Version 1 — draft for review (2026-10-12) · Effective date: To be completed: effective date
1. Definitions
- Platform: Ghuramaa, including its websites, dashboards, portals and programming interfaces.
- Company: To be completed: the Company's legal name, which operates the Platform.
- Office: the establishment or licensed trustee that subscribes to the Platform to manage its cases, and its users: the owner, the trustee and the assistant.
- Party: the creditor or the debtor in a case, and anyone who legally represents them.
- Procedure or case: a bankruptcy procedure that the Office manages on the Platform.
- Content: data and documents entered into or uploaded to the Platform.
2. Acceptance
By using the Platform, creating an account on it, or accepting an invitation to it, you accept these Terms and the Privacy Policy. Your electronic acceptance is binding under the Electronic Transactions Law. If you use the Platform on behalf of an establishment or a client, you confirm that you have the capacity to do so.
3. Nature and limits of the service
- The Platform is a technical tool that the Office uses to manage its procedures. The Company is not a bankruptcy trustee and not a party to any procedure. It does not give legal advice and does not represent anyone before the court.
- Decisions in a procedure belong to whoever the law gives them to: the trustee recommends, and decides where the law allows; the court rules.
- What the Platform calculates or suggests — deadlines, fees, distributions, alerts, templates and voting results — is help for the user:
- It is based on the texts of the law, and the legal basis of each deadline is shown with it.
- Where the text is not decisive, the Platform applies a documented opinion, and the court or the Bankruptcy Commission may interpret it differently.
- The trustee must check it before relying on it.
- What counts:
- For announcements: what is published on the Bankruptcy Commission website.
- For notifications: what is legally established.
- For claims: what the trustee received.
4. Accounts and their security
- An account is personal and must not be shared.
- The user must keep their login details safe and turn on any verification the Platform requires.
- The user must tell us immediately of any unauthorised use of their account, and is responsible for what is done with it until they tell us.
- The Office owner invites the Office's users, sets their roles and suspends them, and is responsible for doing so.
5. Terms for the subscribing Office
- Subscription: according to the plan the Office chooses. Its fee and payment method: To be completed: plans, prices and billing.
- Office obligations:
- Use the Platform for procedures it has been appointed to, or for a lawful task of a trustee.
- Have a legal basis for every piece of data it enters about others, and check that what it enters is correct.
- Comply with the Bankruptcy Law, its regulations and the rules of the Bankruptcy Commission, including licensing, professional confidentiality and the rules of conduct.
- Notify the parties of what the law requires by the legal means, even if the Platform helps it to do so.
- Data ownership:
- The data in the Office's cases belongs to the Office.
- The Company may process it as far as needed to provide, protect and maintain the service, under the Data Processing Annex (section 15).
- The Office may at any time download its cases in a handover package, and move a case to another office through the transfer process on the Platform.
- End of subscription:
- The Office receives its cases in a handover package within To be completed: the period.
- They are then destroyed from the Platform, except what must be kept by law or what both sides agree to keep.
- The Office remains obliged to keep a copy of the procedure records for at least five years after the procedure ends (Art. 37 of the Rules Regulating the Work of Bankruptcy Trustees).
6. Terms for the parties
- Creditors, debtors and their agents use the Platform only for their own procedures, and in the capacity registered for them.
- Accuracy of what is submitted:
- Whoever submits a claim or a document confirms that it is correct, and that documents are true copies of their originals.
- They know that submitting an incorrect or exaggerated claim may expose them to liability under the Bankruptcy Law.
- Agent: submits their power of attorney, and remains responsible for its validity and scope.
- Deadlines:
- The Platform calculates and shows statutory deadlines; it does not extend them and does not replace observing them.
- A claim is submitted to the trustee, and what counts is the trustee's receipt of it.
- The party should keep a copy of what they submit.
7. Acceptable use
It is not allowed to:
- Access what you are not entitled to see, or try to get around access controls.
- Pretend to be someone else, or submit forged data or documents.
- Upload harmful software, disrupt the Platform, or overload it with automated requests beyond what its interfaces allow.
- Collect other people's data from the Platform, or use it for anything other than the purpose of the procedure.
- Use the Platform in any way that breaks the laws of the Kingdom, including the Anti-Cyber Crime Law.
8. Artificial intelligence
- Analysing claims and suggesting recommendations with artificial intelligence is an optional feature:
- The Office turns it on with its own account at the provider it chooses, and pays that provider directly.
- The Platform sends that provider the claim data and documents needed for the analysis.
- The Office is responsible for:
- The decision to turn it on, and its legal basis.
- Where the data goes, including its transfer outside the Kingdom if the provider processes it there.
- Keeping professional confidentiality in doing so.
- What the analysis produces is a draft that the trustee reviews and edits. It does not replace the trustee's opinion, and the Company does not guarantee that it is correct.
9. API, MCP connection and webhooks
- The Office may connect its systems to the Platform through the API and webhooks, and its users may connect their AI assistant through the MCP connection.
- Access limits: a connected system or assistant can reach only what the user who connected it can reach, and nothing more.
- Where the data goes: once data leaves the Platform — including its transfer outside the Kingdom — it is the responsibility of whoever made the connection, not the Company.
- Binding actions in a procedure — such as issuing a recommendation, submitting the list, objecting and voting — are not completed by an assistant or a connected system. The person entitled to them confirms them inside the Platform.
- Removing a connection: the user or the Office may remove it at any time.
10. Confidentiality
- Every user must keep confidential the procedure data they see on the Platform, and must not use it for anything other than its purpose.
- The Company and those it engages keep the data of offices and parties confidential, even after the relationship ends (Art. 41 of the Personal Data Protection Law).
11. Intellectual property
- The Platform, its software, design, brand and original templates belong to the Company.
- The user may use them under these Terms, but may not copy, resell or reverse-engineer them.
- Templates and documents the Office prepares remain the Office's own.
12. Availability and support
- We work to keep the Platform available at all times, and we take regular backups.
- The Platform may stop for maintenance or for an event beyond our control. We give advance notice of planned maintenance where possible.
- Support: To be completed: support channels, hours and service level.
13. Limits of liability
- To the extent allowed by the laws of the Kingdom, the Company is not liable for:
- A decision made by a user or an authority based on what the Platform showed or calculated.
- A missed statutory deadline.
- Content entered by a user.
- An interruption it did not cause.
- What is processed by services that the user or the Office connected themselves.
- In all cases, the Company's liability does not exceed what the Office paid for the subscription in the To be completed: period before the incident.
- This section does not apply to fraud or gross negligence.
14. Suspension and termination
- The Company may suspend an account or access that breaks these Terms or threatens the security of the Platform, as far as the breach requires. It tells the holder of the suspension and its reason, unless a law prevents this.
- The Office may end its subscription according to its plan.
- After termination, whatever by its nature should survive remains in force, such as confidentiality, ownership and statutory retention.
15. Data Processing Annex (for the Office)
The Office is the controller of the data in its cases, and the Company is a processor of that data, under Art. 8 of the Personal Data Protection Law and Art. 17 of its Implementing Regulation. Accordingly:
- Purpose: running the Platform to manage the Office's procedures, and the related notification, document generation and storage.
- Categories of data: data of the parties, their claims and documents; data of the debtor; data of the Office's users; and of anyone whose data appears in the case.
- Duration: the subscription period, then what is needed to hand over and destroy the cases (section 5, paragraph 4).
- Office instructions: the Company processes the data on the Office's documented instructions, given through its use of the Platform and its settings. If the Company believes an instruction breaks the law, it tells the Office in writing without delay.
- Breaches: the Company notifies the Office of any breach of the data in its cases without undue delay, so that the Office can notify the competent authority within the statutory period.
- Foreign laws: the Company is a Saudi establishment and is not subject to the laws of other countries in this processing. To be completed: to be reviewed if this changes
- Mandatory disclosure: the Company may disclose what a law of the Kingdom requires without the Office's prior consent, but will notify the Office unless a law prevents this.
- Sub-processors:
- They are listed in the Privacy Policy (section 5).
- The Company notifies the Office before adding or replacing a sub-processor, and the Office may object within To be completed: the period.
- The Company contracts only with those who provide the guarantees needed to apply the Law and its Regulation.
- Verification: the Office may ask for evidence of the Company's compliance with this annex, and may appoint an independent party to review it, as both sides agree.
- Data subject requests: the Company refers to the Office any request it receives about the data in the Office's cases, and helps the Office reply within the required time.
16. Changes
- The Company may change these Terms. It tells users of any material change a reasonable time before it takes effect.
- Acceptance is asked for again at login.
- Continuing to use the Platform after the effective date means accepting the change.
17. Governing law and disputes
These Terms are governed by the laws of the Kingdom of Saudi Arabia. The competent courts in To be completed: city have jurisdiction over any dispute arising from them, unless both sides agree otherwise.
18. Language and contact
- The Arabic text of these Terms is the authoritative version.
- Contact the Company through To be completed: email and national address.
- Notices are sent to the user at the email registered on the Platform, and are treated as received once sent.