سياسة الخصوصية | Privacy Policy

At RWAAJ, your privacy is a top priority. This Privacy Policy explains how we collect, use, share, and protect personal and business information when you use our SaaS platform to manage and analyze advertising campaigns across platforms such as Google Ads, Meta, TikTok, and Snapchat, and e-commerce stores including Salla, Zid, Shopify, and WooCommerce.

1. Data Controller

RWAAJ is a Software-as-a-Service (SaaS) provider based in the Arab Republic of Egypt, serving marketing agencies and business owners. For any inquiry regarding this policy or your data rights, contact us at: api@rwaaj.net

2. Data We Collect

2.1 Account Information

• Full name, email address, phone number
• Company / agency name, geographic location, billing information
• Password (encrypted using bcrypt)

2.2 Connected Ad Platform Data (Google Ads, Meta, TikTok, etc.)

When you connect an ad platform via OAuth2 (e.g., Google Ads), we obtain limited authorization to access your data and collect:

• Access & Refresh Tokens: Stored encrypted server-side, never exposed to the browser.
• Campaign data: Campaign names, budgets, status, start & end dates.
• Ad group & ad data: Names, statuses, ad copy, keywords.
• Performance metrics: Impressions, clicks, conversions, cost, CTR, ROAS, by date.
• Customer IDs: To identify the linked ad accounts.

2.3 Connected E-commerce Store Data

When you link your store (Salla, Zid, Shopify, WooCommerce), we collect order and revenue data solely to calculate True ROAS — we do not access end-customer personal data.

2.4 Technical Data

• IP address, browser type, operating system
• Platform usage logs (cookies, language preferences)
• Audit logs for every write operation on ad platforms

3. How We Use Your Data

• Service operation: Display your data in the dashboard, analyze performance, generate PDF reports, manage campaigns on your behalf based on your explicit actions.
• AI improvements: Analyze your campaign data to provide recommendations. We do not use your data to train general-purpose AI models.
• Communications: System notifications, security alerts, service updates.
• Billing: Process payments via trusted payment providers.

4. Use of the Google Ads API & Compliance with Google Policies

RWAAJ is a registered user of the Google Ads API and fully complies with the Google API Services User Data Policy, including the Limited Use requirements. When you connect your Google Ads account:

• We use Google's official OAuth2 — you grant permission directly through Google.
• We request only the https://www.googleapis.com/auth/adwords scope.
• We use Google Ads data exclusively to provide management and analytics services to you — we do not sell it, share it with third parties for advertising, or use it to train any general-purpose AI/ML models.
• You can revoke access at any time via your Google Account permissions. Upon revocation, all associated tokens and synced data are deleted immediately.
• Write operations (creating campaigns, modifying budgets, pausing ads) only occur as the direct result of an explicit action you take in the RWAAJ interface, and are recorded in an audit log.
• RWAAJ's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements.

5. Data Sharing

We do not sell your data. We may share it only in the following cases:

• Service providers: Google Cloud (hosting), Stripe/Paymob (payments), Postmark/SendGrid (email) — all under strict confidentiality agreements.
• Legal compliance: In response to lawful requests from government or judicial authorities.
• Rights protection: To prevent fraud or violations of our Terms of Service.

6. Data Security

• TLS 1.2+ encryption for all communications
• AES-256 encryption for sensitive data at rest (including OAuth tokens)
• Per-user row-level data isolation
• Regular security audits and penetration testing
• Strong password policy and optional two-factor authentication

7. Data Retention

We retain your data for the duration of your subscription. Upon cancellation, data is permanently deleted within 30 days, unless legal compliance requires longer retention (e.g., billing records).

8. Your Rights

Under Egypt's Personal Data Protection Law No. 151/2020 and Saudi Arabia's Personal Data Protection Law (PDPL), you have the right to:

• Request access to your personal data
• Correct or update your data
• Withdraw consent and request deletion
• Data portability — transfer your data to another provider
• Object to processing

To exercise your rights, contact us at: api@rwaaj.net

9. Cookies

We use essential cookies for site operation (authentication, language preferences). We do not use third-party advertising tracking cookies on this site.

10. Updates to This Policy

We may update this policy from time to time. We will notify you of any material changes via email and within the dashboard. The last updated date is shown at the top of this page.

11. Contact Us

For any inquiries regarding this policy:
Email: api@rwaaj.net
Website: https://rwaaj.net