This policy explains what data PayDay holds, how it is used, who can see it, and what rights you have under the Personal Data Protection Law (PDPL). We have written it in plain language. The legal text is available on request.
Last updated 2026-05-21
Your employer sets up your record with PayDay. We hold your name, your national or Iqama ID, your salary information, your IBAN, the phone number and email address your employer registered for you, and your transaction history on the platform. We do not ask you to enter any of this yourself.
Your data is stored in an isolated section of the platform, separate from every other employer's data. It is encrypted while it is stored, and encrypted while it moves between your phone, your employer, and us. No employee record is shared across tenants.
Your employer's HR can see what is needed for payroll — how much you accessed and when — so they can deduct correctly. They do not see the reason for any individual request. PayDay's platform team can see across employers only through a logged, role-controlled view; every access is recorded.
Under PDPL, you have the right to access the data we hold about you, ask us to correct it, and ask us to delete it where the law allows. Requests are made through your employer's HR or directly to PayDay at support@payday.sa. We respond within the timeframes set by law.
When you first activated your PayDay account, you saw a consent screen that listed what data we hold and why. You can review your consent status at any time through your account settings. Consent changes are attributed, timestamped, and retained in the audit trail.
We do not sell your data. We share data only as needed to deliver the service: with your employer for payroll deduction, with the payment rail to disburse funds, and with regulators where the law requires. Every sharing event is governed by contract and aligned with PDPL.
We retain transaction and identity data for the period required by Saudi financial and labour regulations. After that period, data is deleted or anonymised on a defined schedule. The current retention period is available from our compliance team.
For privacy questions, data-subject requests, or to request the full PDPL-aligned policy text, email support@payday.sa.
