Privacy Notice

to be confirmed operates MOWJ and is responsible for the personal data described here. The privacy contact is to be confirmed.

This notice is a first draft. It has not yet been reviewed by counsel against applicable data protection law, including Saudi Arabia's Personal Data Protection Law, and we do not claim compliance with it.

• Account data: name, email address, a hashed password, language preference and, if you add one, a phone number.
• Organization data: organization name, legal name, registration number, country, city and website, where you provide them.
• Creator profile data: display name, handle, bio, photo, city and country, languages, categories, social account handles and links, portfolio items, availability and, if you choose, an indicative rate. Audience numbers are entered by you and labelled creator-reported.
• Campaign data: briefs, plans, shortlists, invitations, offers, agreements, deliverables and comments, files you upload, publication links and evidence, metrics with their sources, and payment status records including references and receipts.
• Verification data: documents you submit for identity or organization review. They are stored privately and are never public.
• Messages you send us through the contact form.
• Technical data: IP address and request details used for security and rate limiting, error logs, and first-party analytics events about how the product is used.
• Consent records: the consent you give when you sign up.

• To provide the platform and the features you use.
• To keep the platform secure and to prevent abuse.
• To reply to you and to give support.
• To understand and improve the product, using first-party analytics.
• To meet legal obligations.

The legal bases we rely on will be confirmed by counsel.

Your creator profile is visible to the public only if you set it to public. A public profile shows your name, handle, bio, photo, location, languages, categories, social links, portfolio and the metrics you chose to share, each with its source label. Your indicative rate is shown only if you choose to show it.

Everything else, including campaigns and negotiations, is visible only to the people involved and, within an organization, to the members whose role allows it. Each organization's data is isolated from every other organization's.

If you use AI features, the brief and campaign text that you submit to them is sent to an AI model provider so that it can produce the result. We do not send data from your social accounts, because we do not connect to them. AI features are optional, and a rule-based fallback is used when AI is unavailable.

We use the following kinds of service provider as processors:

• A hosting and content delivery provider, which runs the application and delivers pages.
• A managed database provider, which stores the data. Backups are handled by the provider.
• An email provider (optional), which sends notification and verification emails when email is enabled.
• An AI model provider (optional), which processes only the brief and campaign text that you submit to AI features.
• A payment gateway, which processes payment of the platform fee through its hosted checkout. We do not hold card details.

The names of the specific providers are to be confirmed and will be listed here.

We also share information between the parties to a campaign as needed. For example, a brand sees a creator's profile and the terms that are negotiated. We do not sell personal data and we do not use third-party advertising trackers. We may disclose information where the law requires it.

Data is hosted with cloud providers outside Saudi Arabia at launch. Transfers of personal data outside the Kingdom may be subject to conditions under applicable law, and counsel will confirm what applies to us.

We use a small number of cookies that are needed for sign-in, for remembering the organization you are working in and for your language. Analytics are first-party and do not use third-party trackers. See the Cookie Notice for details.

We keep data while your account is active and for as long as it is needed for the purposes above. Agreements, payment records and audit logs may be kept after an account is closed where other parties rely on them or where we need them to resolve a dispute. Specific retention periods are being defined and will be listed here.

We use the controls described on the Security page, including isolation between organizations, role-based access, encrypted transport, hashed passwords, private file storage, audit logging and rate limiting. No system is perfectly secure.

When you are signed in, you can ask from Settings for an export of your data, for a correction, or for deletion. Requests are recorded and handled by platform staff, who may need to verify your identity.

Some records may not be deletable if other parties' records depend on them or if the law requires us to keep them. We will tell you if that applies. You can also write to the privacy contact: to be confirmed.

MOWJ is for business use by adults and is not directed to children.

We will update this notice as the product and our providers change, and we will give notice of material changes.

For questions or requests about personal data, use the address at the end of this page or the contact form with the privacy topic.