not used to build predictive models that analyse its behaviour individually.

The Platform may make available to the Supplier a summary of its activity when this becomes technically available; it is announced within the channel and is not deemed a right before the announcement.

Article (6-9): The Business Card and the Product Catalogue

The Platform issues to the Registered Supplier, at its request or upon completion of its registration, the "Business Card" and a Product Catalogue in digital form, within the meaning set out in Chapter Two and with the fields stated in its definition there. The IBAN is included in it only if the Supplier has provided it itself, in text or in a bank letter, and it bears the phrase "Verified Supplier (CR matches name)" only when this is due within the meaning set out in Chapter Two and Article (3-6).

The card is delivered to the Supplier alone, and it may publish or share it under its full responsibility. The Supplier may request a copy without the IBAN or without official numbers through the channel or the official email.

The Business Card differs from the "Search Result" that appears to the Buyer; the Platform displays in Search Results only the data specified in the definition of the "Search Result" in Chapter Two in accordance with Article (5-8), only the last four digits of the Commercial Register (CR) number appear in it as an indication of the verification status, and neither the tax number nor the IBAN appears in it.

The Business Card, Quotation Request Forms and all other documents generated by the Platform from the User's data are electronic identification documents reflecting what the User provided at the time of their issuance; they are not deemed a guarantee or endorsement by the Operator, do not substitute for statutory verification with the competent authorities, and their amendment or use after the suspension or termination of the account is prohibited. Invoices for the Platform's fees are governed by Article (5-10).

The Buyer may verify the status of any Registered Supplier by sending its Invitation Code stated in the Business Card to the Platform's channel in the form "تحقق RS-XXXX" ("Verify RS-XXXX"), and the reply states the status in one of the following four phrases without disclosing any additional data: "Verified Supplier in RASA — Commercial Register (CR) matching the business name, and currently visible to Buyers", or "Registered Supplier in RASA (not verified by a CR) — currently visible to Buyers", or "Registered Supplier in RASA — not currently visible to Buyers", or "The code does not exist in RASA".

Article (6-10): Consent to Appear and Its Withdrawal

After completing the business data, the Supplier is asked for its independent consent to the appearance of its business data, as specified in the definition of the "Search Result" in Chapter Two and Article (5-8), to Buyers in RASA and to receiving matching Quotation Requests automatically, and to the use of that data in the services connecting Suppliers with Buyers that Nusuq develops and announces in the future. This consent is the basis of appearance in accordance with Article (8-14), and it is independent of the acceptance of these Terms.

The data of a Supplier who does not consent is kept without being displayed, no automated request reaches it, and it may activate appearance later by a request in the same conversation in the messaging application, or by writing the word that the Platform announces within the channel whenever it is made available. The Platform sends requests automatically only to those who have consented to appear.

The Supplier may stop its appearance at any time by writing the word "إخفاء" ("hide") in the channel conversation, whereupon it stops as soon as it is executed, or by a request in the same conversation or to the official email, which is executed within five (5) business days of its receipt; this is a period specific to stopping appearance and does not exceed the general time limit in Article (8-8). The record of consent and withdrawal is retained in accordance with Article (8-7).

Withdrawal of consent to appear does not affect the Supplier's registration, its Credit or its obligations; however, the Guaranteed Request under Article (5-12) is neither granted to nor redeemed for a Supplier who is not visible.

07Chapter Seven: Provisions Specific to Buyers

The provisions of this Chapter apply to the Buyer in the capacity set out in Chapter Two. What is stated herein regarding the collection and acceptance of Offers through the Platform pertains to the Organized Offers Service, and those provisions are suspended until that service is activated in accordance with Article (3-5); all other provisions remain in force in the current phase of operation (search and connection).

Article (7-1): Buyer Eligibility

The Platform is directed exclusively at professional Buyers. For an entity to be registered as a Buyer on the Platform, it must satisfy the following conditions:

1. It must be a company, an establishment, or a licensed entity having legal personality in the Kingdom of Saudi Arabia, or a sole trader holding a valid Freelance Certificate.
2. The individual User must be an authorised representative of that entity, or the sole trader in person.
3. The Purchase Orders it issues must be legally binding on the entity it represents.

Personal or consumer (non-commercial) requests are not served by the Platform, and requests issued by individuals in their personal capacity are not accepted.

Free registration does not require attaching a Commercial Register (CR); the User declares their commercial capacity upon registration in accordance with Article (18-1). Before activating any paid service, the Operator is entitled to request the name of the business and its Commercial Register (CR) number or Freelance Certificate.

Article (7-2): Buyer Obligations - Requests

• To submit genuine Quotation Requests reflecting an actual and legitimate purchasing need of the business it represents.

Searching the Platform and viewing its results within the quotas set out in Article (5-11), and comparing Suppliers before taking a decision, constitute ordinary use of the service; completing a purchase is not a condition of such use, and the Buyer is not held accountable for it.

The Buyer is prohibited from sending Quotation Requests or messages to Suppliers without an intention to purchase, for the purpose of testing their prices, surveying the market, or soliciting their Offers for use in negotiations with others; and the systematic collection of Supplier data or Search Results for a competitive purpose is prohibited, including the use of Search Results to build a supplier database, to republish them, or to sell them, as set out in Article (5-4). A breach of this clause constitutes a serious breach permitting suspension of the account in accordance with Article (14-2).

• To provide accurate and complete information on the items, quantities, delivery terms, and the estimated budget, if any.
• To avoid repeated requests for the same purpose within a short period, unless the requirements have materially changed.

Article (7-3): Buyer Obligations - Handling Offers

These obligations apply to every Offer that reaches the Buyer from a Supplier as a result of contact initiated through the Platform, whether it reaches the Buyer directly outside the Platform or through the Organized Offers Service once activated in accordance with Article (3-5):

• To review submitted Offers in good faith, and to take the decision on the basis of professional and declared criteria.
• To respect the validity of submitted Offers. Negotiation after acceptance of an Offer is permitted only within reasonable limits and with the Supplier's consent.
• To honour the Purchase Order as soon as it is issued, and to refrain from arbitrary cancellation.
• To pay invoices on the dates agreed with the Supplier.

Sharing the Offers of particular Suppliers with other Suppliers with the aim of pressuring prices or disclosing competitors' prices is prohibited. Nor may the Buyer collude with other Buyers to boycott a Supplier or a category of Suppliers, coordinate fictitious Quotation Requests to pressure prices, or exchange a Supplier's price information with the intent of influencing competing Offers. Such conduct constitutes unlawful competition and exposes the account to suspension.

Article (7-4): Buyer Obligations - Ethics

• Not to request bribes, personal commissions, or any unofficial consideration from Suppliers.
• Not to use Supplier data outside the scope of dealings through the Platform.
• Not to favour a Supplier on the basis of personal relationships where such favouritism is detrimental to the interests of the entity the Buyer represents.

Article (7-5): Buyer Rights

• To obtain Search Results for Suppliers matching the categories of its request and its city, drawn from the three categories specified in Article (3-6), without any guarantee of a specific number of results, of a response from any Supplier, or of a specific level of quality.
• To view the Search Result for each matching Supplier by the fields specified in the definition of "Search Result" in Chapter Two, and no others.
• To choose the method of sending its request: by itself through the prepared links in accordance with Article (7-11), or automatically to matching Registered Suppliers, and to change its choice at any time in accordance with Article (5-8).
• To request an Internet Search where no match can be made, within the quotas announced in Article (5-11).
• To obtain a digital Quotation Request Form in a sendable format, and to obtain an invitation link and Credit in accordance with Articles (5-11) and (5-12).
• To disregard any result or Offer it receives without giving a reason; the Buyer is bound to no Supplier except by what it concludes with that Supplier directly.
• To withdraw from the Platform at any time without notice period and without fees in accordance with Article (14-1), and to request deletion of its data in accordance with Article (8-8), subject to the retention of whatever the laws require to be retained in accordance with Article (8-7).

Article (7-6): The Quotation Request Cycle

The provisions of this Article apply to the Organized Offers Service once activated in accordance with Article (3-5). In the current phase of operation, the Buyer's request reaches Suppliers by one of the two methods set out in Article (5-8), and all subsequent contact, negotiation, and contracting takes place between the two parties directly outside the Platform in accordance with Article (4-2).

Once the service is activated, the request cycle proceeds according to the following steps:

1. The Buyer issues a Quotation Request through the channels approved on the Platform, specifying the items, quantities, and terms.
2. The Platform makes the request available to Registered Suppliers whose operational categories match the request.
3. Offers are collected within twenty-four (24) hours of sending the request, or as soon as three (3) Offers are received, whichever is earlier.
4. Offers are presented to the Buyer in a standardised comparative format, including the price, terms, and validity period.
5. The Buyer is free to select the suitable Offer, to reject all Offers, or to request a new quotation round.

The Platform does not guarantee the number of Offers received. In some cases only one Offer may be received, or no Offer at all, particularly in rare categories or exceptional requests. The procedures for the case where no Offer is received are set out in Article (1-3a).

Article (7-7): The Purchase Order and Electronic Acceptance of the Offer

In the current phase of operation the Platform does not provide an acceptance button for Offers, and the contract between the Buyer and the Supplier is concluded on whatever they agree directly outside the Platform in accordance with Article (4-2). The following two paragraphs apply once the Organized Offers Service is activated in accordance with Article (3-5), and the recommendation to issue a detailed formal Purchase Order remains in force in all cases.

The Buyer's acceptance of an Offer through the Platform, by pressing the acceptance button or its equivalent, creates a direct contractual agreement between the Supplier and the Buyer on the terms of the accepted Offer, without the Platform being a party to it. The Platform's responsibility is limited to providing the technical tool for acceptance. The Platform does not guarantee performance of the contract, and does not intervene in any contractual dispute between the two parties except to the extent required by the laws.

This contractual formation is founded on the Saudi Electronic Transactions Law, which grants documented Electronic Consent evidentiary force. It is recommended that a detailed formal Purchase Order be issued containing, as a minimum:

• The precise quantity required.
• The agreed price (inclusive of value added tax, where applicable).
• Delivery terms (place, date, method of transport).
• Payment terms (period, method, bank account).
• Any special terms (warranty, returns, replacement).

Article (7-8): Electronic Invoicing and Tax Obligations

The Supplier shall issue an approved electronic invoice through the "Fatoora" platform of the Zakat, Tax and Customs Authority (ZATCA), in accordance with the requirements of the Saudi electronic invoicing regulations (Phase Two - Linkage and Integration), where its activity so requires.

The Buyer shall verify the validity of the electronic invoice received before payment. The Platform bears no responsibility for:

• The Supplier's failure to issue a valid electronic invoice.
• The tax consequences for any party.
• Disputes between the Supplier and the Buyer concerning invoices.

Invoicing and payments take place between the Buyer and the Supplier directly, and do not pass through the Platform. Should a dispute arise, it is resolved between the two parties, and the Platform intervenes only as an optional amicable intermediary at the request of both.

Article (7-9): The Buyer's Responsibility for the Purchase Order

As soon as the Buyer issues a Purchase Order on the basis of an accepted Offer, it enters into a direct and independent legal relationship with the Supplier. The obligations of payment and receipt fall upon it in accordance with the agreed terms.

The Platform bears no responsibility for:

• The Buyer's failure to pay the amount to the Supplier on time.
• The Buyer's refusal to take delivery without a legitimate reason.
• Disputes over product quality or quantities after delivery.
• Damages arising from the Buyer's improper performance of its contractual obligations.

Article (7-10): Confidentiality and Supplier Data

The Buyer shall maintain the confidentiality of the commercial information of Suppliers to which it gains access by virtue of its dealings through the Platform, as provided in Article (8-11).

Article (7-11): Messages Sent by the Buyer Itself and Prepared Links

The Platform may prepare for the Buyer the text of a contact message, a Quotation Request Form, or an invitation message, together with a link that opens a conversation with the recipient on the messaging application from the Buyer's own account. The draft includes the Buyer's name as registered and a description of its need, and the Buyer may edit it, delete whatever it wishes from it, or refrain from sending it.

The Buyer is the sole sender of these messages and is responsible for their content, their timing, and the appropriateness of directing them to a business that has not requested them. The Platform sends nothing from its own number through this route, does not guarantee a response from the recipient, and has no visibility of what takes place after the conversation is opened.

The Buyer shall not use the links or drafts to send nuisance, repetitive, or non-commercial messages, or messages contrary to the laws or to the policies of the messaging application; this obligation is read together with the prohibition on nuisance content set out in Article (5-4), and the Operator may suspend the account of anyone reported for such conduct in accordance with Article (14-2).

Any contact or contracting arising from these messages is a direct dealing between the two parties outside the Platform in accordance with Article (4-2).

The provisions of this Article apply to every User for whom the Platform prepares a message or a link in the same manner, even if that User is a Supplier.

08Chapter Eight: Data Protection and Privacy

This Chapter is the privacy policy of the RASA Platform. It sets out for you what data we collect and from whom, why we process it and on what legal basis, with whom we share it and where it is stored and processed, its retention periods, the security measures actually in place, your rights and how to exercise them, our messages to you and how to stop them, and what we do when a breach occurs.

The data controller is the Operator identified in the Document Details card: Nasaq Alhadithah Lilkhadamat Almahdudah Establishment (a sole proprietorship), Commercial Register (CR) No. 7054964734 in the Kingdom of Saudi Arabia, its city of registration being Yanbu Industrial and the centre of management of its activity being the city of Jeddah, and its address for written correspondence is the national address stated in the Document Details card once fixed therein; it is referred to in this Chapter as the "Operator" or "Nusuq". The contact point for everything relating to your data is set out in Article (8-9).

The privacy policy is also published as a standalone page on the Operator's Official Page at nusuq.sa (path /ar/privacy-policy, with its English translation at /en/privacy-policy), generated from the full text of this Chapter with all its articles and the same numbering, to facilitate reference; in the event of any discrepancy between the standalone page and the text of this Chapter, the text of this Chapter prevails in accordance with Articles (1-3) and (17-9). Every reference in this Chapter to an article or chapter outside Chapter Eight is a reference to the Terms and Conditions published on the Official Page, and is to be read together with them.

Key principles of how we handle your data

• We collect what the service needs, we never sell your data under any circumstances, and we do not show you advertisements of other parties.
• RASA operates with artificial intelligence systems and hosting outside the Kingdom (Meta for the WhatsApp channel, OpenAI, Anthropic and Hostinger; their names in Latin script and their roles are in Article (8-13)); your requests and documents are sent as they are in order to be read, and your data is stored primarily outside the Kingdom with a daily backup inside it, because this is the core of the service, and its basis is the agreement between you and the Operator rather than a separate consent.
• Your contact data is not shared with another User except within the limits you have agreed to in these Terms.
• You have full rights: access, rectification, deletion, withdrawal of consent to whatever is optional, immediate stopping of our messages, and complaint to the Saudi Data and Artificial Intelligence Authority (SDAIA).
• We maintain a supplier directory whose data was gathered from professional group postings and public sources; anyone appearing in it may request removal, which is carried out within five (5) business days.

This summary is provided for convenience; the binding text is the articles of this Chapter.

Article (8-1): Data Collected and Its Sources

First: Data you provide yourself

1. Identification data: name, mobile number (which is the identifier of your account in the messaging application), email address if you provide it, business name and city.
2. Business data: the Commercial Register (CR), the tax number, the activity and sector, the address, and whatever the Platform extracts from the documents you upload.
3. Supplier data: operational categories, cities served, catalogues, price lists and product images, and the IBAN number if the Supplier chooses to add it to the Business Card.
4. Buyer data: the texts of requests, the images and files sent with the request, quantities and specifications.

Second: Data generated by your use

1. The conversation log with RASA: your messages, the Platform's replies and the status of your account at each message, for the purposes of support, quality control and the handling of complaints.
2. The usage log: searches and their Credits, requests sent, the items requested linked to your business, the Internet Search results linked to your request, invitations sent and their status, and invoices.
3. Technical data: the messaging account identifier, message identifiers and their times, and the display language. The Platform does not collect the internet address of your device, the device type or the operating system through the WhatsApp channel, because the Channel Provider does not make them available to it. As for the data of Visitors to the Official Page that reaches the hosting server logs automatically, this is set out in Article (8-13).

Third: Data received by us from someone other than its subject

The Operator maintains a supplier database containing commercial contact data of businesses and their representatives who did not register themselves, received from postings by members of a professional procurement group, from contact files and supplier lists received by the Operator, from company websites and public directories, and from live Internet Search. The Operator also retains commercial contact data (the name as received, the contact number and the business, if any) of members of professional procurement groups and of hospitality entities received by it from the same sources, for the single purpose of the one introductory message in accordance with Article (8-16) Second, and the limits and rights in Article (8-15) Fourth and Fifth apply to it. Details of this database, its sources and the rights of its data subjects are in Article (8-15).

Article (8-2): Purposes of Processing

Data is processed exclusively for the following purposes:

1. Operating the supplier search service: understanding, extracting and organising your request, matching it against the supplier database and against public sources on the internet through Internet Search, and displaying the Search Results to you in accordance with Articles (3-6) and (3-7).
2. Delivering the Buyer's request to the matching Registered Suppliers who have consented to appear in accordance with Article (6-10), and enabling the Buyer to contact unregistered Suppliers itself in accordance with Article (7-11).
3. Registering and verifying businesses: extracting the data of uploaded documents, inferring the business's sector from its profile if uploaded, and issuing the Business Card, the Product Catalogue and the request forms in accordance with Article (6-9).
4. Managing Credits and Operational Quotas in accordance with Article (5-11), and operating the Invitation Program and the Guaranteed Request in accordance with Article (5-12): linking the invitee's registration to the person who invited them, informing the inviter of the invitee's business name or their name as they registered it unless they object, informing the invitee of the name of the person who invited them, and granting the Credit or Guaranteed Requests due.
5. Managing subscriptions and issuing invoices in accordance with Article (5-10), and fulfilling statutory and accounting obligations.
6. Internal operational supervision: a dashboard viewed by the Operator showing requests, their owners and the items requested, for quality control, the handling of complaints and support.
7. Building and auditing a unified item catalogue: compiling the names of items requested by Buyers or offered by Suppliers and reviewing them automatically (by the artificial intelligence provider mentioned in Article (8-13)) and by humans, without the names and mobile numbers of persons when sent for auditing, together with automated auditing of matching quality.
8. Improving search: saving Internet Search results together with the request that produced them for reuse in similar requests, within the periods in Article (8-7).
9. Supplier-to-Buyer connection services that Nusuq develops in the future and announces, within the limits of the consent to appear in accordance with Article (6-10).
10. Communicating with you: service messages about your account, your requests and the Platform's services, and introductory and marketing messages about RASA in accordance with Article (8-16).
11. Security and the prevention of misuse, and keeping the consent log and the log of opt-outs from messages.
12. Internal Statistics on the Platform's performance in the sense defined in Chapter Two.

Data is not processed for any purpose not mentioned here except after this Article has been updated and you have been notified in accordance with Chapter Fifteen of the Terms and Conditions (the document amendment mechanism).

Article (8-3): What Is Not Done with Data

1. The data of Users and the data of businesses listed in the supplier database is not sold to any third party, under any circumstances, whatever the financial consideration. This is an absolute commitment without restriction or exception.
2. Your data is not used to show you advertisements of other parties, and it is not handed to any advertiser or entity for its advertising purposes. RASA's introductory messages about its services are governed by Article (8-16) and you may stop them immediately.
3. Your contact data is not disclosed to another User except within the limits you have agreed to in these Terms: Article (5-8) for contact data and requests between Buyers and Registered Suppliers, Article (5-12) for informing the inviter and the invitee, and Article (6-10) for the consent to appear. The commercial contact data of unregistered businesses in the supplier database is displayed in accordance with Articles (3-6) and (8-15).
4. Data is not analysed for purposes not mentioned in Article (8-2).
5. No predictive models or behavioural profiles are built about any particular User; the following are not deemed to be such: automated matching between a particular request and Supplier categories, the calculation of Credits and Operational Quotas, and the inference of a business's sector and activity from its profile if uploaded optionally.

Article (8-4): Processing by Artificial Intelligence Systems and Transfer of Data Outside the Kingdom

First: What is sent and why

The RASA service relies at its core on artificial intelligence systems operated by providers outside the Kingdom of Saudi Arabia (their names and roles are in Article (8-13)). The following data is sent to these systems, as it is and without prior anonymisation, to the extent necessary to perform the service: the texts of your requests and your messages relating to the request; the images of items and lists that you send; and the documents you upload yourself (the Commercial Register (CR), the tax certificate, the business profile, catalogues, price lists, and any other letter or file you choose to upload), including the names and numbers they contain. The purpose of sending is to read these materials, extract their data, classify your business, match items and search for Suppliers; it is technically impossible to read a document or an image without sending it in full.

Second: What we do not ask for, and our advice to you

The Platform does not ask for passwords or payment card data, and does not ask for bank account data other than what the Supplier chooses to include in the Business Card (the IBAN number). Any document you upload that contains bank data or data you do not want processed outside the Kingdom is processed like all other documents; therefore upload only what the service needs, and write the IBAN number as text if you wish to add it, instead of sending the full bank letter.

Third: The safeguards actually in place

Content is transmitted over an encrypted connection; the providers are used under the terms of their programming interfaces for commercial use, which prohibit the use of your data to train their models and specify a temporary, time-limited retention for monitoring purposes; and your data is neither published nor sold to any party. The Operator keeps the documents of these contractual terms and allows you to request a copy of them through the contact point in Article (8-9), and prepares a documented assessment of the risks of transfer outside the Kingdom and updates it when the providers change in accordance with Article (8-13).

Fourth: The legal basis

This processing and this transfer are necessary for the performance of the agreement between you and the Operator under which you request the service (Article Six, Paragraph Two, of the Personal Data Protection Law (PDPL)), and the transfer outside the Kingdom is carried out in accordance with Article Twenty-Nine of the Law and the Regulation on the Transfer of Personal Data Outside the Kingdom for the purpose of performing this agreement, with the contractual safeguards mentioned above. Accordingly, this transfer does not rest on your separate consent, and it is not possible to continue using RASA while objecting to it. You retain the right at any time to end your use and to request the deletion of your data in accordance with Article (8-8), and whatever rests on your optional consent remains withdrawable in accordance with Article (8-14).

Article (8-5): Data Sharing Within the Platform

The details of what is shared between Buyers and Registered Suppliers are set out in Articles (5-8), (5-12) and (6-10) of the Terms and Conditions, and what is displayed from the supplier database about unregistered businesses is set out in Article (8-15).

The general principle: the Buyer sees in the Search Results the Supplier's commercial contact data in order to contact it itself; the data of a Registered Supplier is displayed only to Buyers whose requests match its categories and after its consent to appear; the Buyer's data is sent only to the Registered Suppliers matching a particular request and upon the Buyer's approval, so that the Supplier receives the name of the buying business, the details of its request and the contact data specified by the Buyer; and the data of any party is not made available to other Users outside this framework in a manner that infringes its commercial privacy.

Article (8-6): Security Protection

The Operator applies organisational and technical measures appropriate to the size of its activity and the nature of the data, which are currently:

1. Encryption in transit via the approved secure encryption protocols between the messaging application, the Channel Provider, the Platform's servers and the artificial intelligence providers.
2. Restricting access to the server by an encryption key for a single designated operator, protecting the internal supervision dashboard with an access code, and limiting the viewing of data to the purposes of operation, support and quality control.
3. Restricting the file types accepted for upload (portable document files, images and spreadsheets of specified types) and rejecting all others.
4. Rotating daily and weekly backups on the server and a daily copy on a secured device belonging to the Operator, subject to the same access restrictions, with the Operator working on encrypting their archive.
5. A consent log, a log of opt-outs from messages and a conversation log, to track any unusual use.
6. Periodic review of these measures as the Platform grows, and updating of this Article when a new measure is added.

The Operator does not claim to apply enterprise standards that it does not actually apply, and does not guarantee absolute protection against intrusion. Details of breach notification are in Article (8-10).

Article (8-7): Data Retention Period

1. Account data, the Business Card, catalogues, product images and price lists: for the duration of the account; upon termination of the account or a deletion request, they are deleted from the operating systems within the period stated in Article (8-8), and disappear from the backups upon the lapse of an additional sixty (60) days in accordance with the backup cycle set out in item eight of this Article.
2. Uploaded verification documents (the Commercial Register (CR), the tax certificate, the IBAN letter and the business profile): retained for the duration of the account as evidence of the verification of the business; upon termination of the account or a deletion request, they are deleted from the operating systems within the period stated in Article (8-8), and disappear from the backups upon the lapse of an additional sixty (60) days in accordance with the backup cycle, while the data extracted from them remains with the account data. Documents uploaded without completion of registration are reviewed periodically and the Operator aims to delete them within ninety (90) days of their upload.
3. The conversation log with RASA, the log of items requested and the Internet Search results linked to requests: a maximum of twelve (12) months from their date, for the purposes of support, quality control and search improvement, after which they are deleted or anonymised by removing the name and mobile number from them.
4. Records of Quotation Requests and their dispatch to Suppliers: five (5) years after the end of the relationship.
5. Invoices, subscription and payment records and transfer receipts: ten (10) years after the end of the relationship in accordance with the commercial and accounting regulations.
6. The Electronic Consent log (Article (9-2)): not less than five (5) years, and it is exempt from deletion.
7. The log of opt-outs from marketing messages and the do-not-list-and-do-not-contact list (the contact number, the time of the request, its channel and its means): at least five (5) years from the last request, and for as long as the number exists in any contact list held by the Operator, so that the person who opted out is not targeted again and is not re-listed; it is exempt from deletion and is not deleted upon deletion of the account.
8. Backups: the daily backups on the server rotate every fourteen (14) days and the weekly ones every sixty (60) days, and the daily copy on the Operator's device is subject to the same cycle; accordingly any deletion applies to the backups automatically upon the lapse of sixty (60) days from its execution.
9. Dormant accounts: the Operator may treat an account that has not been used for twelve (12) consecutive months as a dormant account, and delete its basic data and its promotional Credits granted free of charge after notifying the User thirty (30) days in advance via their registered number, while retaining whatever records the regulations require to be retained in accordance with this Article. Paid Credits and subscriptions do not lapse through dormancy during their agreed validity period.
10. The hosting server logs of Visitors to the Official Page (the internet address and the browser type): a maximum of ninety (90) days in accordance with Article (8-13).
11. The records of unregistered businesses in the supplier database (Article (8-15)): twenty-four (24) months from the last update or contact, after which they are deleted or renewed from a documented source.

After the periods have elapsed, data is permanently deleted or anonymised for statistical analysis. If a law imposes a longer period, the longer period is adopted.

Article (8-8): Your Rights in Your Data and How to Exercise Them

Under the Personal Data Protection Law (PDPL), you have the following rights:

1. To access your stored data and obtain a copy of it in a structured format (an electronic spreadsheet or a data file) together with the files of your uploaded documents.
2. To rectify any inaccurate data; you may edit your business data directly from the "My Account" menu in the conversation whenever it is available.
3. To request the deletion of your data. Deletion covers: your account record, your uploaded documents, your Business Card and your Product Catalogue, the removal of your business from the supplier database if it was registered by you, and the removal of your name and number from the log of items requested and the conversation log. Excluded from it are: your Electronic Consent record (the identifier, the time and the version), the line of your opt-out from marketing messages if any, invoices and subscription records, and whatever the regulations require to be retained for the periods in Article (8-7).
4. To withdraw your consent to the consent-based processing operations mentioned in Article (8-14) Second.
5. To object to a particular processing operation, with an explanation of the effect of that on the service if the processing is necessary for it.

How to exercise them

The request is sent to the contact point in Article (8-9) from the mobile number or the email address registered in your account, or written in the RASA conversation itself (the word "خصوصية" ("privacy") or "حذف بياناتي" ("delete my data") displays the two request buttons to you). The Operator may verify the identity of the person making the request before executing it.

The Operator responds to and executes the request within the statutory period, which is thirty (30) days from its receipt, extendable by a further thirty (30) days in complex or multiple cases with notice to you of the extension, and aims to give an initial response within five (5) business days in ordinary cases. No fees are charged for the exercise of these rights.

If you are not satisfied with the response, you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) through its official channels.

Article (8-9): The Data Protection Contact Point

The approved contact point for everything relating to your personal data (requests for access, rectification, deletion, withdrawal of consent, objection and complaints) is the email address complaints@nusuq.sa, which is an email address on the Operator's official domain and is checked regularly.

The Operator itself performs the functions of this point, including supervising compliance, communicating with the Saudi Data and Artificial Intelligence Authority (SDAIA) and notifying any breach. If the Operator appoints an independent personal data protection officer in accordance with the appointment rules issued by the Authority, this is announced on this page and in the Messaging Channel, and the officer's name is provided on request. The response periods for your requests are set out in Article (8-8).

Article (8-10): Data Breach Notification

If the Operator becomes aware of a breach, leak or unauthorised access affecting personal data, it undertakes the following:

1. Notifying the Saudi Data and Artificial Intelligence Authority (SDAIA) within seventy-two (72) hours of becoming aware of the breach, whenever the breach may harm the data or its subjects or conflict with their rights, in accordance with Article Twenty-Four of the Implementing Regulation of the Personal Data Protection Law (PDPL).
2. Notifying the affected Users without undue delay, and within a maximum of five (5) business days of becoming aware, via the Messaging Channel or the registered email address, stating the nature of the breach, the data affected, the measures taken, and what the User is advised to do to limit the impact (such as being wary of impersonation messages in RASA's name, or contacting their bank if an IBAN number was affected).
3. Documenting the breach, its causes and the corrective measures in an internal record made available to the Authority on request.

Article (8-11): Unified Confidentiality

The following confidentiality obligations apply to all Users, and remain in force for a period of two (2) years after the termination of any account on the Platform:

• Not to disclose the data of other Users (Suppliers or Buyers) obtained by virtue of using the Platform.
• Not to use the commercial information of Suppliers or Buyers outside the framework of the dealings authorised through the Platform.
• To maintain the confidentiality of the details of Offers, their prices and their terms.

This Article repeals and replaces any earlier paragraphs relating to confidentiality in the other articles of this document, and is adopted as the unified reference for all confidentiality obligations.

Article (8-12): Notice and Takedown Mechanism

To protect the rights of the parties and prevent misuse of the Platform, the Platform applies a detailed notice and takedown mechanism:

A. Submitting the report

The reporting party must submit a written report through the Official Channels of the Platform, containing as a minimum:

• The full identity of the reporting party and their means of contact.
• A precise description of the reported content and its location on the Platform.
• The reason for the report (intellectual property infringement, fraud, defamation, deception, etc.).
• Documented evidence (certificate of ownership, court judgment, documents).
• A written undertaking as to the accuracy of the information and the bearing of the consequences of a false report.

B. The Platform's procedures

• Acknowledging receipt of the report within two (2) business days.
• Reviewing the report within ten (10) business days.
• Informing the reported party and giving them the opportunity to respond within five (5) business days; in cases of urgent danger or obvious infringement, the content is hidden as a precaution immediately after the initial review and the party is then informed.
• Making the decision: removal, suspension, or rejection of the report.

C. The Platform's right to reject the report

• Absence of the essential information.
• Failure to provide sufficient evidence.
• Proof that the report is false or made in bad faith.
• Use of the report as an instrument of unlawful competition.

D. Consequences of a false report

A reporting party who is proven to have submitted a false or misleading report bears full compensation to whoever was harmed, is referred to the competent authorities, and exposes their account to immediate suspension.

Article (8-13): Recipient Entities and Place of Processing

RASA's systems, databases and backups are hosted outside the Kingdom of Saudi Arabia, your messages pass through the infrastructure of the messaging application provider, and their contents are processed by artificial intelligence providers outside the Kingdom. That is, your data is stored and processed primarily outside the Kingdom, with a daily backup inside it. The current recipient entities and the role of each:

1. Meta Platforms (the WhatsApp Business application): operating the Messaging Channel; your mobile number, your account name and the content of your messages and media pass through it, and are subject there to its terms and privacy policy in its capacity as the Channel Provider in accordance with Article (3-9).
2. OpenAI: understanding the texts of requests, reading uploaded images and documents and extracting their data, and Internet Search for Suppliers.
3. Anthropic: periodic auditing of the item names proposed for the unified catalogue; item names are sent to it without the names and mobile numbers of persons.
4. Hostinger (the hosting provider, with the server in Manchester, United Kingdom): hosting the server, the data files and the daily and weekly backups.
5. A daily backup pulled to a secured device belonging to the Operator inside the Kingdom, subject to the retention periods in Article (8-7).

Visitors to the Official Page: when the Terms page or the Privacy page on nusuq.sa is opened, the internet address of the Visitor's device and their browser type reach the Operator's server logs at the hosting provider mentioned above automatically for security purposes, and these logs are retained for a period not exceeding ninety (90) days; the two pages do not load fonts or tools from external parties, so the Visitor's address does not reach any other party merely by browsing.

The legal basis for this transfer is the necessity of performing the agreement between you and the Operator (Article Twenty-Nine of the Personal Data Protection Law (PDPL) and the Regulation on the Transfer of Personal Data Outside the Kingdom) combined with the contractual safeguards of each provider, and the Operator prepares a documented assessment of the risks of this transfer and updates it when the providers change. You may request a copy of the providers' safeguards through the contact point in Article (8-9).

If a provider is replaced by another performing the same role within the categories above, this table is updated on the Official Page and Users are notified via the Messaging Channel, and this is not deemed a Material Amendment; whereas the addition of a new processing category is a Material Amendment subject to Article (15-2).

Article (8-14): Bases of Processing and What May Be Withdrawn

First: Processing necessary for the service

Its basis is the performance of the agreement with you or a statutory obligation, and it does not rest on a separate consent:

1. Creating your account and documenting your consent to this document.
2. Understanding your requests, matching them with Suppliers and displaying the Search Results to you.
3. Reading the images and documents you choose to upload and extracting their data.
4. Delivering the Buyer's request to the matching Registered Suppliers.
5. Calculating Credits, Operational Quotas and subscriptions, issuing invoices and keeping their records.
6. The service messages mentioned in Article (8-16) First.
7. The Invitation Program in accordance with Article (5-12): linking your registration to the person who invited you, informing your inviter of your business name or your name as you registered it upon completion of your registration through their link, and informing you of the name of the person who invited you, in performance of the provisions of the program accepted by both parties by accepting these Terms; the invitee may, upon registration, object to their inviter being informed of their name, in which case the inviter is not informed of it. Your sharing of your invitation link with others is a voluntary act on your part at your own responsibility in accordance with Article (7-11).

Providing data in these processing operations is mandatory to the extent required by the service; failure to provide it means only that the service concerned cannot be performed (for example, a person who does not upload a Commercial Register (CR) does not receive the "Verified Supplier (CR matches name)" badge).

Second: Processing based on your consent

Withdrawing it at any time does not affect the rest of the service:

1. The appearance of your business as a Supplier in the supplier database and the delivery of Buyers' requests to you (taken by a separate consent button upon Supplier registration in accordance with Article (6-10); withdrawing it stops the appearance and the notifications without closing your account).
2. Reading your business profile to infer its sector and activity (uploading it is optional and has a skip button).
3. Receiving introductory and marketing messages from RASA (in accordance with Article (8-16) Second).

Any of these consents is withdrawn by a request through the contact point in Article (8-9), or by the immediate means mentioned alongside each of them, and the withdrawal applies to subsequent processing without effect on what preceded it.

Third: Data received from someone other than its subject

Commercial contact data received from someone other than its subject (the supplier database, and the data of members of professional groups and hospitality entities) is subject to Article (8-15).

Article (8-15): The Supplier Database, Its Sources and the Rights of Its Data Subjects

First: What it is

The Operator maintains a supplier directory containing, alongside registered Users, commercial contact data of businesses and their representatives who did not register themselves in RASA, and of members of professional procurement groups and hospitality entities whose data reached the Operator from the same sources set out in Second. The data categories: the name of the business or its trade name or the name of its representative as received, the contact number, the email address and website if any, the classification or category and the activity, the city, and the source of the record, the date of its receipt and its context. No documents, financial data or data about individuals beyond what is public or shared for commercial contact are collected about these persons.

Second: Its sources

1. Postings by members of a professional procurement group on the messaging application which the Operator was able to view in its capacity as a member of the group, where members share the numbers of Suppliers they recommend; the contact data of the members themselves also came from this source.
2. Contact files and supplier lists received by the Operator from professional Buyers, and postings by the Platform's Users about their Suppliers.
3. Company websites and commercial directories published on the internet, and the results of live Internet Search upon the Buyer's request, which are added to the database tagged with their source and date.

The Operator keeps, for each record, its source and, for whoever shared a Supplier's number within the group or through the Platform, a link between their name and what they shared, for the single purpose of enabling them to see "their suppliers" and granting them the invitation Credit upon their registration in accordance with Article (5-12); neither the sharer's name nor the text of their posting is disclosed to any other Supplier or Buyer.

Third: Purposes and legal basis

The data of unregistered businesses is processed for two purposes: displaying the commercial contact data to the searching Buyer so that it may contact the Supplier itself, and inviting the Supplier to register by a single introductory message in accordance with Article (8-16). The data of members of professional groups and hospitality entities is processed only for the single purpose of the one introductory message in accordance with Article (8-16) Second, and is not displayed in Search Results and is not used for anything else.

The legal basis is the legitimate interest of the Operator and of Buyers in reaching Suppliers, and of the Supplier in receiving purchase requests, in respect of contact data of a commercial nature which its subject made available for commercial contact in a professional context or which was published to the public for that purpose (Article Six, Paragraph Four, of the Personal Data Protection Law (PDPL)), with the data subject being notified at the first contact with them of the identity of the Operator, the source of their data and their rights, and without prejudice to their rights set out in Fifth.

Fourth: Safeguards and limits of display

• Only the name of the business, its contact data, its classification and its city are displayed to the Buyer from this database, tagged as unverified in accordance with Article (3-6); no documents, prices or the context of the posting are displayed.
• No request is sent to these businesses or persons automatically, and they are not contacted except in accordance with Article (8-16); the Operator works on excluding numbers that appear to be personal rather than commercial from the introductory messages.
• This data is not sold and is not shared with third parties, and is corrected or deleted when proven to be erroneous.
• The records of unregistered businesses in this database are retained for twenty-four (24) months from the last update or contact, after which they are deleted or renewed from a documented source, in accordance with Article (8-7).

Fifth: Rights of the subjects of this data

Any business or person whose data appears in this database may request at any time: to know the source of their data, or to rectify it, or to stop messages to them (executed immediately by the "Stop Messages" button or by writing "إيقاف" ("stop") in the conversation), or to object to its processing, or to remove their record entirely from the database and from the Search Results, through the contact point in Article (8-9) or by a message to the RASA number. Removal is carried out within five (5) business days and its execution is confirmed to the requester, and the contact number alone is retained in the do-not-list-and-do-not-contact list in accordance with Article (8-7) to ensure that listing is not repeated, and the number is not re-listed unless its owner registers themselves.

Article (8-16): Service and Marketing Messages and the Right to Opt Out

First: Service messages

These are sent to operate the service, require no additional consent and cannot be stopped for as long as the account exists: replies to your requests, notification to the Supplier of the arrival of a matching request, Search Results, invoices and Credit and subscription alerts and changes to Credits or fees, invitation notifications, security alerts, notifications of amendment of this document, and requests for renewed consent.

Second: Introductory and marketing messages

The Operator may send introductory messages about RASA, its features and its offers as follows:

1. To registered Users: a maximum of one message per month.
2. To unregistered businesses, members of professional groups and hospitality entities whose data is referred to in Article (8-15): one introductory message per number, identifying in an explicit sentence the identity of the Operator and the source of the number as recorded with it, containing a link to this policy and an immediate, free means of stopping, and not repeated unless the owner of the number replies or registers.
3. Messages are sent through templates approved by the Channel Provider, and state that the service is currently free of charge, and that any future fees are not imposed on an existing User without prior notice to them in accordance with Chapter Fifteen.

Third: Opting out and its record

You may stop introductory and marketing messages at any time and free of charge by pressing the "Stop Messages" button in the message itself, or by writing the word "إيقاف" ("stop") or words to that effect in the conversation, whether you are registered or not. The stop is executed immediately and automatically, and no marketing message is sent to you thereafter.

The stop request (the number, the time, the channel and the means of the request) is retained in a separate compliance record that survives the deletion of your account or your data so that you are not targeted again, and is used exclusively to ensure that you are not contacted, for the period set out in Article (8-7). The stop remains in effect until you expressly request reactivation through the contact point in Article (8-9). The stop does not affect the service messages in First, and no prior notice is required for it.

Fourth: Recipient lists

Recipient lists are not shared with any third party, and the numbers of registered Users are not used in campaigns for anything other than RASA's services.

09Chapter Nine: Electronic Documentation and Evidence

Article (9-1): Electronic Consent Mechanism

The User's consent to these Terms and to the Privacy Policy is given together, through a consent message displayed to the User upon their first interaction with the Platform in the messaging application, after the User has chosen the display language. The message includes:

1. A brief welcome to the service.
2. Two direct electronic links, one labelled "Privacy Policy", which opens the full text of the Privacy Policy (being the text of Chapter Eight of this document), and the other labelled "Terms and Conditions", which opens the full text of these Terms, in the display language chosen by the User in accordance with Article (1-4).
3. An explicit button following the two links, worded "I have read the Terms and I agree" or its equivalent in the display language within the button-length limits of the Messaging Channel; the text of the button, as displayed to the User, is recorded in the consent record provided for in Article (9-2).

Pressing the button constitutes complete consent to both documents together, including the provisions on processing and transfer outside the Kingdom in Articles (8-4) and (8-13), the rules on sharing contact details in Article (5-8), and every other clause in them.

The User is not entitled to use the Platform before pressing the button, and every attempt to use it before then returns the consent message to the User.

The message is uniform for all Users, and customisation according to the type of User (Supplier or Buyer) takes place in a subsequent step after consent.

Upon a Material Amendment, the consent message is displayed again to existing Users at their first interaction after the amendment takes effect for them in accordance with Article (15-3), and their use of the Platform continues only upon pressing the new consent button.

The Arabic text is the binding reference in accordance with Articles (1-4) and (17-9), and the English translation is a tool for understanding.

Article (9-2): Data Recorded upon Consent

Upon pressing the consent button, the following is recorded automatically and retained for a period of not less than five (5) years:

1. The User's identifier in the messaging application, being their mobile number, and the name as provided by the User, if they provided it.
2. The date and time of consent, to the second, in Coordinated Universal Time and its equivalent in the time of the Kingdom of Saudi Arabia.
3. The type of event (first consent or re-consent), the channel, and the display language.
4. The identifier of the version of the document that was consented to, the links to the two displayed versions of the Terms and the Privacy Policy, and the text of the button as displayed to the User.
5. A SHA-256 cryptographic hash of the text of the Terms and the text of the Privacy Policy as published in that version and in that language; the Operator retains an archival copy of every published version against its identifier and its hash.

The Platform does not collect the Internet Protocol address, the device type, or the operating system through the WhatsApp channel, because the Channel Provider does not make them available.

This record, together with the archive, constitutes evidence of the text that was consented to in accordance with Article (9-3).

Article (9-3): Legal Value of the Documentation

This record constitutes recognised evidence in the event of a dispute, in accordance with the Saudi Electronic Transactions Law and its Implementing Regulations. The User is entitled to request a copy of the record of their consents at any time, through the Official Channels of the Platform.

Article (9-4): Conclusiveness of Consent

Pressing the consent button is deemed an explicit and binding acknowledgement that the User has read the document in full and understood it. No subsequent claim of not having read, not having understood, or being unaware of the Terms is accepted. This provision is based on the Saudi Electronic Transactions Law, which gives documented electronic acts evidentiary force.

10Chapter Ten: Intellectual Property

Article (10-1): Ownership by the Operator

All intellectual property rights in the Platform, its logo (once adopted), its designs, its software code, its texts, its algorithms, its databases and its reports are reserved in full to the Operator (Nusuq).

No User may copy, reproduce, modify, distribute, resell or extract any part of the Platform without the prior written permission of the Operator. Any breach of this right exposes the infringer to legal action and a claim for compensation.

Article (10-2): The User's Ownership of its Content and the Scope of the Licence Granted to the Operator

The User retains its full rights in the content it provides (prices, catalogues, data relating to its business, images, descriptions).

The User grants the Operator a non-exclusive licence to use this content for the purposes of operating the Platform and providing its services, and the Operator may not transfer this licence to any other party except to a successor in the ownership or operation of the Platform in accordance with the definition of the Operator in Chapter Two. This licence includes in particular:

• Displaying the identifying data and products provided by the Supplier in the Search Results and the Business Card in accordance with Article (6-9), and subject to the consent to appear provided for in Article (6-10).
• Extracting item names and their descriptions from Suppliers' catalogues and Product Catalogues and storing them in a shared item register used by the Platform to match search requests received from Buyers with the Suppliers who provide those items.
• Reviewing, classifying and correcting the extracted item names, by automated means or through the processing providers referred to in Article (8-13), without the names of persons or their mobile numbers being sent along with them.
• Reading the images, documents and messages sent by the User by automated means in order to understand its request or its data, in accordance with the purposes set out in Article (8-2).

This licence does not include selling the content or licensing it to a third party for a purpose independent of the operation of the Platform, and does not extend to personal data except to the extent permitted by the provisions of Chapter Eight.

The display of the Supplier's content in the Search Results ceases upon withdrawal of the consent to appear or upon termination of the account; as for generic item names that do not identify a specific business or person, the Platform may retain them in the shared item register for the continued operation of the search service.

Article (10-3): Content Uploaded by the User

The Operator is not responsible for the content provided by Users. Each User warrants that the content it uploads is its own property or that it holds a licence to use it.

If the Operator receives a documented report from an intellectual property rights holder that content on the Platform infringes its rights, the Operator shall examine the report and remove the reported content once the infringement is established, in accordance with the time limits and procedures set out in Article (8-12), with immediate precautionary hiding of the content where the infringement is evident.

The User who uploaded the infringing content bears all legal consequences and compensation, and shall hold the Operator harmless and indemnify it for any damage it suffers as a result, in accordance with Chapter Eleven.

11Chapter Eleven: Mutual Release and Indemnification

Article (11-1): The User's Indemnification Obligation

Each User shall hold harmless and indemnify the Operator, its employees, its owners and its legal representatives against any claim, loss or cost (including legal fees and litigation costs) arising from any of the following:

• The User's breach of this document or of any document supplementing it.
• The User's breach of the laws of the Kingdom of Saudi Arabia.
• Infringement of a third party's rights (intellectual property, privacy, contract, trademark, trade name).
• False, misleading or incomplete information provided by the User.
• Any dispute between the User and other parties it dealt with through the Platform.
• Any damage caused by the User to other Users.
• Defective, adulterated, counterfeit or harmful products provided by the User (if it is a Supplier).
• The User's failure to honour a Purchase Order it issued (if it is a Buyer), upon activation of the offers cycle in accordance with Article (3-5).

Article (11-2): Scope of the Obligation

The indemnification obligation includes:

• Compensation awarded to any third party.
• Fees of lawyers and legal advisers.
• Judicial and administrative fees.
• Costs arising from official or administrative investigations.
• Proven direct damages suffered by the Operator as a result of the act giving rise to the indemnification.

Article (11-3): Continuation of the Obligation

This obligation remains in force even after the User ceases to use the Platform, and does not lapse with the passage of time except in accordance with the applicable laws.

Article (11-4): Disputes Between Users

Any dispute arising between Users on the Platform (a Supplier and a Buyer, a Supplier and a Supplier, or otherwise) is to be dealt with between them directly; the Operator is neither a party to their contracts nor an arbiter of them, and does not bear the consequences of the dispute.

The User acknowledges that its claims relating to transactions are to be directed to the other party to them.

If the Operator is joined as a defendant in a lawsuit relating to a dispute between Users and the lawsuit concludes without any fault being established on its part, the party that joined it shall bear its reasonable defence costs to the extent assessed by the competent judicial authority.

The Operator may, at its discretion, provide amicable mediation between the two parties upon their joint request; such mediation is not an obligation and is not a substitute for recourse to the judicial authorities.

12Chapter Twelve: Limitation of Liability

Article (12-1): Scope of the Limitation of Liability

The Operator does not bear, to the extent permitted by law, any liability for disputes or losses arising from transactions concluded between Users or resulting from the use of the Platform.

Specifically, the Operator does not bear liability for:

• The quality of the products or services provided by Suppliers.
• Delay in delivery or non-delivery.
• Disputes over prices, specifications, or terms.
• The failure of either party to comply with the Purchase Order.
• Indirect damages (loss of profits, loss of opportunities, reputational damage, consequential damages).
• Service interruption due to maintenance, updates, or circumstances beyond its control.
• Loss of data due to factors beyond the Operator's control.
• Human errors on the part of Users.
• Errors or deficiencies in the data extracted automatically from requests, images, or documents, or in Search Results, or in the classification of Suppliers and their matching to requests, in accordance with Article (3-8), and with due regard to the categories of results and the limits of verification set out in Article (3-6).

Article (12-2): Maximum Cap on Liability

In all cases, and regardless of the basis of the claim (whether contractual, tortious, or otherwise), the aggregate liability of the Operator towards any single User, for all claims taken together and not for each claim separately, is limited to the higher of the following two amounts:

• (a) the total fees actually paid by the User to the Operator during the twelve (12) months preceding the date of the claim; or
• (b) one thousand Saudi riyals (SAR 1,000).

This cap does not limit the statutory rights of Users established under the laws of the Kingdom (consumer protection, product safety, personal data protection), and does not apply to claims for which the law prohibits the limitation of liability, nor to the cases set out in Article (12-4).

Article (12-3): Service Availability

The Operator does not guarantee the availability of the Platform at any specified percentage. The service may be interrupted for technical reasons, maintenance, updates, or circumstances beyond its control (internet outages, failures of service providers, suspension or restriction of the Messaging Channel by the Channel Provider, disasters, cases of Force Majeure).

The Operator may at any time suspend or discontinue the service, in whole or in part, for all Users or for a category of them, for any reason required by its operational, financial, or regulatory considerations, with notice through the Official Channels whenever practically possible. No compensation or liability arises therefrom on the part of the Operator towards Users of the free service, and its obligation towards paid subscribers is confined to refunding the amounts for the remaining period or the unconsumed quota in accordance with Article (5-10/E).

No compensation is due to Users for interruption in the free service and in Credits granted free of charge.

In paid subscriptions and packages, if the service is interrupted in full for more than three (3) consecutive days, the subscription period or the validity of the package is extended by the duration of the interruption, even if the interruption is due to Force Majeure; and if the full interruption exceeds seven (7) consecutive days for a reason attributable to the Operator, the subscriber has the choice between this extension and a pro-rata refund for the unconsumed period or quota in accordance with Article (5-10/E). In both cases the request shall be submitted within thirty (30) days of the resumption of the service, without prejudice to Article (5-10/E) and Article (12-4).

Article (12-4): Limits of the Exceptions

The limitations of liability set out in this Chapter do not apply in the cases expressly required by the applicable laws, such as cases of wilful fraud by the Operator, or gross negligence established by a final judicial ruling.

13Chapter Thirteen: Force Majeure

Article (13-1): Definition of Force Majeure

Force Majeure is any event or circumstance beyond the reasonable control of the parties that prevents the performance of their obligations, including without limitation:

• Natural events (earthquakes, floods, hurricanes, drought).
• Epidemics and pandemics.
• Wars, acts of terrorism, civil unrest.
• Widespread labour strikes.
• Emergency governmental decisions and regulations.
• Interruption of essential services (electricity, water, internet).
• Widespread telecommunications network failures, and the suspension or restriction of the Messaging Channel Provider or of the Platform's technical service providers for reasons not attributable to the Operator's default.
• Large-scale cyberattacks targeting public infrastructure or service providers, but not those arising from the Operator's failure in its reasonable security measures.

Article (13-2): Effect of Force Majeure

In the event of Force Majeure, the obligations of the parties affected by it are suspended without any compensation arising therefrom, subject to Article (12-3). The affected party shall notify the other parties immediately upon the occurrence of the Force Majeure circumstance, and shall make reasonable efforts to resume performance as soon as it ceases.

Article (13-3): Termination due to Force Majeure

If the Force Majeure continues for more than sixty (60) consecutive days, any party is entitled to terminate the relationship without liability, by written notice to the other parties.

14Chapter Fourteen: Suspension and Termination of the Service

Article (14-1): The User's Right to Withdraw

The User may stop using the Platform at any time without notice and without fees.

The User may request that the data of their business be hidden from Search Results in accordance with Article (6-10), whereupon its appearance ceases immediately upon writing the word "إخفاء" ("hide") in the conversation, or within five (5) business days of receipt of their written request in the same conversation in the messaging application or by writing to the official email complaints@nusuq.sa; and the User may request the deletion of their account and data in accordance with Article (8-8) by the same two means, and the deletion request is executed within the period set out in Article (8-8), namely thirty (30) days from its receipt.

Withdrawal does not prejudice the User's obligations towards the Users with whom they have contracted outside the Platform, nor the obligations which this document expressly provides are to survive termination.

Article (14-2): The Operator's Right to Suspend or Terminate

The Operator is entitled to suspend or terminate the account of any User immediately, without compensation, in the following cases:

A. Procedural Breach

• Providing false or misleading information.
• Impersonation, or using another User's information.
• Opening multiple accounts for the same entity contrary to the provisions of Article (5-3).
• Failing to update the basic data despite being notified.

B. Serious Breach

• Proven fraud, deception, or manipulation of prices or requests.
• Offering bribes or personal commissions.
• Circumventing the Credits, the quotas, or the Invitation Program through fictitious accounts, automated means, or sham registrations, or the mass extraction of the Platform's data contrary to the prohibition set out in Article (5-4).
• Selling, renting, or transferring the data of other Users.
• Repeated breach of Purchase Orders or delivery terms.
• Conduct that harms the reputation of the Platform or its Users.
• Anti-competitive practices (collusion, market allocation).

C. Precautionary Suspension

The Operator may suspend the account or temporarily restrict some of its features where there are reasonable indications of a violation or of unusual use (unjustified search volume, automated patterns, multiple complaints, suspected impersonation of a business) for the reasonable period necessary for verification.

The User is notified of the suspension and of its general reason via the conversation in the messaging application or via the registered email address, if any, and the User may respond and lodge a grievance within thirty (30) days to the official email complaints@nusuq.sa.

The suspension is lifted if the violation is not proven. No compensation arises from the period of suspension if the violation is proven; and if it is not proven, compensation is limited to extending the subscription period or the validity of the paid package by the length of the suspension period, if any, as set out in Article (12-3).

D. Scope of Suspension and Termination

Suspension or termination applies to the mobile number and the entity linked to the account across all channels of the Platform, and does not create for the User any right to compensation for being deprived of the service so long as it was carried out in accordance with this Chapter, without prejudice to their right to lodge a grievance.

Article (14-3): Effects of Suspension and Termination

• Obligations relating to transactions completed before termination remain in force.
• Obligations of confidentiality and of not selling data remain in force after termination in accordance with Article (8-11), and obligations of indemnification remain in force in accordance with Articles (11-3) and (11-4).
• Transaction records are retained for the period stipulated in Article (8-7).
• A User whose account has been suspended or terminated is not entitled to open a new account for the same entity without the express approval of the Operator.

Article (14-4): Reporting Serious Fraud

In cases of serious fraud established by a judicial ruling, the Platform refers the information to the competent government authorities according to their jurisdiction, including: the Ministry of Commerce, the Cybercrime Prosecution, the General Authority for Competition, and the Saudi Data and Artificial Intelligence Authority (SDAIA).

The Platform does not publish the names of violators publicly unless the judicial ruling expressly permits this. The Platform has the right to terminate the violator's account and to prevent its re-registration under the same entity or its representatives, and to issue a general alert to the market about the nature of the violation without disclosing the identity of the violator, whenever it considers this to be in the protection of its Users.

15Chapter Fifteen: Amendment of the Terms

Article (15-1): Right of Amendment

The Operator has the right to amend these Terms at any time, in accordance with the procedures set out in this Chapter.

Article (15-2): Notifying Users

Amendments are published on the Official Page with a version number and a publication date.

Amendments affecting any of the following subjects are deemed material:

• Reduction of paid Credits or quotas, or prejudice to the User's rights in amounts paid in advance (refund and remedy for interruption) in accordance with Article (5-10).
• The categories of data collected, or the purposes of processing it, sharing it, or transferring it outside the Kingdom.
• The disclaimer of liability, its limits, and indemnification.
• Judicial jurisdiction.
• The User's rights to terminate and to delete their data.
• Activation or suspension of the Organized Offers Service in accordance with Article (3-5), and everything that this document expressly designates as a Material Amendment.

The User is notified of a Material Amendment at least thirty (30) days before it takes effect against them.

The following are deemed neither an amendment of this document nor a Material Amendment: the imposition of fees, the change of prices and packages, or the restriction of the service to paid subscribers in accordance with Article (5-10); the amendment or cancellation of Credits granted free of charge in accordance with Article (5-11); the suspension or discontinuation of the service in accordance with Article (12-3); and the amendment of future promotional values, Operational Quotas, or the criteria of ranking and distribution in accordance with Articles (3-7), (5-11) and (5-12); in all such cases a notice through the Official Channels is sufficient, with due regard to what those Articles provide for the protection of paid Credit and existing paid subscriptions.

Anything else is deemed a Minor Amendment, including:

• Linguistic and typographical corrections, and display and encoding errors.
• Clarifications that do not change the meaning, and alignment of the description with existing features.
• Updating links, page addresses, contact details and identifying details, and renumbering.
• Formal and technical improvements to the publication pages (design, navigation, printing, device compatibility, preview tags).

Minor Amendments apply immediately upon publication without a change in the version number, and the date of the latest correction is recorded in the Document Details card.

Article (15-3): Effect of Amendments

Notice of a Material Amendment is sent to the mobile number registered on the messaging application, and may also be sent to the email address if registered, and the notice is deemed received upon its delivery to either of them.

A Material Amendment does not take effect against an existing User except upon their pressing the "I have read the Terms and I agree" button on the amended version in accordance with Chapter Nine, and this version is presented to them at their first interaction with the Platform after the expiry of the notice period.

Until their consent, their relationship is governed by the version they last agreed to, and continued use during the notice period is not deemed implied acceptance of the amendments.

The Platform cannot be used after the expiry of the period without agreeing to the amended version, and this is not deemed a suspension of the account and no compensation arises therefrom.

A User who does not agree may request a copy of their data or its deletion in accordance with Article (8-8) within thirty (30) days of the expiry of the period, free of charge.

The identifier of the version the User agreed to is recorded in the User's account record and in the consent log, and it is relied upon in determining the version governing their relationship.

Minor Amendments apply upon publication, and continued use is deemed acceptance of them.

16Chapter Sixteen: Applicable Law and Dispute Resolution

Article (16-1): Applicable Law

This document, and everything relating to it in terms of interpretation, performance, or dispute, is governed by the laws of the Kingdom of Saudi Arabia and the implementing regulations issued thereunder.

Article (16-2): Amicable Settlement

The two parties undertake to make good-faith efforts to resolve any dispute amicably, within a period not exceeding thirty (30) days from the date on which the other party is notified of the dispute in writing. Either party may resort to mediation or arbitration before litigation.

Article (16-3): Jurisdiction

The original jurisdiction over commercial disputes between commercial establishments (registered Suppliers and Buyers, even if one of them is a sole trader) lies with the competent judicial authorities in the city of Jeddah, being the centre of management of the Operator's activity and the centre of activity of the RASA Platform, notwithstanding that the city registered in its Commercial Register (CR) is Yanbu Industrial, by agreement of the two parties.

By way of exception to this:

• Disputes to which a consumer in their personal capacity is a party are subject to the jurisdiction required by the Saudi laws protecting consumers.
• Disputes for which Saudi law expressly requires exclusive jurisdiction of a specific authority (for example: data protection disputes before SDAIA, competition disputes before the General Authority for Competition) are referred to that authority.
• Cybercrimes are referred to the Cybercrime Prosecution.

The User who deals in their commercial capacity expressly agrees to this territorial jurisdiction within the limits permitted by the laws.

Article (16-4): Competent Judicial Authorities

According to the nature of the dispute, an action may be brought before one of the following authorities, by default in the city of Jeddah, except where the law provides otherwise:

• The Commercial Courts: for commercial disputes between commercial establishments.
• The Labour Courts: for disputes relating to employment relationships.
• The General Court: for personal or civil disputes.
• The competent administrative authorities: for disputes relating to data protection (SDAIA), competition (the General Authority for Competition), consumers, or others.

17Chapter Seventeen: General Provisions

Article (17-1): Severability

In the event that any clause of this Document is held to be void or unenforceable by a competent judicial authority, or conflicts with an applicable law:

• The void clause is replaced with the closest lawful clause that achieves the same legal and commercial purpose, where this is possible.
• If replacement is not possible, only the void clause is deleted, with the remaining clauses remaining effective and in force.
• The invalidity of a single clause does not affect the validity of the Document as a whole, unless the void clause is so essential that the relationship cannot continue without it.

The disclaimer of liability, limitation of liability and indemnification clauses set out in Chapters Four, Eleven and Twelve are to be read as restricted to the maximum extent permitted by law rather than void, and none of them is deemed an essential clause without which the relationship cannot continue within the meaning of this Article.

Article (17-2): No Waiver

The Operator's failure to exercise any of its rights set out in this Document, or its delay in exercising them, is not deemed a waiver of those rights, and does not prevent their exercise at a later time.

Article (17-3): Entire Agreement

This Document, together with the documents supplementing it, constitutes the entire agreement between the Operator and the User, and supersedes any prior agreements or correspondence between them, unless expressly stated otherwise.

Article (17-4): Address and Notices

Notices and notifications from the Operator to the User are made via the mobile number registered in the messaging application, or via the registered email address where one exists, and are deemed received upon delivery to either of them in accordance with the provisions on the channel and the messaging application set out in Article (3-9).

Notices from the User to the Operator are made via the same conversation in the messaging application, or via the official email address complaints@nusuq.sa, or via the National Address stated in the Document Details card whenever it is recorded there, in respect of notifications that the law requires to be addressed in writing to an address.

Each party shall update its contact details as soon as they change, and bears the consequences of failing to do so.

Article (17-5): Third-Party Rights

This Document does not create any rights for third parties, and no third party (other than the parties who have signed or consented to it) is entitled to rely on it or to claim any right arising from it.

Article (17-6): No Relationship

Neither this Document nor any interaction between the parties through the Platform creates any relationship of partnership, agency, employment or legal representation between the Operator and the User.

Article (17-7): Language

Arabic is the sole authoritative language of this Document. Where a translation of it is issued, the Arabic text prevails in the event of conflict.

Article (17-8): Scope of Permitted Use

Use of the Platform is limited to the legitimate commercial purpose of searching for suppliers, communicating with them, and receiving and responding to Quotation Requests, by the means the Platform makes available through its channels, including the sending of text, images and files.

The following is deemed outside the scope of permitted use, until express written permission is issued by the Operator:

• Automated or programmatic use of the channel, and the bulk extraction of Supplier or Buyer data, as prohibited in Article (5-4).
• Reselling the service or its results.
• Using the Platform for a non-commercial purpose, or for systematic market surveying, or to build a database of suppliers beyond the scope of the individual searches the Platform makes available to the User's business.
• Any use that violates these Terms or the applicable laws.

Article (17-9): Rule of Precedence in the Event of Differences between Wordings and Versions

1. Where a number written in words differs from a number written in figures at any point in this Document or in the Privacy Policy, the number written in words prevails, and the figures placed in brackets are deemed an explanatory convenience and not an independent text.
2. References to Article and Chapter numbers are to be read according to the order of the Articles in the Document's table of contents and their sequential headings, and no apparent number that contradicts this order is to be relied upon.
3. The authoritative text of this Document is its Arabic text as published on the Official Page, within the meaning defined in Chapter Two, on the Operator's website nusuq.sa, and any other version of it (a downloadable file, a translation, or a printed copy) is a convenience version to be read in the light of it.
4. A display, printing or encoding error in any published version does not constitute an amendment to this Document, and the Operator is entitled to correct it immediately in accordance with Article (15-2), with the date of correction recorded in the Document Details card.

18Chapter Eighteen: Final Acknowledgement

Article (18-1): The User's Acknowledgement

By pressing the consent button in the Messaging Channel, you expressly acknowledge the following:

1. That you have read this Document in full, understood it clearly, and agreed to all of its clauses.
2. That you have reached the legal age of majority (eighteen (18) Hijri years or older).
3. That you have full legal capacity to enter into this consent and to bear its consequences.
4. That you are authorised by your organisation if you represent it (you hold written authority or a job role that justifies this).
5. That all the data you have provided is true, accurate and up to date.
6. That you will update your data as soon as any of it changes.
7. That you undertake to protect and indemnify the Operator as set out in Chapter Eleven.
8. That you accept the jurisdiction of the judicial authorities of the city of Jeddah as set out in Chapter Sixteen.
9. That you accept the limitations of liability set out in Chapter Twelve, including the maximum cap on liability set out in Article (12-2), being the higher of the total fees you have actually paid to the Operator during the twelve (12) months preceding the date of the claim or one thousand Saudi riyals (SAR 1,000), for all claims combined, without prejudice to your statutory rights established under the laws of the Kingdom and the cases excepted in Article (12-4).
10. That you have been informed that the RASA service is founded in its essence on processing your requests and documents by artificial intelligence systems and storing them with providers outside the Kingdom in accordance with Articles (8-4) and (8-13), that this processing is necessary for the performance of the agreement between you and the Operator, that you have reviewed the recipient entities and your rights before pressing the button, and that whatever rests on your optional consent is set out in Article (8-14) and may be withdrawn by you at any time.

If any of these acknowledgements is proven to be false, the person making the acknowledgement bears the full legal and financial consequences, and the Platform is released from any liability arising from their dealings.

Article (18-2): Effective Date

This Document takes effect from the date on which the User consents to it electronically, and remains in force until the User's use of the Platform ends, with the obligations expressly stated to survive termination continuing after termination.