Privacy Policy
Who we are
"Segmnt" is the trading name of Yahya Hamad Mohammed Mahdali, Riyadh, Saudi Arabia. We are not a registered company yet. He holds a Saudi Freelance Work Certificate from the Ministry of Human Resource and Social Development (speciality: Cloud Networks), valid to 15 October 2027. We provide video hosting and playback for business customers. Privacy contact: privacy@segmnt.cloud. Support: support@segmnt.cloud.
Our two roles
- We are the controller for your account, billing and website data. We decide how to use it.
- We are a processor for the videos you upload and for your viewers' data. When your viewers watch a video, we process that data on your behalf and under your instructions. You are responsible for informing your viewers. Our Data Processing Addendum governs that processing.
What we collect
- Your account: name, e-mail address, the sign-in you use (Google, GitHub, Reddit or Apple), and your settings.
- Your videos: the file you upload, its title, its thumbnail, and the review frames our system makes (one frame every 10 seconds).
- Usage: minutes watched, hours stored, uploads, your plan, and your verified domains.
- Technical and security data: IP address, device information and request logs. We do not collect a device fingerprint today. We plan to use one for abuse prevention when phone verification turns on; we will update this policy before we do, with a stated lawful basis and a retention period.
- Viewer data: the IP address and playback requests of people who watch a customer's video.
Why we use it, and our lawful basis
| Purpose | Data | Lawful basis (PDPL) |
|---|---|---|
| Run the service and deliver video | account, videos, usage, viewer data | Contract |
| Billing and tax records | account, invoices | Contract and legal obligation |
| Security, abuse and fraud prevention | IP address, request logs | Legitimate interest and legal obligation |
| Content safety (moderation) | video frames | Legitimate interest and legal obligation |
| Marketing e-mails | Consent (only when you opt in) |
Where we rely on consent, you can withdraw it at any time. We do not sell your data and we do not use it for advertising.
The ban list
When we ban an account, we record the ban so the same user cannot return. Phone verification and a device fingerprint are not in use today. When they turn on, we will update this policy before we collect them.
Content safety
Our system takes a few review frames from each video. A person on our team may view the frames to check content safety. We use the frames only for content safety and abuse prevention, and never to identify people. We do not use an automatic content check today.
Who we share it with (sub-processors)
- Cloudflare, Inc. (USA) - stores and serves your videos (R2 storage and the CDN) and runs our database, queues and request logs.
- Meta Platforms, Inc. (WhatsApp, USA/Ireland) - the contact link on our site; if you choose to message us there, Meta receives the number and message.
- Google LLC (USA) - web fonts in the dashboard, and sign-in.
- GitHub, Inc. / Microsoft (USA) - sign-in.
- Mintlify, Inc. (USA) - hosts our public documentation site.
We will name any other provider (e-mail, payments, content checks) here before we start to use it. We have no analytics service, no error tracking, and no AI content-check provider today.
Where your data is stored
On Cloudflare's global network, processed outside the Kingdom, including in the United States. We have not fixed a single storage country. Government or regulated customers may need hosting inside the Kingdom, which we cannot provide today.
The rule we follow
We follow the Saudi Personal Data Protection Law (PDPL), supervised by SDAIA (the Saudi Data and AI Authority).
International transfers
Some of our providers process personal data outside the Kingdom, including in the United States. We transfer it only as the PDPL and its transfer regulations permit, using the safeguards they require, including contractual safeguards with each provider and a transfer risk assessment. You can ask for details at privacy@segmnt.cloud.
How long we keep it
See our Data retention and deletion page.
If there is a data breach
If a breach affects your personal data, we notify SDAIA, and affected people where the law requires, within the legal time limit.
Your rights
You have the PDPL rights to be informed, to access your data, to receive a readable copy, to correct it, and to destroy (delete) it. Write to privacy@segmnt.cloud. We answer within 30 days. Some rights can be limited where the law requires us to keep data. If you believe we handled your data badly, you can also complain to SDAIA.
Cookies and the player
We use the minimum needed to run the site and the player. The player uses a short-lived signed token. We do not use third-party advertising trackers.
Children
Our service is for business customers. It is not for children.
Changes
We give 30 days' notice of material changes to this policy on the site before they take effect. We will update this policy before we add a new feature or provider.