Privacy policy
How we handle the data you send us.
Last updated July 2026. This policy covers data submitted through our founder, investor, and newsletter forms, and is prepared in line with the Saudi Personal Data Protection Law (PDPL).
Overview
KaRama Venture Studio ("KaRama," "VS") respects the privacy of everyone who visits this site or submits information to us. This policy explains what personal data we collect, why we collect it, how it is stored and protected, and the rights available to you under the PDPL and its implementing regulations.
This policy applies to data collected through the founder submission form, the investor request form, and the newsletter sign-up on this site. It does not apply to data collected by third-party sites we link to.
Data controller
KaRama Venture Studio, resident on the SFDA campus, Mezzanine Floor, Building 2, SFDA Branch, Middle Sector, Hittin, Riyadh 13513, Kingdom of Saudi Arabia, is the data controller responsible for the personal data described in this policy.
For any question about this policy or how your data is handled, write to KaRamaVS@KaRama.Tech.
Data we collect
Founder submissions
Name, email address, organization, technology area, company stage, a link to supporting material, and any message you provide.
Investor requests
Name, email address, firm or institution, investor type, and the areas of interest you describe.
Newsletter sign-up
Email address only.
Collected automatically
When you submit a form, we record the originating IP address for fraud and abuse prevention. We do not use tracking or advertising cookies on this site.
Why we use it
We use the data you submit to:
- Evaluate founder submissions and respond to them.
- Process and respond to investor requests, including releasing portfolio materials under NDA.
- Send the quarterly studio letter to newsletter subscribers.
- Send confirmation and internal notification emails related to your submission.
- Detect and prevent spam or fraudulent submissions.
Our legal basis is your consent, given by submitting the form, and our legitimate interest in operating the studio's founder and investor pipeline. You may withdraw consent at any time as described below.
Storage and sharing
Submissions are stored in a managed database and are accessible only to KaRama personnel who need them to do their work. We use third-party processors to operate this site and its forms, including database hosting and transactional email delivery. These processors act only on our instructions and are bound by confidentiality and data protection obligations.
We do not sell personal data. We do not share it with third parties for their own marketing purposes.
Some of our processors may store or process data on infrastructure located outside the Kingdom of Saudi Arabia. Where that is the case, we take steps consistent with PDPL requirements for cross-border transfer, including using processors that maintain appropriate technical and organizational safeguards.
Retention
We retain founder and investor submissions for as long as reasonably necessary to evaluate them and maintain a record of the relationship, and no longer than necessary for that purpose. Newsletter email addresses are retained until you unsubscribe or ask us to delete them.
Your rights
Under the PDPL, you have the right to:
- Know what personal data we hold about you and why.
- Access a copy of your personal data.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data, subject to legal or contractual retention requirements.
- Withdraw consent at any time, including unsubscribing from the newsletter.
- Lodge a complaint with the Saudi Data & AI Authority (SDAIA) if you believe your data has been mishandled.
To exercise any of these rights, write to KaRamaVS@KaRama.Tech. We will respond within the timeframe required by applicable law.
Changes
We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.