Privacy Policy

1. Information we collect

Account and identity data: first and last name, email address, mobile number, password credentials (stored in hashed form by our authentication provider), profile photo, language, role, and account status.

Business data: business name (English and Arabic), commercial registration number, VAT or tax details where provided, city, address, contact details, logo and cover images, description, visibility settings, team members and their roles, and approval or verification status.

Commercial and transactional data: catalogs and product listings (including weight, purity, price, manufacturing cost, stock, images, tags, minimum order quantities), carts, favourites, orders and order items, order status history, cancellations, inventory movements, shop groups, vendor followers, invitations, and notes.

Communications data: messages you send us, support requests, contact-form submissions, and notification history.

Technical and usage data: device and browser type, operating system, application version, IP address, language and locale, timestamps, pages and screens viewed, actions taken, push notification tokens, session and authentication events, audit logs, diagnostic and crash reports, and performance data.

Data from third parties: if you sign in with a third-party identity provider, we receive the identifiers and basic profile fields that provider shares with us (such as name and email address).

We do not intentionally collect payment card details, bank account numbers, or national identification documents through the Platform. Please do not upload them unless we expressly ask you to.

2. How we use information

We use information to:

• create and administer accounts, organizations, and team access;
• verify businesses and decide on approval, restriction, or suspension;
• operate marketplace features — catalogs, discovery, carts, orders, tracking, notifications, and reporting;
• provide support and respond to your requests;
• secure the Platform, detect and prevent fraud, abuse, and unauthorized access, and enforce our terms;
• maintain audit trails and records required for accountability and compliance;
• measure, analyse, and improve the Platform, and develop new features and products;
• produce statistics, insights, benchmarks, and market data;
• train and improve algorithms, statistical models, and artificial-intelligence systems;
• send service, transactional, security, and administrative messages;
• send marketing about the Platform, where permitted; and
• comply with legal obligations and respond to lawful requests.

As set out in the Terms and Conditions, data on the Platform belongs to us and we may use it, including in aggregated, derived, or de-identified form, for any purpose permitted by law.

3. Grounds for processing

Depending on the activity, we rely on: the performance of a contract with you or your organization; our legitimate interests in operating, securing, analysing, and improving a business platform and in developing our business; compliance with legal obligations; and, where required, your consent — for example for certain marketing communications or device permissions such as push notifications. Where we rely on consent, you may withdraw it at any time, without affecting processing that already took place.

4. What other users can see

The Platform is a marketplace, so some information is shared with other users by design:

• vendors can see the business details, contact information, orders, and order history of shops that deal with them, and of shops in their groups;
• shops can see the business details, catalogs, prices, and contact information of vendors that are visible to them;
• owners and administrators of an organization can see the profile and activity of members of that organization, including audit records; and
• our administrators can see all data on the Platform.

Do not put anything on the Platform that you are not willing to share with your counterparties.

5. Sharing with others

We share information with:

• service providers who host, store, secure, and support the Platform — including cloud hosting, database and authentication providers, email delivery, messaging and SMS providers, push notification services, application distribution platforms, analytics, and error-monitoring services;
• professional advisers, auditors, and insurers;
• competent authorities, regulators, and law enforcement where we believe disclosure is required or permitted by law, or is necessary to protect our rights, the Platform, or any person; and
• an acquirer, investor, successor, or affiliate in connection with a financing, merger, acquisition, reorganization, or sale of assets — in which case the data transfers with the business.

We may share and publish aggregated, derived, or de-identified information that does not directly identify you, without restriction.

6. International transfers

Our service providers operate infrastructure in several countries, so your information may be stored and processed outside the Kingdom of Saudi Arabia. Where that happens, we take the steps required by applicable law to protect the information, including contractual safeguards with the providers concerned.

7. Retention

We keep information for as long as we need it for the purposes described in this Policy, including for the life of the account and afterwards for record-keeping, dispute resolution, security, audit, statistical, analytical, and legal-compliance purposes.

Business, transactional, and audit records may be retained for the periods required by commercial, tax, and anti-money-laundering law.

Aggregated, derived, and de-identified data may be kept indefinitely.

8. Security

We use technical and organizational measures appropriate to a service of this kind, including encryption in transit, access controls, row-level database security that separates organizations, role-based permissions, audit logging, and monitoring.

No system is completely secure. You are responsible for keeping your credentials confidential, for your own devices, and for who you grant access to within your organization. Tell us immediately at privacy@jewe.solutions if you believe your account has been compromised.

9. Your rights

Subject to applicable law, including the Saudi Personal Data Protection Law, you may ask us to:

• confirm what personal data we hold about you and obtain access to it;
• correct data that is inaccurate or incomplete;
• delete data we no longer have a lawful ground to keep;
• restrict or object to certain processing; and
• withdraw consent where processing is based on consent.

To make a request, contact privacy@jewe.solutions. We may need to verify your identity, and we may decline or limit a request where the law allows — for example where the data is needed for a contract, a legal obligation, an ongoing dispute, security, fraud prevention, or record-keeping, or where it relates to another user's rights, or where it is aggregated or de-identified and no longer identifies you.

Requests relating to data your organization controls may be referred to that organization.

10. Notifications, cookies, and similar technologies

We use cookies, local storage, and similar technologies to keep you signed in, remember preferences such as language and theme, secure the service, and understand how it is used. You can control these through your browser or device settings, but some features will not work without them.

If you allow push notifications, we store a device token so we can send you order and service updates. You can turn notifications off in your device settings at any time.

11. Children

The Platform is not directed at anyone under 18 and we do not knowingly collect their data. If you believe a minor has provided information, contact us and we will delete it.

12. Changes to this Policy

We may update this Policy at any time. The current version is always available in the Platform, and material changes may be notified to you or may require your acceptance before you continue using the Platform.

13. Contact

Privacy questions and requests: privacy@jewe.solutions. General support: support@jewe.solutions.

Jewe, Riyadh, Kingdom of Saudi Arabia.