Privacy
Last updated: 8 October 2026
The short version
This website has no analytics, no advertising and no tracking cookies. Documents and pages you send to the API are processed in Jeddah to produce the file you asked for, and are not stored.
Who is responsible
Yimello LLC, Sharjah Media City (Shams), Al Messaned, Al Bataeh, Sharjah, United Arab Emirates, Trade License 2430802.01. Contact: contact@yimello.dev. Questions about this notice or your data can also be sent to support@sahifa.dev.
What is processed
Content sent to the API and to the demo
The HTML, web addresses and settings in a request are processed in memory on our server in Jeddah, only to produce the PDF or image you asked for. The result is returned in the same response. Neither the content nor the result is written to disk, logged or kept after the response is sent.
Technical logs
For each API request the server records the method, the path without any parameters, the status code and the time taken. For an unexpected error, only its type is recorded. Web addresses, API keys, IP addresses and content are not recorded. The log has a fixed maximum size and overwrites its oldest entries. The web server keeps no access logs.
Demo limits
To limit how often the demo on this website can be used, the IP address of each demo request is held in the server's memory for up to one hour, then discarded. It is not written to disk.
Your account
Your email address, and if you give them, your company name and the language of our emails. The email address is used to send sign-in links, which work once and expire after 15 minutes, and to contact you about your account. A sign-in keeps a session for up to 24 hours. Only fingerprints (hashes) of sign-in links, sessions and API keys are stored, never the values themselves.
Account and billing details
When you subscribe: company or personal name, VAT or tax number, country, billing address, contact person, email address and optional phone number. They are used to issue the API key and the invoice.
Usage counts
For each API key, the number of successful renders per month, to apply the plan's allowance. No content, address or parameter of the requests is kept with it.
Messages you send us, and our replies.
Website chat
The assistant on this website answers questions about Sahifa. Questions that are not about Sahifa are answered by our server alone and go nowhere else. A question about Sahifa is sent, together with matching excerpts of our documentation and your last few questions in the same window, to Anthropic in the United States, which writes the answer. Before anything is sent, our server removes API keys, email addresses and phone numbers it recognises. Please do not type in personal data about others.
We do not store the conversation: it stays in your browser tab and is gone when you close it. We keep only anonymous daily totals (number of questions, cost), with no text and no IP address. To limit misuse, the IP address of each chat request is held in the server's memory for up to one hour, then discarded. The basis is our interest in answering visitors' questions quickly, and your own choice to use the chat; you can always write to us instead.
Survey
If you fill in the survey at sahifa.dev/en/survey, we keep your answers and, if you give them, your name, work email and company. We use them to decide how Sahifa develops, to give you the three free months you asked for, and, if you agreed, to contact you about a pilot. The answers are stored on our server in Jeddah, are part of its encrypted backups, and are deleted after 90 days, or earlier if you ask; the backups that contain them expire within a further 35 days. Your IP address is not stored with them. When a response arrives, we receive a short notice by email that does not contain your answers or contact details. Giving contact details is optional.
Why, and on what basis
Content is processed to perform the service you request. Account and billing details are used to provide the subscription and to invoice it; the basis is the performance of the contract and the steps taken at your request before entering into it. Tax records are kept because accounting rules require it.
Where it is processed
The API and this website run on Oracle Cloud in the Jeddah region of Saudi Arabia. Content sent to the API does not leave Saudi Arabia. The account database and its encrypted backups are kept in the same region. Sign-in emails and email correspondence pass through our email provider, Rackhost, in Hungary (European Union). Account, billing and email correspondence are handled by Yimello LLC in the United Arab Emirates. Questions typed into the website chat are answered with the help of Anthropic in the United States. The data residency statement lists every location.
Who processes it
Oracle Cloud Infrastructure hosts the server in Jeddah. Card payments are handled by Telr, the card payment gateway, on its own payment page. Our email is handled by Rackhost in Hungary. Anthropic writes the answers of the website chat. These providers act only on our behalf. No other party receives your data, and it is never sold or used for advertising.
Card details
All credit/debit cards' details and personally identifiable information will NOT be stored, sold, shared, rented or leased to any third parties.
sahifa.dev will not pass any debit/credit card details to third parties. Card details are entered only on Telr's secure payment page and never reach this website.
How long it is kept
Content sent to the API: not kept. Your account is kept until you delete it; you can do that at any time from the account page, and your email address and company name are removed at once, and from the encrypted backups within 35 days. Enquiries that do not lead to a subscription are deleted within 12 months. Account and billing details are kept while the subscription is active and afterwards for the retention period required by applicable tax and accounting rules.
Your rights
You can ask what is held about you, ask for it to be corrected or deleted, ask for processing to be restricted, or object to it. Write to support@sahifa.dev and you will have an answer within 30 days. Depending on where you are, you may also have rights under local law, such as the Personal Data Protection Law in Saudi Arabia, and you may complain to the competent authority.
Security
This website and the API are served only over HTTPS. The server that renders documents cannot reach private or internal networks, and each request runs in a separate browser context that is discarded afterwards.
sahifa.dev takes appropriate steps to ensure data privacy and security including through various hardware and software methodologies. However, sahifa.dev (website) cannot guarantee the security of any information that is disclosed online.
Links to other websites
sahifa.dev is not responsible for the privacy policies of websites to which it links. If you provide any information to such third parties different rules regarding the collection and use of your personal information may apply. You should contact these entities directly if you have any questions about their use of the information that they collect.
Changes
The Website Policies and Terms & Conditions may be changed or updated occasionally to meet the requirements and standards. Therefore, the Customers are encouraged to frequently visit these sections to be updated about the changes on the website. Modifications will be effective on the day they are posted. When this notice changes, the date at the top changes with it.