Privacy Policy

1. Who We Are

Mowafeq is a product of Cyt Software QFZ LLC, a limited liability company registered with the Qatar Free Zones Authority under registration number FZA 1046. Registered office: Office 62, Ras Bufontas Admin Building, Building 43, Street 517, Zone 49, Ras Bufontas Free Zone, Doha, Qatar. For any privacy-related questions, you can reach us at info@mowafeq.com.

2. Scope of This Policy

This policy applies to two distinct contexts:

• The Site (mowafeq.com) — our public marketing website, where we act as the data controller for the limited personal information described below.
• The Platform (app.mowafeq.com) — our subscription software, where our customers (the organizations that license Mowafeq) upload and manage their own project documents and correspondence. For that customer content, the customer is the data controller and Cyt Software acts as a data processor, handling the data only on the customer's behalf and instructions.

Where a separate agreement (such as a subscription agreement or data processing agreement) exists between Cyt Software and a customer organization, that agreement governs our handling of the customer's content and prevails over this policy to the extent of any conflict.

3. Information We Collect

We collect the following categories of information.

Information you provide to us:

• Contact and demo requests — when you contact us by email, phone, or WhatsApp, or book a demo through our scheduling tool, we collect your name, email address, phone number, company, and any details you choose to share.
• Account information — when an account is created on the Platform, we collect names, work email addresses, job roles, and organization details of authorized users.
• Customer content — documents, transmittals, letters, metadata, attachments, and related records that your organization uploads to or generates on the Platform. This content may contain personal data about your personnel and counterparties; your organization controls what is uploaded.

Information we collect automatically:

• Usage data — we use privacy-focused, self-hosted analytics to understand how the Site and Platform are used (for example, pages viewed and general interaction patterns). [CONFIRM: confirm the analytics tool sets no advertising cookies and collects no cross-site identifiers].
• Technical and log data — IP address, browser type, device information, access times, and similar diagnostic data collected by our servers and infrastructure for security and reliability.

Cookies and similar technologies:

The Platform uses strictly necessary cookies (for example, to keep you signed in and to maintain session security). The Site uses minimal cookies, and our analytics are configured to be privacy-friendly. We do not use third-party advertising cookies. [CONFIRM: maintain an up-to-date cookie inventory].

4. How We Use Information

• To provide, operate, maintain, and secure the Site and the Platform.
• To respond to your enquiries, schedule and conduct demos, and provide customer support.
• To process and host customer content on behalf of our customers, strictly to deliver the Platform's functionality.
• To monitor, analyze, and improve performance, reliability, and usability.
• To detect, prevent, and address security incidents, fraud, abuse, and technical issues.
• To comply with legal obligations and enforce our agreements.

5. Legal Bases for Processing

Where applicable data protection law requires a legal basis, we rely on one or more of the following: performance of a contract (to provide the Platform and respond to your requests); our legitimate interests (to operate, secure, and improve our services); your consent (where we ask for it, such as certain communications); and compliance with legal obligations.

6. How We Share Information

We do not sell personal information. We share information only as described below:

• Service providers (sub-processors) — we use trusted third parties to provide hosting, data storage, email delivery, demo scheduling, and analytics. These providers process data only on our instructions and under appropriate confidentiality and data-protection obligations. [CONFIRM: maintain a current list of sub-processors and make it available to customers on request].
• Within your organization — Platform content is shared among authorized users according to the roles and permissions configured by your organization.
• Legal and compliance — we may disclose information where required by law, regulation, legal process, or governmental request, or to protect the rights, safety, and security of Cyt Software, our users, or the public.
• Business transfers — if Cyt Software is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to this policy.

7. Data Storage and Location

We host data in the Gulf Cooperation Council (GCC) region to support regional data residency. [CONFIRM: confirm hosting region and provider, and whether any data is processed outside the GCC]. Customer content is stored using S3-compatible or local storage backends as configured for the customer's deployment.

8. International Transfers

If any information is transferred to, or accessed from, a country other than the one in which it was collected, we take steps to ensure that appropriate safeguards are in place in accordance with applicable law. [CONFIRM: identify any cross-border transfers and the safeguards relied upon].

9. Data Security

We implement technical and organizational measures designed to protect information, including encryption of data in transit and at rest, role-based access controls, and access logging. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. [CONFIRM: align this section with your actual security program and any certifications].

10. Data Retention

We retain personal information for as long as necessary to provide the Site and Platform, comply with our legal obligations, resolve disputes, and enforce our agreements. Customer content is retained for the duration of the customer's subscription and handled on termination in accordance with the applicable customer agreement. [CONFIRM: specify retention periods and the post-termination data deletion/return process].

11. Your Rights

Depending on your location and applicable law, you may have rights to access, correct, update, delete, or restrict the processing of your personal information, to object to certain processing, and to request a copy of your information. Because much of the content on the Platform is controlled by our customers, requests relating to that content may be directed to the relevant customer organization, and we will support them as their processor.

To exercise any of these rights, please contact us at info@mowafeq.com. We will respond in accordance with applicable law.

12. Children's Privacy

The Site and Platform are intended for business use and are not directed to children. We do not knowingly collect personal information from children.

13. Third-Party Links

The Site and Platform may contain links to third-party websites or services that we do not operate. This policy does not apply to those third parties, and we encourage you to review their privacy practices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Site or Platform after changes take effect constitutes acceptance of the updated policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your information, please contact us:

• Cyt Software QFZ LLC
• Email: info@mowafeq.com
• Phone: +974 5511 5972
• Qatar / GCC Region