Privacy Policy
1. Introduction and Scope
This Policy explains how RAWA Digital Solutions ("RAWA") collects, uses and protects data when you use the RAWA platform (the "Service"). It applies to subscribers, their users and visitors to our sites. By using the Service you agree to this Policy, which is read together with the Terms of Use.
2. Data We Collect
(a) Account data: name, email, business name, phone, language, country of operation. (b) Billing data: plan, activation codes, invoices, payment records, company name and contact shown on the invoice. (c) Technical data: IP address, device and browser type, login and usage logs, essential cookies and the language cookie. (d) Subscriber Content: what you enter into the Service such as items, sales and staff, and which may include personal data of your customers (name, phone, address) — always optional and never required.
3. How and Why We Use Data
We use data to: operate and provide the Service to you; handle billing and subscriptions; provide support and operational communications; ensure security and prevent fraud and abuse; improve the product with aggregated, non-identifying analytics; and comply with legal obligations. Legal bases: performance of our contract with you, our legitimate interest in running and protecting the Service, consent where required, and legal obligation.
4. Subscriber Content — Roles
For personal data of your customers within Subscriber Content, you are the "controller" and we are the "processor", processing it on your instructions and only to operate the Service. You are responsible for having a lawful basis to collect it, for informing your customers, and for handling their rights requests. We do not use Subscriber Content for our marketing and do not sell it.
5. Cookies and Similar Technologies
We use cookies that are necessary for session and security, and preference cookies (such as language and light/dark mode). We do not use third-party advertising trackers. You can set your browser to refuse some cookies, which may affect how the Service works.
6. Sharing and Sub-processors
We may share data with: hosting and infrastructure providers who process it on our behalf under confidentiality obligations; competent authorities where legally required; and a party to a merger or sale of business, with equivalent protection maintained. We do not sell your data.
7. International Data Transfers
The Service is hosted on servers that may be inside or outside Jordan with trusted infrastructure providers. Where data is transferred outside your country we apply reasonable contractual and technical safeguards to protect it.
8. Data Retention
We keep account and billing data for the life of the account and for a period afterwards for legal and accounting purposes. Subscriber Content is deleted within a reasonable period (typically up to 90 days) after the account ends, unless the law requires longer retention. Rotating backups may persist for a limited time and are then automatically overwritten.
9. Security
We apply reasonable measures: encryption in transit (HTTPS), isolation of each subscriber's data, access controls, logging and monitoring. No system is completely secure; if a breach materially affects your personal data we will notify you and the competent authorities to the extent the law requires.
10. Your Rights
Subject to applicable law, you have the right to access, correct, delete and port your personal data held by us, to object to certain processing, and to withdraw consent. To exercise these, contact us at the email below. Requests about your customers' data within Subscriber Content are directed to you as the controller.
11. Children
The Service is directed at businesses and not at children, and we do not knowingly collect data from anyone under the age of majority.
12. Changes to this Policy
We may update this Policy and will post the updated version here with its effective date, and notify material changes by a reasonable means. The Arabic version is the legally binding one; any other translation is for convenience only.
13. Contact
For any privacy question or to exercise your rights: legal@rawaerp.com