Terms and Conditions

Last updated: 7 September 2026

These Terms and Conditions (the "Agreement") govern the relationship between Sajaya Advanced Company, Commercial Registration No. 7054820431, located in Riyadh, Al Yasmin District, Kingdom of Saudi Arabia (the "Company"), and the user of the platform (the "Client").

By using the platform or creating an account, you acknowledge that you have read, understood, and agreed to be bound by these Terms. If you do not agree, please do not use the Service.

Note: This English text is a translation provided for convenience. In the event of any discrepancy, the Arabic version shall prevail.

1. Definitions

• "Platform": The "KSABill" and "Fatoora" applications and websites, and any related application or API operated by the Company.
• "Service": The electronic system for issuing and managing invoices and commercial documents online.
• "Client" or "User": Any natural or legal person who creates an account or uses the Service.
• "Data": All information entered by the Client (invoices, customer records, products, commercial registrations, tax numbers, and similar).
• "End Recipient": Any party receiving an invoice or document issued from the Client's account.
• "ZATCA": The Zakat, Tax and Customs Authority.

2. Eligibility and Account

• The Client must be at least eighteen years of age, possess legal capacity to contract, and be duly authorised to act on behalf of the entity being registered.
• The Client undertakes to provide accurate, complete, and current information, and bears sole responsibility for any inaccurate data.
• The Client is responsible for maintaining the confidentiality of login credentials and for all activity conducted through the account, and must notify the Company immediately upon suspecting unauthorised use.

3. Data Ownership and Intellectual Property

• All Data entered by the Client remains the sole property of the Client; the Company's role is limited to technical processing for the purpose of delivering the Service.
• The Client grants the Company a limited, non-exclusive licence to use such Data solely to operate the Service, issue and transmit documents, retain records, and comply with applicable regulations.
• All intellectual property rights in the Platform — including software, designs, trademarks, and interfaces — are owned by the Company. The Client is granted no rights therein other than the right of use under this Agreement.
• Copying, modifying, reverse-engineering, attempting to access the source code, or creating derivative works of the Platform is prohibited.

4. Free Trial and Subscription

• A free trial period may be offered to new Clients. Its duration is determined by the Company and displayed at registration; the Company may modify or discontinue it at any time.
• The free trial is granted once only per Client, per establishment, and per device. The Company may employ lawful technical means to verify this, including device fingerprinting, email address, mobile number, commercial registration number, and tax number.
• Creating multiple accounts to obtain repeated free trials constitutes a material breach of this Agreement, entitling the Company to suspend all related accounts immediately and without prior notice, while reserving the right to claim the value of the Service consumed and to pursue legal remedies.
• Paid subscriptions commence upon completion of payment and renew according to the selected plan.
• Prices are stated in Saudi Riyals and may be subject to value-added tax in accordance with applicable regulations.
• The Company may revise prices prospectively; no revision shall affect a subscription already in force before its expiry.

5. Payment and Refunds

• Payments are processed through licensed payment gateways. The Company does not store bank card details; these are handled directly by the payment service provider.
• The Client acknowledges that any delay or malfunction attributable to the payment service provider is beyond the Company's control.
• Subscriptions are non-refundable once the Service has been activated, except in the case of a material defect attributable to the Company that cannot be remedied within a reasonable period.
• The Client may cancel auto-renewal at any time before the renewal date; the subscription continues until the end of the paid term.
• Where renewal payment cannot be collected, the Company may suspend the Service until payment is completed.

6. Client Obligations and Prohibited Use

The Client undertakes to use the Service in accordance with the laws of the Kingdom of Saudi Arabia, in particular the E-Commerce Law, the Anti-Cyber Crime Law, the E-Invoicing Regulation and ZATCA requirements, and the Personal Data Protection Law.

The following are expressly prohibited:

• Issuing fictitious, sham, or misleading invoices, or using the Service for tax evasion or money laundering.
• Impersonating a government entity, company, or individual, or registering under the name of an entity the Client is not authorised to represent.
• Using a commercial registration or tax number that does not belong to the Client.
• Creating multiple accounts to circumvent restrictions, fees, or suspension.
• Sending unsolicited or unlawful messages through the email dispatch feature.
• Attempting to breach, disrupt, or gain unauthorised access to the Platform or to other users' data.
• Using automated tools to extract data or overload the servers.
• Using the Service for any unlawful purpose or in a manner contrary to public order and morals.

7. Sending Documents by Email

The Platform provides a feature enabling invoices, quotations, and sales orders to be sent to End Recipients by email. The Client acknowledges and agrees that:

• The document is sent from an email address belonging to the Company on behalf of the Client, with the Company acting solely as a technical service provider, neither party to the underlying commercial transaction nor responsible for the document's content.
• The Client is solely responsible for the accuracy of the document's content, the correctness of the recipient's email address, and the entitlement to correspond with the End Recipient.
• The Client confirms having obtained all consents required by law to contact the End Recipient, and that such correspondence falls within an existing contractual or commercial relationship.
• It is prohibited to use this feature for bulk promotional messaging, unsolicited communications, or purposes unrelated to the document.
• The Company does not guarantee delivery, which depends on email service providers, recipient settings, and their filtering rules.
• The Company may suspend or restrict this feature — for a specific account or generally — upon suspicion of misuse, receipt of complaints, or to protect the reputation of its sending domain, without prior notice.
• The Client bears full responsibility for any claim, penalty, or damage arising from misuse of this feature and shall indemnify the Company accordingly.

8. E-Invoicing and Tax Compliance

• The Company endeavours to keep the Platform aligned with ZATCA e-invoicing requirements; however, responsibility for tax compliance rests solely with the Client as the taxable person under the law.
• The Client is responsible for the accuracy of its tax data and for ensuring that issued invoices are correct and reflect actual transactions.
• The Company bears no liability for fines, penalties, or claims imposed on the Client by ZATCA or any official authority.
• Integration with ZATCA systems may be affected by factors beyond the Company's control, and the Company is not liable for interruptions or changes to those requirements.
• The Client undertakes to retain copies of its invoices for the statutory retention periods.

9. Service Availability and Maintenance

• The Company exercises reasonable care to keep the Service available but does not warrant uninterrupted or error-free operation.
• The Company may carry out scheduled or emergency maintenance and will endeavour to give prior notice where practicable.
• The Company may modify the Service, add features, or discontinue existing ones, provided this does not materially impair the paid Service during the subscription term.
• The Service is provided "as is" and "as available", without warranties of any kind, whether express or implied.

10. Disclaimer and Limitation of Liability

• The Company is not a party to any commercial transaction between the Client and an End Recipient and bears no liability in respect thereof.
• The Company shall not be liable for any direct, indirect, consequential, or special damages, including loss of profit, loss of data, or business interruption.
• The Company's aggregate liability, howsoever arising, shall not exceed the subscription fees actually paid during the twelve months preceding the event giving rise to the claim, or the value of the most recent subscription paid, whichever is lower.
• The Company is not liable for data loss resulting from the Client's own error, deletion, loss of credentials, or account compromise caused by the Client's negligence.
• The Client is advised to maintain independent backups of important data.

11. Indemnity

The Client shall indemnify, defend, and hold harmless the Company and its personnel from any claim, action, penalty, loss, or expense — including legal fees — arising from:

• Breach of this Agreement or of applicable laws.
• Data or documents issued or transmitted through the Platform.
• Any dispute between the Client and an End Recipient or an official authority.
• Misuse of the Service or any of its features.

12. Suspension and Termination

The Company may suspend or terminate an account immediately and without prior notice in any of the following cases:

• Breach of any provision of this Agreement.
• Reasonable suspicion of fictitious or misleading invoicing, or of fraudulent activity.
• Impersonation of a government entity or of an entity the Client is not authorised to represent.
• Creation of multiple accounts to circumvent restrictions or repeat the free trial.
• Non-payment of amounts due.
• An order issued by a competent judicial or regulatory authority.

Upon termination, Client Data is retained for the statutory periods, and the Client may request a copy within thirty days unless this conflicts with a legal obligation or an ongoing investigation. No refund is due where termination results from the Client's breach.

13. Notices and Communications

• The Client consents to receiving operational, technical, and administrative notices by email, SMS, or in-app notification.
• Notices sent to the email address registered on the account are deemed received.
• The Client may unsubscribe from marketing messages; this does not extend to essential operational notices.

14. Force Majeure

The Company shall not be liable for any failure or delay resulting from circumstances beyond its reasonable control, including natural disasters, internet or power outages, failures of hosting, payment, or email providers, cyber-attacks, governmental decisions, or epidemics.

15. Amendments

The Company may amend these Terms at any time, publishing the updated version on the Platform. Continued use of the Service after publication constitutes acceptance of the amendments. For material changes, the Company will endeavour to notify Clients by email or in-app notification.

16. Assignment and Severability

• The Client may not assign its rights or obligations without the Company's written consent; the Company may assign this Agreement in the event of merger or acquisition.
• If any provision is held invalid, the remaining provisions shall remain in full force and effect.
• Failure by the Company to exercise any right shall not constitute a waiver thereof.

17. Governing Law and Jurisdiction

This Agreement is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia. The competent courts of the city of Riyadh shall have jurisdiction over any dispute arising hereunder. In the event of any discrepancy between this translation and the Arabic text, the Arabic text shall prevail.

18. Contact

Sajaya Advanced Company
Commercial Registration: 7054820431
Address: Riyadh, Al Yasmin District, Kingdom of Saudi Arabia
Email: support@ksabill.com
Phone: 0112387868

Privacy Policy

Last updated: 7 September 2026

This Policy explains how Sajaya Advanced Company (Commercial Registration No. 7054820431) collects, processes, and protects data when you use the "KSABill" and "Fatoora" platforms, in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia and its Implementing Regulations.

Note: This English text is a translation provided for convenience. In the event of any discrepancy, the Arabic version shall prevail.

1. Our Role in Processing

• In respect of Client account data and platform usage, the Company acts as a Data Controller.
• In respect of the Client's own customer data (End Recipients) entered into the system, the Company acts as a Data Processor on behalf of, and under the instructions of, the Client.
• The Client is responsible for the lawfulness of its collection of customer data and for obtaining any consents required by law before entering such data into the Platform.

2. Data We Collect

a) Data you provide:

• Account data: name, email address, mobile number, password (encrypted).
• Business data: trade name, commercial registration, tax number, address, logo.
• Operational data: invoices, quotations, sales orders, customer records, products, expenses, receipt vouchers.
• Billing data: selected plan and payment history.

b) Data collected automatically:

• IP address, device type and operating system, application version.
• Device identifier and notification identifier, used to deliver notifications and for security purposes including prevention of free-trial abuse and detection of duplicate accounts.
• Login and in-system activity logs.
• Records of rejected registration attempts, retained for fraud-prevention purposes.

c) What we do not collect:

• We never store bank card details. These are processed directly by the licensed payment service provider.

3. Purposes and Legal Basis

4. Sending Documents to Third Parties

When you use the feature to email invoices, quotations, or sales orders:

• The document is sent from a Company email address on your behalf, and the Company retains a record of the transmission for operational and support purposes.
• You are responsible for the accuracy of the recipient address and for your entitlement to correspond with the End Recipient.
• The Company does not use End Recipients' email addresses for any of its own marketing purposes.
• The Company may restrict this feature upon suspicion of misuse, in order to protect the reputation of its sending domain.

5. Data Sharing

We do not sell, rent, or trade your data. Data may be shared only in the following cases:

• Service providers: hosting, licensed payment gateways, and email, SMS, and notification providers — strictly as necessary to operate the Service and subject to contractual confidentiality obligations.
• Official authorities: ZATCA or any judicial or regulatory body, where a legal obligation or official order exists.
• Change of ownership: in the event of merger or acquisition, with notice to you.

6. Hosting and Data Transfers

• Data is stored on secure servers, and the Company endeavours to host it within the Kingdom or with providers observing equivalent protection standards.
• Where transfer outside the Kingdom is necessary, it is carried out in accordance with the controls of the Personal Data Protection Law.

7. Data Security

• Encrypted communications over HTTPS, and one-way hashing of passwords.
• Role-based access controls and audit logs for sensitive operations.
• Regular backups and ongoing security reviews.
• Nevertheless, no system is absolutely secure. The Client is responsible for safeguarding its login credentials and not sharing them.
• In the event of a breach affecting personal data, the Company will notify the competent authority and affected parties within the statutory periods.

8. Retention Periods

• Account data is retained for as long as the account remains active.
• Invoices and accounting records are retained for the periods required by law (at least six years under tax regulations) and cannot be deleted on request during that period.
• Security logs and rejected registration attempts are retained for no more than twenty-four months.
• Once statutory periods expire, data is deleted or anonymised.

9. Your Rights

Under the Personal Data Protection Law, you have the right to:

• Be informed of the legal basis and purpose for collecting your data.
• Access a copy of your personal data.
• Rectify inaccurate data.
• Request destruction of your data, unless a legal retention obligation applies.
• Withdraw consent for consent-based processing, such as marketing communications.

To exercise any of these rights, contact us at support@ksabill.com. We respond within thirty days and may request proof of identity to protect your account.

10. Children's Privacy

The Service is intended for businesses and individuals aged eighteen or above. We do not knowingly collect data from anyone below this age; if we become aware of such data, it is deleted immediately.

11. Cookies

The web interface uses essential cookies for session management and maintaining login state, and analytical cookies to improve performance. You may control these through your browser settings, noting that disabling essential cookies may prevent the Service from functioning.

12. Changes to This Policy

This Policy may be updated from time to time, with the revised version published on the Platform together with its date. For material changes, we will endeavour to notify you by email or in-app notification.

13. Contact

Sajaya Advanced Company
Commercial Registration: 7054820431
Address: Riyadh, Al Yasmin District, Kingdom of Saudi Arabia
Email: support@ksabill.com
Phone: 0112387868

If you believe our processing of your data breaches the law, you have the right to lodge a complaint with the competent personal data protection authority in the Kingdom.