1. Who we are and what this covers
iSolution (“we”, “us”) operates the iSolution Managed Service Portal, also called mCloud, at mcloud.ismena-msp.com. It has two parts: a public website that describes our managed services, and a portal where our customers and our own staff sign in to see and manage their cloud operations. This notice covers both. Questions and requests about personal data go to mostafa.hosni@isolution.sa.
2. Visiting the public website
Visit measurement, done by us
Each page you open on the website is counted. We record the page path, the website that linked you here (its domain name only, never the full address you came from), any campaign tags in the link you used (utm_source, utm_medium and utm_campaign), the kind of device (mobile, tablet or desktop), the browser family, whether you were signed in to the portal at the time, and a visitor code. The visitor code is a one-way hash of the day, your IP address and your browser identifier, computed with a secret key that stays on our server. Your IP address itself is not stored, no cookie is set for this, and the code changes every day at midnight Riyadh time, so visits cannot be linked from one day to the next. These records are kept for 400 days and are seen only by iSolution administrators.
Request forms
When you send a support request or an assessment request from the website, the name, company, email address, phone number and message you enter are emailed to our team so that we can reply. They are not stored in the portal’s database: it records only that a request of that kind was sent, and when.
Server logs
Like any hosted service, our infrastructure on Google Cloud keeps request logs, which include IP addresses, for a limited time for security and troubleshooting.
3. Google Analytics, only if you accept
We may switch on Google Analytics 4 for the website and, separately, for the portal. When it is switched on, a consent bar asks for your choice. Nothing from Google is loaded until you choose Accept; if you decline, Google Analytics is never loaded. If you accept, Google Analytics sets its cookies and receives the pages you open (their addresses without search terms, filters or identifiers; campaign tags excepted), the domain of the site that referred you, and technical information about your browser. For signed-in users it receives an anonymous identifier derived from your account identifier by a one-way hash, never your name or email address.
You can change or withdraw your choice at any time with the “Analytics cookies” link at the foot of the website and of the portal menu. Google’s own privacy policy at policies.google.com/privacy explains how Google processes this data.
4. Using the portal as a signed-in user
Your account
Portal accounts are created by iSolution for the staff of our customers and for our own team. An account holds your name, your email address, your role, and the customers you may access.
Signing in
Sign-in is provided by Google Cloud Identity Platform. You can sign in with an email address and password, with a Google account, or with a Microsoft account. When you use Google or Microsoft, we receive from them your name, your email address and an account identifier so that we can recognise you; we do not request access to anything else in those accounts, such as your files, mail or calendar. Your password is handled by Identity Platform and is never visible to the portal.
Usage records
To keep the portal secure and to understand how it is used, we record each sign-in (its time, the sign-in method, your IP address, browser, operating system and device type), the time of your most recent activity, the portal pages you open, and the controls you use on those pages (the label of the button, tab or menu item, never anything you type). For pages we store the path only, never the search terms, filters or identifiers in the address. For each page we also record how long it stayed open in a visible browser tab (up to 30 minutes per page); this is stored with the same page record. These records are kept for 400 days and can be seen only by iSolution administrators. Failed sign-in attempts are handled by Identity Platform and are not recorded by the portal.
Actions you take
Changes made in the portal, for example to settings, users or tickets, are recorded against your account for accountability and kept for 30 days.
Notifications
The portal sends emails such as alert notifications, reports, digests and service-health notices to the addresses that you or your organisation configure.
5. Your organisation’s cloud data
Under its managed-service agreement, a customer grants us access to its cloud accounts. Using that access, the portal collects information about the customer’s cloud resources: inventories, performance metrics, costs, security findings, patch status, audit logs and the like. Some of it contains personal data of the customer’s own people, for example the identities named in access policies or audit logs. We process this information on the customer’s behalf and under its instructions, as its service provider, and the customer decides who in its organisation may see it. Incidents and requests are also recorded in iSolution’s service desk (ManageEngine ServiceDesk Plus) with the requester’s details.
6. Where data is kept and how it is protected
The portal and its database run on Google Cloud in the Kingdom of Saudi Arabia (Dammam region). Data is encrypted in transit and at rest. Access inside iSolution is limited to staff who need it for their work. Identity Platform, Google Analytics and our service desk are operated by their providers under their own terms and may process data in other regions.
7. Storage in your browser
The portal keeps your sign-in session in your browser’s storage so that you stay signed in, remembers your analytics choice, and remembers interface preferences such as the customer you last selected. Google Analytics cookies are set only after you accept them. The portal does not use advertising cookies.
8. Who we share data with
We do not sell personal data. We share it only with the providers that run the service for us (Google Cloud for hosting and sign-in, Google Analytics when it is switched on and accepted, ManageEngine for the service desk, and our email provider for notifications), with a customer’s own organisation for the records of its users, and when the law requires it.
9. How long we keep data
| Data | Kept for |
|---|---|
| Website visit records | 400 days |
| That a website request was sent, and its kind | 400 days |
| Sign-ins, last activity and portal pages opened | 400 days (these records keep a copy of the email address for that time, even after the account is removed) |
| Records of actions taken in the portal | 30 days |
| Account details | While the account exists; removed when your organisation or iSolution removes the account |
| Request-form emails | As long as needed to handle your request |
| Google Analytics data | According to the retention period set in our Google Analytics property and Google’s terms |
10. Your rights
Depending on where you are, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, and to object to or restrict its use, under the Saudi Personal Data Protection Law and other applicable laws. Write to mostafa.hosni@isolution.sa; we may need to confirm your identity first. If you use the portal as an employee of a customer, your organisation controls your account and much of the data about you, so we may refer your request to it.
11. Changes to this notice
We will post any change to this notice here and update the effective date above.