اتفاقية الاستخدام

This Usage Agreement (the "Agreement") sets out the day-to-day rules that govern your personal use of the SARP platform (the "Platform") as an authorized user. It applies to every individual who signs in to the Platform, whether you are a staff member of a subscribing real estate office or a staff member of the SARP provider. It operates alongside, and does not replace, the commercial Terms of Service between the Provider and your office, which are shown in full on this screen and at sarp-sa.net/terms; the Terms identify the establishment that provides the Service by its registered name and unified national number, and govern fees, data processing and termination.

You agree to use the Platform only for legitimate business purposes related to your role, in accordance with Saudi laws, regulations of the General Real Estate Authority (REGA), and your employer's internal policies. You shall not use the Platform to pursue personal commercial interests, to harass others, to publish misleading listings, or to do anything that violates Saudi public order.

You are responsible for the security of your account:

• Never share your password, session, or two-factor codes with anyone, including colleagues, IT staff, or the SARP provider.
• Enable two-factor authentication (2FA) at first login and keep your recovery method current.
• Sign out on shared or public devices immediately after use.
• Report any suspected compromise of your credentials within twenty-four (24) hours to your employer's administrator and to SARP support at security@sarp-sa.net.
• Use a password of at least twelve characters, not reused from any other service.

You shall not, directly or indirectly:

• Attempt to access another office's (tenant's) data or workspace.
• Circumvent authentication, authorization, or rate-limiting controls.
• Scrape, mass-export, or bulk-copy the Platform beyond the tools provided for that purpose.
• Share customer personal data with parties who are not authorized under Saudi Personal Data Protection Law (PDPL).
• Upload content that infringes third-party rights, contains malware, or violates Saudi law.
• Reverse engineer, decompile, or probe the Platform for security weaknesses except through a disclosed responsible-disclosure program.
• Use automated tools, bots, or scripts to interact with the Platform without the provider's written consent.

The Platform holds personal data of end customers (buyers, sellers, renters, agents). You agree to handle that data in line with the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulation: process data only for the legitimate purpose you were given access for, avoid unnecessary copying, do not export customer lists to personal devices or personal email, and do not take customer data with you on leaving your employer. Violations may trigger PDPL penalties against both you and your employer, and will be reported to SDAIA where the law requires it.

You shall promptly report to SARP support (security@sarp-sa.net) any bug, vulnerability, suspicious activity, data incident, or attempted social-engineering attack you encounter while using the Platform. We appreciate good-faith security researchers and will not pursue legal action against reports made in good faith that follow our responsible disclosure guidelines.

You acknowledge that the Platform continuously logs user actions for security and compliance purposes, including logins, two-factor events, session revocations, permission changes, document exports, and acceptance of this Agreement and the NDA. Logs are retained for investigation of security incidents and to demonstrate compliance with Saudi regulators. Review of logs is restricted to authorized security personnel on a need-to-know basis.

Violation of this Agreement may result in any combination of the following: immediate revocation of Platform access, notification of your employer, notification of REGA where regulatory obligations are breached, civil claims for damages, and, where conduct constitutes a cyber-crime, referral to competent authorities under the Saudi Anti-Cyber Crime Law (نظام مكافحة جرائم المعلوماتية).

We may update this Agreement from time to time. When we do, we will bump its version identifier; at your next sign-in you will be asked to read and re-accept before you can resume using the Platform. Substantive changes that materially affect your obligations will be highlighted at the top of the screen.

By clicking "I have read and agree" and submitting, you give a binding electronic acceptance of this Agreement. Electronic acceptance has the same legal effect as a signed writing under the Saudi Electronic Transactions Law (نظام التعاملات الإلكترونية). We record the version accepted, the server timestamp, your IP address, and your browser's user-agent string at the moment of acceptance.