Privacy Policy

This Privacy Policy explains how RAWI (“RAWI”, “we”, “us”) handles personal data when creators, their team members and gallery visitors use the RAWI website, applications and client galleries (the “Service”). RAWI currently operates from the United Arab Emirates. Privacy requests may be sent to ali.acc2012@gmail.com.

1. Who controls the data

RAWI controls account, billing, support and Service-usage data. A creator who uploads media or collects information from a client through a gallery generally controls that client data; RAWI processes it to provide the Service on the creator's instructions. Creators are responsible for having the permissions and notices required to upload and share their clients' content.

2. Data we collect

• Account and workspace information, such as name, email address, authentication records, studio name, logo and preferences.
• Creator content, including uploaded photos, videos, thumbnails, gallery titles, project details and branding.
• Gallery interaction data, such as access events, downloads, favorites, approvals, comments and client-provided names where enabled.
• Plan and transaction information, including the selected plan, payment status and payment-provider reference. RAWI does not intentionally store complete payment-card details.
• Technical and security data, such as device/browser information, IP-derived information, logs, error reports and records needed to protect accounts and operate the Service.
• Communications sent to RAWI for support, privacy or business enquiries.

3. How we use data

• Provide accounts, uploads, galleries, sharing, downloads, feedback, analytics and billing.
• Authenticate users, prevent abuse, investigate errors and secure the Service.
• Communicate about verification, password resets, transactions, support and material Service changes.
• Improve performance and understand how features are used.
• Meet legal, regulatory, accounting and dispute-resolution obligations.

We process data where necessary to provide the Service, comply with law, pursue legitimate operational and security interests, or where valid consent has been provided.

4. Service providers and international processing

RAWI uses specialist providers for hosting, database, authentication, storage, deployment and payments, including Supabase, Vercel and Ziina. These providers process data only to perform services for RAWI under their own contractual and security obligations. Data may be processed outside the UAE. Where required, RAWI uses appropriate safeguards for international transfers.

5. Sharing and disclosure

We do not sell personal data. We may disclose it to the creator who controls a gallery, authorised workspace members, contracted service providers, professional advisers, or authorities where required by law. Gallery content is disclosed to people who receive or access its link, subject to any password and expiry settings chosen by the creator.

6. Retention and deletion

We retain data for as long as needed to provide the Service, maintain security, resolve disputes and meet legal obligations. Gallery availability may also depend on the creator's plan and settings. Account holders may request account or personal-data deletion by emailing us. Some information may remain for a limited period in secure backups or where retention is legally required.

7. Your choices and rights

Subject to applicable UAE law, you may request access, correction, deletion, restriction or transfer of your personal data, object to certain processing, or withdraw consent where processing relies on consent. You may also raise a concern with the competent UAE data-protection authority. We may need to verify your identity before completing a request.

8. Security

RAWI uses access controls, private storage, encrypted connections, scoped permissions and other reasonable technical and organisational safeguards. No online service can guarantee absolute security. Users must protect their credentials and promptly report suspected unauthorised access.

9. Children

The Service is intended for professional creators and users aged 18 or over. Creators must not knowingly use RAWI to collect personal data from children without the authority, consent and protections required by applicable law.

10. Changes and contact

We may update this Policy when the Service or legal requirements change. Material changes will be communicated through the Service or other appropriate means. Questions and requests may be sent to ali.acc2012@gmail.com.