OCTOPUS-WORKER

PRIVACY POLICY

Worker Privacy Policy — Kingdom of Saudi Arabia

Effective Date: 07/07/2026

1. Introduction

This Privacy Policy ("Policy") explains how Mawjat Company, LLC. a company registered in the Kingdom of Saudi Arabia. ("Octopus", "we", "us", or "our") collects, uses, discloses, and protects the personal data of Workers ("Worker", "you") who use the Octopus Worker mobile application (the "App") to receive and manage home cleaning and domestic staffing Assignments within the Kingdom of Saudi Arabia.

This Policy is issued in accordance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL), issued by Royal Decree No. M/19/1443H, and its Implementing Regulations, as may be amended from time to time. By using the App, you acknowledge that you have read and understood this Policy.

This Policy should be read together with the Octopus Worker Terms and Conditions. In the event of any conflict between the two specifically regarding the handling of personal data, this Policy shall prevail. This Policy governs only Octopus's handling of your data through the App; it does not cover how your Partner Company handles your personal data as your employer, which is governed separately by your employment contract and applicable law.

2. Data We Collect

We collect the following categories of personal data, depending on how you interact with the App:

• Profile photo: a photo of you, displayed to Customers so they can identify you as the Worker assigned to their Assignment when you arrive.
• Registration and eligibility data: your Partner Company affiliation, and confirmation of your authorization by that Partner Company to use the App.
• Location data: your real-time location while the App is active during working hours, used to coordinate your Assignments and your pickup by an assigned driver.
• Assignment data: your schedule, service type, Customer address, special instructions, and Assignment status (accepted, in progress, completed).
• Communication data: messages or calls made through the App with your assigned driver, Customers, or Octopus Support.
• Performance data: your ratings, feedback from Customers, Assignment acceptance and completion history, and any safety or conduct reports involving you.
• Technical data: device type, operating system, IP address, app usage data, and crash/diagnostic logs, collected automatically to maintain and improve the App.
• Support data: records of your correspondence with Octopus Support, including complaints and reports you make.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes, and on the following legal bases recognized under the PDPL:

• To register you on the App and verify your authorization by your Partner Company — necessary for the performance of our contract with you (the Octopus Worker Terms and Conditions).
• To offer, schedule, and manage your Assignments, and to share necessary details (such as the Customer's address and service instructions) with you — necessary for the performance of our contract with you.
• To coordinate your transportation with an assigned driver, including sharing your location and pickup details with that driver — necessary for the performance of our contract with you.
• To display your name and photo to Customers for identity verification purposes — based on our legitimate interest, and that of Customers, in confirming the identity of the Worker attending an Assignment.
• To share your Assignment completion history and performance data with your Partner Company — based on our legitimate interest in supporting the proper administration of your employment relationship, including any performance-related arrangements between you and your Partner Company.
• To respond to support requests, investigate safety reports, and communicate with you regarding your Assignments — necessary for the performance of our contract with you, or based on our legitimate interest in providing responsive support and a safe platform.
• To detect, investigate, and prevent fraud, abuse, or violations of the Octopus Worker Terms and Conditions — based on our legitimate interest in protecting the security and integrity of the App.
• To comply with applicable legal, regulatory, or governmental requirements — necessary for compliance with a legal obligation.

4. How We Share Your Data

We share your personal data only as necessary for the purposes described in this Policy, and with the following categories of recipients:

• Your Partner Company, including your registration status, Assignment completion history, ratings, and any safety or conduct reports, to support the administration of your employment relationship.
• Customers, limited to your name and profile photo, and the details of the Assignment, so they can identify you and know what to expect.
• The driver assigned to transport you, limited to your name, contact details, and pickup location and time.
• Technology service providers who support our infrastructure, such as cloud hosting, analytics, and customer support tools, under contractual confidentiality and data protection obligations.
• Government authorities or regulators, where disclosure is required by applicable KSA law, a valid legal process, or to protect the rights, safety, or property of Octopus, our Workers, Customers, or the public.
• A successor entity in the event of a merger, acquisition, or sale of business assets, subject to that entity's assumption of obligations equivalent to those in this Policy.

We do not sell your personal data to third parties. The App does not process any wage or payment data, as compensation is handled entirely outside the App under your employment contract with your Partner Company.

5. Cross-Border Data Transfers

Where any of our technology service providers process or store data outside the Kingdom of Saudi Arabia, we ensure that such transfers comply with the requirements of the PDPL and its Implementing Regulations, including verifying that the destination country provides an adequate level of protection, or by putting in place appropriate contractual safeguards, as required.

6. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, including to maintain your App account, coordinate Assignments, support your Partner Company's administration of your employment, and resolve disputes or safety reports. If your Partner Company notifies us that your employment or sponsorship has ended, we will delete or anonymize your personal data within a reasonable period, except where retention is required to comply with a legal obligation or to establish, exercise, or defend legal claims.

7. Your Rights

Under the PDPL, you have the right to:

• Be informed of the legal basis and purpose of collecting your personal data.
• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete personal data.
• Request destruction of your personal data where it is no longer required for the purpose for which it was collected, subject to applicable legal retention requirements.

To exercise any of these rights regarding data processed through the App, please contact us using the details in Section 10 below. Requests regarding data held by your Partner Company as your employer should be directed to your Partner Company. We will respond to your request within the timeframe required under the PDPL and its Implementing Regulations.

8. Data Security

We implement reasonable technical and organizational measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction, including access controls, encryption of sensitive data in transit, and contractual obligations on third-party service providers. No system can guarantee absolute security, and we encourage you to keep your account credentials confidential and never share them with anyone, including your Partner Company or a driver.

9. Location Tracking

The App collects your real-time location while it is active during your working hours, primarily to coordinate your transportation with an assigned driver and to confirm your arrival at an Assignment. We do not track your location when the App is closed or outside your working hours.

10. Contact Us

If you have questions about this Policy, or wish to exercise any of your rights under the PDPL regarding data processed through the App, please contact us at: support@octopus.com.sa

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in our data practices or applicable law. Material changes will be notified to you through the App or by other reasonable means, and the "Effective Date" at the top of this Policy will be updated accordingly. Continued use of the App after such notice constitutes acceptance of the revised Policy.