Mutqan Soft Usage Policies

These policies explain what you agree to when you create a Mutqan Tools account, how the tools may be used, and what communications you consent to receive.

Version 1.1 · 2026-09-09

1. Acceptance of Terms

By creating an account and ticking the consent checkbox on the registration form, you accept these Usage Policies and you consent to receive the communications described in section 6.

The checkbox covers both of those things together. If you do not wish to accept both, please do not create an account.

2. Account Information

Please provide accurate information when you register, and keep it up to date.

You are responsible for keeping your password confidential and for activity that happens under your account. If you believe someone has accessed your account without permission, contact us at the address in section 14.

3. Tool Usage

You may use the tools for any lawful, legitimate purpose. You must not:

  • misuse, abuse or deliberately overload the service
  • disrupt or attack the platform or the infrastructure it runs on
  • reverse engineer the service where that is prohibited by applicable law
  • bypass or attempt to bypass security or access controls
  • use the service for unlawful activity

4. AI Tools

The AI-powered tools generate output using a large language model. That output may be inaccurate, incomplete, or unexpected, and it should be verified before you rely on it.

AI output is not professional legal, financial or medical advice unless we state otherwise in writing. You remain responsible for reviewing anything the AI produces before acting on it.

Using AI tools requires a signed-in account so that usage limits can be applied fairly.

5. Data You Submit

Most tools run entirely in your browser and send nothing to our servers. Tools that need a server — the AI tools, the HTTP relay and the webhook tester — send the input you provide to our Workers so the request can be carried out.

We process information as needed to provide the service you asked for, operate and maintain the platform, keep it reliable and secure, troubleshoot problems and prevent abuse.

Each tool states its own privacy behaviour on its page. Please do not paste secrets, credentials or personal data you would not want transmitted into server-side tools.

Audience statistics. To understand where the website’s visitors come from, we count page views at country level. The country is determined by Cloudflare from the network your request arrives from — we never ask your browser for its location, never use GPS or precise coordinates, and never store your IP address. To tell one visit from another within a single day, the server keeps for at most two days a hash of your connection and browser signature made with a random key that is then deleted; it cannot be reversed, it is not a cookie, it is not a browser fingerprint, and it cannot recognise you on another day. Only aggregated totals (per country, day, month and page type) are kept.

Account country. When you create an account, the country of the registration request and of your later sign-ins is recorded with the account in the same way (country only, no address, no location). We do not ask you for your country and you cannot be asked to provide one.

Contact form. When you send the contact form on the homepage, the name, e-mail address, selected service and message you enter are delivered to our mailbox by Web3Forms, a form-delivery service, so that we can reply. Web3Forms may process them outside your country. The form’s contents are never sent to Google; see section 15 for the advertising measurement that applies only with your consent.

6. Communications

The single consent you give at registration includes consent to receive email from Mutqan Soft. That may include new features and tools, product and service updates, platform announcements, educational and product information, company news, and promotional or marketing messages about Mutqan Soft.

This consent is combined with acceptance of the Usage Policies in one checkbox and is required to create an account. It is not presented as a separate optional choice. Whether a combined mandatory consent of this kind is enforceable depends on the law that applies to you, and we make no claim that it is valid in every jurisdiction.

We do not yet offer a self-service preference centre or an unsubscribe link. Until we do, you can ask us to stop sending marketing email by writing to legal@mutqansoft.sa, and we will action the request. Account and security email — such as verification codes and password notifications — is not marketing and will continue.

7. Third-Party Services

The platform runs on Cloudflare Workers and stores account data in Cloudflare D1. The AI tools send your input to Anthropic’s Claude API to produce their output. Transactional email is delivered through Resend.

These providers process data on our behalf so the service can function.

The homepage contact form is delivered by Web3Forms (section 5). Only if you accept in the cookie banner does Google (Google Ads) measure whether our advertisements lead to enquiries (section 15).

8. Security

We take reasonable measures to protect the service: passwords are stored only as salted hashes, sessions and one-time codes are stored hashed, traffic is served over HTTPS, and abuse controls and rate limits are in place.

No online service can be guaranteed completely secure, and we do not claim otherwise.

9. Availability

The service may be unavailable from time to time because of maintenance, upgrades, technical faults, or issues affecting the infrastructure and providers we depend on. We do not guarantee uninterrupted availability.

10. Intellectual Property

Mutqan Soft retains all rights in the website, branding, logos, software, tools, content, designs and other proprietary materials that make up the platform.

You keep the rights in content and data that belong to you, subject to the permissions we need to operate the service and carry out what you asked the tools to do.

11. Prohibited Activities

The following are not permitted:

  • unauthorised access to the platform or to another user’s account or data
  • uploading or distributing malware or other harmful code
  • fraud, impersonation or other illegal activity
  • scraping or automation that harms the service or other users
  • attempting to bypass authentication, authorisation or rate limiting

12. Limitation of Liability

The service is provided on an "as is" and "as available" basis, to the extent permitted by applicable law.

We do not guarantee that every tool will always be free of errors, that AI-generated output will always be accurate, or that the service will never be interrupted. Nothing here limits liability that cannot be limited by law.

13. Changes to This Policy

We may update this policy when we need to. Each version carries a version number, and the version you accepted is recorded with your account. Where changes are material we will communicate them through appropriate channels.

14. Contact

Questions about this policy can be sent to legal@mutqansoft.sa. This address is configured in the application and may be updated; it is provided for contact purposes and is not a statement of legal registration.

15. Cookies, Browser Storage and Advertising Measurement

Necessary cookies and storage. The website sets a small number of its own cookies that it needs to work: mt_anon (24 hours) tells anonymous visitors apart so that usage limits are fair; mt_session keeps you signed in; __Host-mt_reg links a registration in progress to this browser. In your browser’s own storage it keeps your language, theme, recently opened tools, favourites saved before you sign in, whether you are signed in, and your choice in the cookie banner (mt-consent); for the current tab only, advertisements you dismissed, a search cache, the non-sensitive parts of a request you are building in the API tools, a webhook tester session, your answers to a QA Roadmap exam in progress and a certificate code the QA Roadmap has just issued; and, for at most 30 minutes, a file you asked to download while you sign in. None of these is shared with advertisers or used to measure or target advertising; mt-consent only records your choice.

Security services. Cloudflare protects the website against abuse (including Cloudflare Turnstile on the registration and password pages) and may set its own security cookies; Cloudflare Web Analytics counts visits without cookies. The homepage loads an animation library from cdnjs, a Cloudflare content network, which receives your IP address as part of the request.

Google Ads conversion measurement — only with your consent. On the homepage and on selected service pages you are asked whether we may use Google Ads cookies. If you decline, or do not choose, the Google tag is not loaded and nothing is sent to Google. If you accept, Google receives the page address (limited to its path, advertising click identifiers, campaign tags and language), the referring page, browser details and your IP address, and Google may set cookies such as _gcl_au and _gcl_aw on this website as well as its own cookies. When a contact-form message is confirmed as delivered, we also send Google a conversion event. It carries a random identifier for that submission and, like the tag’s other requests, the page address described above (including any advertising click identifier); it never carries anything you typed in the form. We never send your name, e-mail address, phone number or message to Google, we do not use Google’s enhanced conversions, and we do not use these cookies to personalise advertising.

Google processes this data under its own terms and privacy policy, and it may be processed outside your country, including outside the Kingdom of Saudi Arabia.

Changing your choice. You can give or withdraw consent at any time with “Cookie settings” at the bottom of the homepage and of the service pages concerned. Withdrawing stops the Google tag from being used and removes the _gcl cookies from this website; it does not affect what was already sent. Your choice is stored in your browser and is asked again after 12 months or when this section changes.

Third-party software

The tools run in your browser on open-source software. These are the libraries and fonts shipped to your device or embedded in the files the tools produce, with their licences. All of them are permissively licensed; none of them sends your files anywhere.

Bundled in the browser application

PackageVersionLicenceUsed for
@cantoo/pdf-lib 2.11.1 MIT Reading, editing, encrypting and writing PDF files in the browser, and the QA Roadmap certificates on the server
@cantoo/fontkit (via @cantoo/pdf-lib) 2.0.12 MIT Font parsing, subsetting and Arabic / Devanagari shaping
pdfjs-dist 6.3.289 Apache-2.0 Rendering PDF pages and reading their text
jsqr 1.4.0 Apache-2.0 Reading QR codes from images in the browser (QR Code Reader)
fflate 0.8.3 MIT ZIP and Flate compression
bidi-js 1.1.0 MIT Unicode bidirectional text ordering
@jsquash/webp 1.5.0 Apache-2.0 WebP encoding where the browser cannot (libwebp, BSD-3-Clause)
docx 9.7.1 MIT Writing Word (.docx) files
docx-preview 0.4.0 Apache-2.0 Rendering Word documents for the viewer and layout-mode conversion
mammoth 1.12.3 BSD-2-Clause Reading Word documents as semantic HTML
exceljs 4.4.0 MIT Reading and writing Excel (.xlsx) workbooks
pptxgenjs 4.0.1 MIT Writing PowerPoint (.pptx) presentations
jszip (via docx-preview, pptxgenjs, mammoth) 3.10.2 MIT ZIP packaging inside the Office libraries (dual MIT / GPL-3.0 — used under MIT)
markdown-it 15.0.3 MIT Rendering Markdown to HTML
dompurify 3.4.17 Apache-2.0 (dual with MPL-2.0) Sanitising HTML before it is read
yaml 2.9.x ISC YAML parsing and formatting tools
fast-xml-parser 5.11.x MIT XML formatting and validation tools

Engines loaded on demand from this site

PackageVersionLicenceUsed for
@neslinesli93/qpdf-wasm 0.3.0 ISC qpdf 12 compiled to WebAssembly (qpdf itself: Apache-2.0) for linearisation and structural checks
tesseract.js 7.0.0 Apache-2.0 OCR in the browser (worker and WebAssembly core, tesseract.js-core 7.0.0)
@tesseract.js-data/eng 1.0.0 MIT English OCR model (tessdata_best, Apache-2.0)
@tesseract.js-data/ara 1.0.0 MIT Arabic OCR model (tessdata_best, Apache-2.0)
@tesseract.js-data/hin 1.0.0 MIT Hindi OCR model (tessdata_best, Apache-2.0)

Fonts: the site's typefaces and those embedded in generated PDFs

PackageVersionLicenceUsed for
Cairo 3.130 / 4.x (Google Fonts) SIL OFL 1.1 The site's Arabic typeface (web font served from this site), and Arabic and Latin text in generated PDFs
Manrope 4.504 (Google Fonts) SIL OFL 1.1 The site's English typeface (web font served from this site)
Noto Sans Devanagari 2.006 / 2.x (Google Fonts) SIL OFL 1.1 The site's Hindi typeface (web font served from this site), and Hindi text in generated PDFs

Server

PackageVersionLicenceUsed for
hono 4.x MIT The web framework of the Cloudflare Worker (server only)
postal-mime 3.0.0 MIT-0 Parsing inbound email for the Temporary Email tool (server only)
ultrahtml 1.7.0 MIT Parsing inbound email HTML so it can be sanitised (server only)

The complete licence texts are included with each package on the linked project pages. Mutqan Soft is not affiliated with these projects.