Privacy Policy

MawqAI is provided by MawqAI, operated by Mostafa M. Talaat. This page explains what we collect, why, and who else processes it. Questions go to [email protected].

• Account details. Name, work email, role, and the regions or districts you are assigned to.
• Operational data you enter. Form submissions, site and ticket records, photos, documents and comments.
• Usage records. Audit entries of significant actions, sign in events, and AI processing volumes used for billing.
• Technical data. IP address, browser type and timestamps, kept for security and troubleshooting.

We do not sell personal data, and we do not use your operational data to train AI models.

To provide the service you have subscribed to: running the application, storing your records, performing the checks and reports you request, securing accounts, supporting you, and billing.

The application runs on a dedicated virtual server, with data held in a managed database service. Some processing necessarily happens outside Saudi Arabia, because the AI and infrastructure providers listed below operate internationally.

We use the following providers. Each processes only what its function requires.

• Hosting and network. Virtual server hosting and Cloudflare for network delivery.
• Database. Turso, for the application database.
• AI processing. Groq, Google, OpenRouter and Cerebras. Photos and text you submit for checking are sent to one of these to be analysed.
• Email. Resend, for transactional email such as invitations and password resets.
• Payments. Paddle.com Market Ltd (Paddle), our merchant of record, which handles card details directly. We never see or store card numbers.
• Calls and messaging. LiveKit, where in-app audio calling is used.
• Storage. Microsoft OneDrive, where you choose to export documents to it.

Operational data is kept while your subscription is active. After it ends we keep the data for 30 days so you can export or reactivate, then delete it. Billing records are kept longer where accounting rules require. Audit and security logs are kept for 12 months.

Access is controlled by role and by region or district. Passwords are stored hashed, never in readable form. Sessions are invalidated when a password changes. Two factor authentication is available and can be required for chosen roles. Traffic is encrypted in transit, and backups are encrypted.

No system is perfectly secure. If a breach affects your data we will tell you promptly and explain what happened.

We use cookies that are necessary for the service to work: keeping you signed in and protecting forms against cross site request forgery. We do not use advertising or third party tracking cookies.

You can ask for a copy of your personal data, ask us to correct it, or ask us to delete it. Where you are a user added by your employer, your employer controls the operational records and we will direct such requests to them. Email [email protected] and we will respond within 30 days.

We will post updates here with a new date at the top, and notify you of material changes by email or in the app. See also our Terms of Service.