Privacy Notice

1. Who is responsible

INFOSPHERE LC, a Wyoming limited liability company, of 30 N Gould St Ste R, Sheridan, WY 82801, United States ("Sphere", "we") runs sasphere.com and decides what happens to the personal data collected on this site: for that data we are the controller. Inside your own hosted database the position is the other way round. There you are the controller of the records you keep — your staff, your customers, your patients — and we are a processor acting on your instructions.

2. What we collect on this website

• When you order or write to us: your name, your organisation, your email address, your phone number, your billing address, and whatever you write in a message or a ticket.
• When you pay: Stripe handles the card. We receive a confirmation, the card brand and its last four digits, never the full number.
• When you browse: the technical record every web server keeps — the address the request came from, the time, the page, the browser — held for a short time for security and troubleshooting.
• The cookies described in section 9.

We use no advertising or analytics trackers, and this site loads no fonts, scripts or images from other companies' servers.

3. What is in your own database

Your tenant is your database on your server, and what goes into it is your decision: your contacts, your invoices, your employees and, if you run the Clinical Suite, your patients' health data. We do not choose what you collect and we never use it for our own purposes. Our staff open your database only to do work you have asked for, such as answering a ticket or making a change.

If you serve patients, the Clinical Suite carries its own privacy notice — the one your patients read on your clinic's website — and that notice, not this one, describes what you collect from them under the Personal Data Protection Law of the Kingdom of Saudi Arabia. If you switch on a feature that sends data outside the Kingdom, such as the website assistant, say so in that notice.

4. Why we use it

To answer your enquiry, to fulfil and invoice your order, to build and run your server, to answer your tickets, to send you your contract and your invoices, and to meet the accounting and legal obligations that apply to us. We do not sell personal data and we do not use it for advertising.

5. Where it is kept

This website and its own records run on our control-panel server. Your tenant lives on the dedicated server in the country you chose when you ordered, Saudi Arabia or Germany, and its encrypted backups are kept in a location matching that choice: if you chose the Kingdom, your database and its backups stay in the Kingdom. Data in transit is encrypted.

6. Who else sees it

• Stripe, our payment provider, for payments made on this site.
• Our hosting providers, who run the physical machines and hold the encrypted backups.
• Our own staff, as far as the work in front of them needs.
• A public authority, where the law requires us to disclose.

Nobody else. We do not pass your data to anyone for their own purposes.

7. How long we keep it

Orders, contracts and invoices are kept for as long as the law on accounting records requires. Tickets and messages are kept while you are a client and for a limited period afterwards. Web server logs are kept for a short time, for security. Your tenant and its backups are kept while your subscription runs and are deleted after termination, once we have given you the export our terms offer.

8. Your rights under the Personal Data Protection Law

The Personal Data Protection Law of the Kingdom of Saudi Arabia gives a person whose data we hold the right to be told how it is used and why, to see it, to receive a copy of it in a readable and portable form, to have it corrected when it is wrong or out of date, to have it destroyed when we have no lawful reason to keep it, and to withdraw a consent at any time without that affecting what was lawful before the withdrawal.

Ask us through the contact page on this site, or open a ticket from your client portal. We answer within the period the law sets and we do not charge for it. If a request reaches us about data inside a client's own database, we pass it to that client, who is the controller, and help them answer it. If you are not satisfied with our answer you may complain to the competent supervisory authority in the Kingdom, which at the time of writing is the Saudi Data and Artificial Intelligence Authority (SDAIA).

9. Cookies

This site sets the technical cookies it needs and nothing else: one to keep your session while you are signed in, one to remember your cart while you shop, and one to remember the language you chose. There are no advertising cookies and no third-party cookies.

10. Security

Access to our systems is limited to the people whose work needs it and is protected by strong authentication. Data is encrypted in transit, and backups are encrypted where they are stored. If a breach affects personal data we hold, we tell you and the authority as the law requires.

11. Children

This site is for organisations. We do not knowingly collect personal data from children through it.

12. Changes to this notice

When this notice changes we publish the new text on this page and say when it takes effect. If a change matters to you — a new recipient of your data, or a new purpose — we tell you in writing as well.

13. How to reach us

Write to INFOSPHERE LC, a Wyoming limited liability company, of 30 N Gould St Ste R, Sheridan, WY 82801, United States from the contact page on this site, or open a ticket from your client portal.

Terms and Conditions · Cancellation and refunds · Contact us