Mutqan Soft Usage Policies
These policies explain what you agree to when you create a Mutqan Tools account, how the tools may be used, and what communications you consent to receive.
1. Acceptance of Terms
By creating an account and ticking the consent checkbox on the registration form, you accept these Usage Policies and you consent to receive the communications described in section 6.
The checkbox covers both of those things together. If you do not wish to accept both, please do not create an account.
2. Account Information
Please provide accurate information when you register, and keep it up to date.
You are responsible for keeping your password confidential and for activity that happens under your account. If you believe someone has accessed your account without permission, contact us at the address in section 14.
3. Tool Usage
You may use the tools for any lawful, legitimate purpose. You must not:
- misuse, abuse or deliberately overload the service
- disrupt or attack the platform or the infrastructure it runs on
- reverse engineer the service where that is prohibited by applicable law
- bypass or attempt to bypass security or access controls
- use the service for unlawful activity
4. AI Tools
The AI-powered tools generate output using a large language model. That output may be inaccurate, incomplete, or unexpected, and it should be verified before you rely on it.
AI output is not professional legal, financial or medical advice unless we state otherwise in writing. You remain responsible for reviewing anything the AI produces before acting on it.
Using AI tools requires a signed-in account so that usage limits can be applied fairly.
5. Data You Submit
Most tools run entirely in your browser and send nothing to our servers. Tools that need a server — the AI tools, the HTTP relay and the webhook tester — send the input you provide to our Workers so the request can be carried out.
We process information as needed to provide the service you asked for, operate and maintain the platform, keep it reliable and secure, troubleshoot problems and prevent abuse.
Each tool states its own privacy behaviour on its page. Please do not paste secrets, credentials or personal data you would not want transmitted into server-side tools.
Audience statistics. To understand where the website’s visitors come from, we count page views at country level. The country is determined by Cloudflare from the network your request arrives from — we never ask your browser for its location, never use GPS or precise coordinates, and never store your IP address. To tell one visit from another within a single day, the server keeps for at most two days a hash of your connection and browser signature made with a random key that is then deleted; it cannot be reversed, it is not a cookie, it is not a browser fingerprint, and it cannot recognise you on another day. Only aggregated totals (per country, day, month and page type) are kept.
Account country. When you create an account, the country of the registration request and of your later sign-ins is recorded with the account in the same way (country only, no address, no location). We do not ask you for your country and you cannot be asked to provide one.
Contact form. When you send the contact form on the homepage, the name, e-mail address, selected service and message you enter are delivered to our mailbox by Web3Forms, a form-delivery service, so that we can reply. Web3Forms may process them outside your country. The form’s contents are never sent to Google; see section 15 for the advertising measurement that applies only with your consent.
6. Communications
The single consent you give at registration includes consent to receive email from Mutqan Soft. That may include new features and tools, product and service updates, platform announcements, educational and product information, company news, and promotional or marketing messages about Mutqan Soft.
This consent is combined with acceptance of the Usage Policies in one checkbox and is required to create an account. It is not presented as a separate optional choice. Whether a combined mandatory consent of this kind is enforceable depends on the law that applies to you, and we make no claim that it is valid in every jurisdiction.
We do not yet offer a self-service preference centre or an unsubscribe link. Until we do, you can ask us to stop sending marketing email by writing to legal@mutqansoft.sa, and we will action the request. Account and security email — such as verification codes and password notifications — is not marketing and will continue.
7. Third-Party Services
The platform runs on Cloudflare Workers and stores account data in Cloudflare D1. The AI tools send your input to Anthropic’s Claude API to produce their output. Transactional email is delivered through Resend.
These providers process data on our behalf so the service can function.
The homepage contact form is delivered by Web3Forms (section 5). Only if you accept in the cookie banner does Google (Google Ads) measure whether our advertisements lead to enquiries (section 15).
8. Security
We take reasonable measures to protect the service: passwords are stored only as salted hashes, sessions and one-time codes are stored hashed, traffic is served over HTTPS, and abuse controls and rate limits are in place.
No online service can be guaranteed completely secure, and we do not claim otherwise.
9. Availability
The service may be unavailable from time to time because of maintenance, upgrades, technical faults, or issues affecting the infrastructure and providers we depend on. We do not guarantee uninterrupted availability.
10. Intellectual Property
Mutqan Soft retains all rights in the website, branding, logos, software, tools, content, designs and other proprietary materials that make up the platform.
You keep the rights in content and data that belong to you, subject to the permissions we need to operate the service and carry out what you asked the tools to do.
11. Prohibited Activities
The following are not permitted:
- unauthorised access to the platform or to another user’s account or data
- uploading or distributing malware or other harmful code
- fraud, impersonation or other illegal activity
- scraping or automation that harms the service or other users
- attempting to bypass authentication, authorisation or rate limiting
12. Limitation of Liability
The service is provided on an "as is" and "as available" basis, to the extent permitted by applicable law.
We do not guarantee that every tool will always be free of errors, that AI-generated output will always be accurate, or that the service will never be interrupted. Nothing here limits liability that cannot be limited by law.
13. Changes to This Policy
We may update this policy when we need to. Each version carries a version number, and the version you accepted is recorded with your account. Where changes are material we will communicate them through appropriate channels.
14. Contact
Questions about this policy can be sent to legal@mutqansoft.sa. This address is configured in the application and may be updated; it is provided for contact purposes and is not a statement of legal registration.
15. Cookies, Browser Storage and Advertising Measurement
Necessary cookies and storage. The website sets a small number of its own cookies that it needs to work: mt_anon (24 hours) tells anonymous visitors apart so that usage limits are fair; mt_session keeps you signed in; __Host-mt_reg links a registration in progress to this browser. In your browser’s own storage it keeps your language, theme, recently opened tools, favourites saved before you sign in, whether you are signed in, and your choice in the cookie banner (mt-consent); for the current tab only, advertisements you dismissed, a search cache, the non-sensitive parts of a request you are building in the API tools, a webhook tester session, your answers to a QA Roadmap exam in progress and a certificate code the QA Roadmap has just issued; and, for at most 30 minutes, a file you asked to download while you sign in. None of these is shared with advertisers or used to measure or target advertising; mt-consent only records your choice.
Security services. Cloudflare protects the website against abuse (including Cloudflare Turnstile on the registration and password pages) and may set its own security cookies; Cloudflare Web Analytics counts visits without cookies. The homepage loads an animation library from cdnjs, a Cloudflare content network, which receives your IP address as part of the request.
Google Ads conversion measurement — only with your consent. On the homepage and on selected service pages you are asked whether we may use Google Ads cookies. If you decline, or do not choose, the Google tag is not loaded and nothing is sent to Google. If you accept, Google receives the page address (limited to its path, advertising click identifiers, campaign tags and language), the referring page, browser details and your IP address, and Google may set cookies such as _gcl_au and _gcl_aw on this website as well as its own cookies. When a contact-form message is confirmed as delivered, we also send Google a conversion event. It carries a random identifier for that submission and, like the tag’s other requests, the page address described above (including any advertising click identifier); it never carries anything you typed in the form. We never send your name, e-mail address, phone number or message to Google, we do not use Google’s enhanced conversions, and we do not use these cookies to personalise advertising.
Google processes this data under its own terms and privacy policy, and it may be processed outside your country, including outside the Kingdom of Saudi Arabia.
Changing your choice. You can give or withdraw consent at any time with “Cookie settings” at the bottom of the homepage and of the service pages concerned. Withdrawing stops the Google tag from being used and removes the _gcl cookies from this website; it does not affect what was already sent. Your choice is stored in your browser and is asked again after 12 months or when this section changes.
Third-party software
The tools run in your browser on open-source software. These are the libraries and fonts shipped to your device or embedded in the files the tools produce, with their licences. All of them are permissively licensed; none of them sends your files anywhere.
Bundled in the browser application
| Package | Version | Licence | Used for |
|---|---|---|---|
| @cantoo/pdf-lib | 2.11.1 | MIT | Reading, editing, encrypting and writing PDF files in the browser, and the QA Roadmap certificates on the server |
| @cantoo/fontkit (via @cantoo/pdf-lib) | 2.0.12 | MIT | Font parsing, subsetting and Arabic / Devanagari shaping |
| pdfjs-dist | 6.3.289 | Apache-2.0 | Rendering PDF pages and reading their text |
| jsqr | 1.4.0 | Apache-2.0 | Reading QR codes from images in the browser (QR Code Reader) |
| fflate | 0.8.3 | MIT | ZIP and Flate compression |
| bidi-js | 1.1.0 | MIT | Unicode bidirectional text ordering |
| @jsquash/webp | 1.5.0 | Apache-2.0 | WebP encoding where the browser cannot (libwebp, BSD-3-Clause) |
| docx | 9.7.1 | MIT | Writing Word (.docx) files |
| docx-preview | 0.4.0 | Apache-2.0 | Rendering Word documents for the viewer and layout-mode conversion |
| mammoth | 1.12.3 | BSD-2-Clause | Reading Word documents as semantic HTML |
| exceljs | 4.4.0 | MIT | Reading and writing Excel (.xlsx) workbooks |
| pptxgenjs | 4.0.1 | MIT | Writing PowerPoint (.pptx) presentations |
| jszip (via docx-preview, pptxgenjs, mammoth) | 3.10.2 | MIT | ZIP packaging inside the Office libraries (dual MIT / GPL-3.0 — used under MIT) |
| markdown-it | 15.0.3 | MIT | Rendering Markdown to HTML |
| dompurify | 3.4.17 | Apache-2.0 (dual with MPL-2.0) | Sanitising HTML before it is read |
| yaml | 2.9.x | ISC | YAML parsing and formatting tools |
| fast-xml-parser | 5.11.x | MIT | XML formatting and validation tools |
Engines loaded on demand from this site
| Package | Version | Licence | Used for |
|---|---|---|---|
| @neslinesli93/qpdf-wasm | 0.3.0 | ISC | qpdf 12 compiled to WebAssembly (qpdf itself: Apache-2.0) for linearisation and structural checks |
| tesseract.js | 7.0.0 | Apache-2.0 | OCR in the browser (worker and WebAssembly core, tesseract.js-core 7.0.0) |
| @tesseract.js-data/eng | 1.0.0 | MIT | English OCR model (tessdata_best, Apache-2.0) |
| @tesseract.js-data/ara | 1.0.0 | MIT | Arabic OCR model (tessdata_best, Apache-2.0) |
| @tesseract.js-data/hin | 1.0.0 | MIT | Hindi OCR model (tessdata_best, Apache-2.0) |
Fonts: the site's typefaces and those embedded in generated PDFs
| Package | Version | Licence | Used for |
|---|---|---|---|
| Cairo | 3.130 / 4.x (Google Fonts) | SIL OFL 1.1 | The site's Arabic typeface (web font served from this site), and Arabic and Latin text in generated PDFs |
| Manrope | 4.504 (Google Fonts) | SIL OFL 1.1 | The site's English typeface (web font served from this site) |
| Noto Sans Devanagari | 2.006 / 2.x (Google Fonts) | SIL OFL 1.1 | The site's Hindi typeface (web font served from this site), and Hindi text in generated PDFs |
Server
| Package | Version | Licence | Used for |
|---|---|---|---|
| hono | 4.x | MIT | The web framework of the Cloudflare Worker (server only) |
| postal-mime | 3.0.0 | MIT-0 | Parsing inbound email for the Temporary Email tool (server only) |
| ultrahtml | 1.7.0 | MIT | Parsing inbound email HTML so it can be sanitised (server only) |