Linebooth — linebooth.com
Effective date: 2026-09-04
This policy explains, in plain language: what personal data we collect, why we collect it, where it is stored, who else sees it, how long we keep it, and what you can ask us to do with it.
It applies to everyone who uses Linebooth, inside and outside the Kingdom of Saudi Arabia.
It is written to meet two separate sets of Saudi rules: the Personal Data Protection Law (PDPL) and its Implementing Regulations, and the disclosure duties in the E-Commerce Law and its Implementing Regulations.
We are the data controller. That means we decide what personal data is collected and why.
| Legal name (English) | an individual seller (name not yet published) |
| Legal name (Arabic) | بائع فرد (الاسم غير منشور بعد) |
| Trading as | Linebooth |
| Capacity | Saudi individual practising under a Freelance Certificate (وثيقة العمل الحر); certificate number: not yet published — registration details will be published here |
| Address | not yet published — registration details will be published here |
| Website | linebooth.com |
| support@linebooth.com | |
| Phone | a phone number will be published here; email is the monitored channel |
| Tax number | Not applicable — not registered for VAT |
Linebooth is operated by one person. There is no company and no commercial registration; the service is provided under the freelance certificate shown above.
On tax: we are not registered for value added tax. We do not charge VAT, we do not add a VAT line to our prices, we do not issue tax invoices, and we do not hold a tax number.
Linebooth is for adults only. You may not create an account or subscribe if you are under 18.
Two reasons, stated honestly:
From 2026-09-04, the sign-up screen asks you to confirm that you are 18 or older, and records the date of that confirmation. We do not knowingly collect data from anyone under 18. See section 15 for what happens if we find out that we have.
We collect only what the service actually needs.
3.1 Account data — what is required and what is not
The Personal Data Protection Law requires us to tell you which data you must give us and which is up to you. Field by field:
| Field | Required? | Why |
|---|---|---|
| Email address | Required | It is your login, your receipt address, and how we reach you |
| No password. Signing in is a one-time link we email to that address; the link and the session it creates are held only as irreversible hashes | Not collected | We never hold a password, so we can never lose one |
| Confirmation that you are 18 or older, with the date | Required | See section 2 |
| Your acceptance of the Terms and of this policy, with the date | Required | Proof of what you agreed to |
| Country | Not collected by us | Paddle, the merchant of record, establishes your billing country at its own checkout. It reaches us only inside the payment record described in 3.2 |
| Your name | Not collected by us | We never ask for it. If you give a billing name to Paddle it reaches us inside the payment record described in 3.2 |
| Display language | Optional | Kept in your own browser, and sent to us only so a service email arrives in the language you read |
If you do not give us the required fields, we cannot create your account or take payment, so we cannot provide the service. Nothing else in this section is a condition of using Linebooth.
3.2 Subscription and billing data
Your plan, the start and end dates of your 7 free rehearsal days, your subscription status and renewal dates, the Paddle customer and subscription identifiers, and the amounts charged, renewed or refunded as Paddle reports them to us.
We never see, receive or store your card number, its expiry date or its CVV, and we hold no payment token. Card details are entered into Paddle's own fields at Paddle's own checkout. Paddle is the merchant of record: it is the seller for the payment itself, it takes the money, it handles tax, and it issues your receipt.
The one thing we keep verbatim, and why. Every notification Paddle sends us about your payments is stored exactly as it arrives, in our own store, and is not edited or trimmed. Those notifications can contain the billing name, billing address and billing email address you gave Paddle. We keep them for two reasons, and we would rather state them plainly than imply the record is anonymous:
Section 9 explains what happens to this record when you delete your account: the account stops carrying your address, and the payment record still does, for as long as we are required to keep it.
3.3 Usage and technical data
IP address, browser and device type, operating system, language settings, pages and features used, times of access, and error and security logs.
3.4 Your script content
Linebooth is a teleprompter, so you paste or type scripts into it.
What this means in practice. Because we never hold your scripts or your recordings, we cannot read them, cannot hand them to anyone, cannot lose them in a breach of our systems, and cannot restore them for you if you clear your browser storage. Export the work you want to keep.
Error reports. If we ever add automatic error reporting, such a report can capture part of what was on the page — which, in a teleprompter, can include script text. We do not run error reporting today. We will not use a reporting tool that cannot be configured to leave script contents out, and we will update this policy before switching one on.
Scripts are free text and you decide what goes in them. Please do not put sensitive personal information, or other people's personal information, into a script you send to an AI feature.
3.5 Support and complaint records
Your messages to us, the reference we give the complaint, and our answers.
3.6 What we do not collect
We do not ask for, and do not want, any data that the Personal Data Protection Law classes as Sensitive Data — including data revealing racial or tribal origin, religious, intellectual or political belief, membership of associations, criminal and security data, biometric data, genetic data, and health data. Please do not send it to us.
Since the 2023 amendment to the Law, payment card, bank, financial and location data are not classed as sensitive data — but we still protect them as described in section 10.
We do not buy personal data, and we do not collect data about you from social networks or data brokers.
| Purpose | What this means |
|---|---|
| Providing the service | Creating and running your account, deciding whether your device may use the paid Studio features, and running AI features you choose to use |
| Free rehearsal days and subscription | Running the 7 free rehearsal days (no card is asked for and none is stored), recording that they have been used, telling Paddle who is paying, sending you the notice before an annual renewal, and recording renewals, cancellations and refunds as Paddle reports them |
| Receipts and records | Issuing your receipt and keeping a record of what was paid |
| Support and complaints | Answering you, investigating problems, keeping a record of the outcome |
| Security and abuse prevention | Detecting fraud, abusive use and attacks; keeping logs; enforcing our Acceptable Use Policy |
| Improving the product | Understanding which features are used, and fixing what breaks |
| Legal compliance | Meeting our obligations under Saudi law, and answering lawful requests issued by a competent Saudi authority |
| Marketing | Only if you have opted in — see section 7 |
We do not sell your personal data. We do not share it for anyone else's advertising.
We do not rely on "legitimate interest" as a basis for any processing described in this policy.
We will only send you marketing emails if you have separately opted in before we send the first one. That opt-in is never a condition of using Linebooth.
Service emails are different and are not marketing: sign-up confirmation, the notice before your first charge and before each renewal, receipts, cancellation and refund confirmations, security notices, and changes to this policy. You cannot unsubscribe from those while you have an account, because they are part of the service.
Your personal data is transferred to, and stored on, servers located outside the Kingdom of Saudi Arabia. We want you to know that before you sign up.
The Personal Data Protection Law (Art. 13(4)) requires us to tell you who receives your data, in what capacity, and whether it leaves the Kingdom. Here it is:
| Provider | What it does | What it sees |
|---|---|---|
| Cloudflare, Inc. — Pages | Hosts linebooth.com and app.linebooth.com and delivers the pages and the app to your browser | IP address, browser and device information, request logs |
| Cloudflare, Inc. — Workers | Runs the small backend that signs you in, counts your free rehearsal days, and answers whether your device may use Studio | Email address, the hashes of your sign-in link and session, subscription state |
| Cloudflare, Inc. — Workers KV | Fast store for the entitlement record, and the store that holds the verbatim copy of every Paddle notification described in 3.2 | Entitlement records keyed by an irreversible hash of your email; in the notification copy, the billing name, address and email you gave Paddle |
| Cloudflare, Inc. — D1 database | Our queryable records: customers, sign-in sessions and links, subscriptions, free rehearsal days, entitlements, payment events, discount codes and their attribution, a log of which service email was sent to whom, anonymous funnel counters, and account-deletion requests | Email address (until deletion anonymises it), the irreversible hash of it, subscription and payment records |
| Cloudflare, Inc. — R2 storage | Holds the nightly backup of the database and the entitlement store | A copy of the two rows above |
| Paddle.com Market Ltd | Merchant of record. Runs the checkout, takes the payment, handles tax, issues your receipt, and runs the customer portal where you manage your card, your invoices and your cancellation | Cardholder name, billing email, billing address and country, card type and last four digits, payment and refund history |
| Resend (Plus Five Five, Inc.) | Sends our service emails — the sign-in link, the rehearsal-days notice, the gift notice, the account-deletion acknowledgement | Email address, the content of the message sent to you, delivery records |
| Cloudflare Web Analytics | Counts page views so we can see whether the site works | No personal data. No cookie, no device identifier, no cross-site tracking, no profile |
| {{AI_VENDOR}} — not currently used | Would process text you submit to an AI feature | Nothing today. No AI provider is connected, and this policy and the sub-processor list will name one before the feature ships |
Hosting regions. Cloudflare is a United States company and its network is global; the data described above is not held on servers inside the Kingdom. Paddle.com Market Ltd is registered in the United Kingdom. Resend is a United States company. None of them is a public body, and none of them is inside the Kingdom.
Their capacity. All the providers listed above are private-sector companies located outside the Kingdom. None of them is a public body. They act as processors on our instructions: they may use your data only to deliver their service to us, and not for their own purposes.
The safeguards we rely on. There is no official Saudi list of countries recognised as providing an adequate level of protection, so we do not claim that one applies. Before this policy takes effect we will carry out and keep a written assessment of the risks of these transfers, and we will repeat it whenever we change provider. We accept each provider's data-protection terms and, where the provider offers one, sign its data-processing agreement; before this policy takes effect we will confirm that this is in place for Cloudflare, Inc., Paddle.com Market Ltd and Resend, and for {{AI_VENDOR}} before any AI feature is switched on. We require the same protection to continue if a provider passes data on to anyone else, because Saudi transfer rules extend to those onward transfers. We send the minimum data needed, and we do not send script content to any provider other than those listed above.
We will only use AI providers whose terms do not permit them to train their models on your content, and we check this before connecting any new provider.
If we add or change a provider, we update this section.
| Data | How long |
|---|---|
| Account data (your email address, your sign-in sessions and any outstanding sign-in links) | While your account is open. When you ask us to delete it, the request is recorded and executed 30 days later — a window in which you can call it off by signing in again and choosing "Keep my account". On the day it executes, your email address is erased from the customer record, every session is deleted, and every outstanding sign-in link is destroyed |
| The irreversible hash of your email address, and the record that your free rehearsal days were used | Kept after deletion. The hash identifies nobody on its own and cannot be turned back into an address. It is the only thing that stops a deleted account being recreated for a second set of free rehearsal days, so deleting it would turn "delete my account" into an unlimited generator of free days |
| Your scripts and your recordings | We never hold them at all, so there is nothing here for us to keep or destroy. They live in your browser's storage until you delete them or clear that storage |
| Text sent to an AI feature | We do not keep it once the result has been returned to you. {{AI_VENDOR}} keeps it under its own terms — see the note below |
| Billing and payment records — including the verbatim copy of Paddle's notifications described in 3.2, which can contain your billing name and address | Kept after deletion, for as long as the law requires a seller to keep the record of a sale and for as long as we may need it for a payment dispute, a chargeback or a question from a competent authority. After deletion these records are no longer joined to any address in the customer record. We would rather say this plainly than pretend the record is anonymised: it is an accounting record, and destroying it is not an option a seller has |
| The log of which service email was sent to you | Kept. It carries a customer identifier and the name of the template — never your address, never the body of the message, never the link |
| Nightly backups of the database and the entitlement store | The deletion runs before the backup is taken that night, so the first backup made after your deletion date already holds the anonymised records. Older backups age out on their own rotation |
| Security and server logs | Up to 12 months |
| Complaint and support records | Up to 24 months after the complaint is closed |
| Consent records (Terms, 18+, marketing) | While your account is open, and for a limited period afterwards so that we can show consent was properly obtained. This period is set by us as our own practice; no Saudi rule fixes it |
How we destroy it. Records are deleted from the live database, then age out of backups as those rotate. Where a provider listed in section 8 holds a copy, we ask that provider to delete it too. Where we keep a record longer — the payment record above all — we keep only that record and nothing more.
If you have never paid us anything — a free-use or gifted account — deleting your account leaves behind nothing but the irreversible hash and the fact that the free rehearsal days were used.
Deleting your account does not cancel your subscription. Paddle bills you, not us, and we will not cancel somebody's paid subscription as a side effect of a different request. Cancel it first in "Manage subscription", which opens Paddle's own page.
No system is perfectly secure, and we do not claim ours is. What we do commit to is telling you if something goes wrong — see the next section.
A breach means personal data is leaked, damaged, lost, or accessed by someone who had no right to it.
If it happens, we investigate and contain it immediately. Then:
Under the Personal Data Protection Law you have the right to:
How to use them. Email support@linebooth.com from the address on your account and tell us which right you want to use.
Two of them need no email at all:
How fast. We answer within 30 days of receiving your request, as the Law requires. If the request is complex, or you have sent us several, we may extend once by a further 30 days, and we will tell you before the first 30 days are up.
Cost. We do not charge for handling your request. If requests are repeated or clearly excessive, the Implementing Regulations allow a fair fee; we would tell you the amount before doing anything.
Limits. We may need to keep certain records even after you ask for deletion — for example a record that a payment was made, or that you accepted the Terms — so that we can answer a later dispute or a request from a competent authority. We keep only that record and nothing more. If we cannot act on a request, we tell you why and how to challenge it.
We may ask you to confirm your identity before we act, so that nobody else can obtain your data.
We use a small number of cookies and similar browser storage. This section is the disclosure that the E-Commerce Implementing Regulations (Art. 6) require. Saudi law does not require a cookie consent pop-up; it requires this disclosure. That is why you see this section instead of a banner.
a. Cookies — we set none
Linebooth sets no cookies of its own, for any purpose, including sign-in. Everything the app needs to remember is kept in your browser's own local storage, described below, and your sign-in session is sent in a request header rather than in a cookie.
b. Browser storage on your device — never sent to us
Your scripts and projects, your recorded takes, your teleprompter settings (font size, pace, reading guide, mirror), your language choice, your sign-in session and cached subscription status, and the timestamp of your 18-or-over confirmation. All of it sits in your own browser, on your own device. You can erase all of it by clearing site data for linebooth.com in your browser, which also signs you out.
c. Measurement — Cloudflare Web Analytics, which uses no cookie
The pages report an anonymous page view to Cloudflare Web Analytics. It sets no cookie, stores no identifier on your device, and cannot follow you to another website or build a profile of you. That is precisely why we chose it, and it is why you are reading a disclosure instead of clicking a consent banner.
d. What we never use
No advertising cookies. No cross-site tracking. No profiling for advertisers. No selling of data to anyone.
You can delete or block cookies at any time in your browser settings.
Where to complain
Email support@linebooth.com with the word "Complaint" in the subject line. If you would rather speak to someone: a phone number will be published here; email is the monitored channel. Linebooth is run by one person, so email reaches us most reliably, and we always come back to you. Either way, we record the complaint in writing.
What to include
The email address on your account, what happened and when, any receipt or reference number, and what you would like us to do.
What we do
Complaining is free, and it never affects your access to the service.
If you are not satisfied
We do not knowingly collect the personal data of anyone under 18.
If we learn that an account belongs to someone under 18, we close the account, stop any billing, refund any amount taken for the unused period, delete the personal data from our database, ask every provider listed in section 8 to do the same, and confirm this in writing to the account email. We do this as soon as we can after we find out.
A parent or guardian who believes a minor has created an account should email support@linebooth.com with the account email address, and we will act on it promptly.
If we change this policy we publish the new version at linebooth.com with a new effective date. If the change materially affects your data or your rights, we email account holders before it takes effect.
This policy is published in Arabic and in English. Both versions are intended to say exactly the same thing. If they differ, the Arabic version prevails.
This policy is governed by the laws of the Kingdom of Saudi Arabia, and the competent Saudi courts have jurisdiction over any dispute about it. Those courts apply the principles of Sharia. This does not affect your right to complain to SDAIA or to the Ministry of Commerce as described in section 14.
an individual seller (name not yet published) · بائع فرد (الاسم غير منشور بعد), trading as Linebooth
Address: not yet published — registration details will be published here
Contact: support@linebooth.com (a phone number will be published here; email is the monitored channel)
Freelance Certificate number: not yet published — registration details will be published here
Not registered for VAT.