Mowjaz AI Privacy Policy
Effective Date: 13 September 2026
This Policy explains how Mowjaz Global Company for Custom Software Design and Programming, operating under the Mowjaz brand, collects, uses, discloses, retains and protects personal data when you use the Mowjaz website, products, applications, APIs and related services. These services include AI content tools, Mowjaz Chat, Mowjaz Clip, team accounts and approval workflows, subscriptions and credits, and the RFQ and creative-partner marketplace. Your use of the Platform does not constitute consent to optional processing such as marketing or non-essential cookies; we request separate consent where required. Read this Policy with the Terms of Use and any enterprise agreement or Data Processing Addendum that applies to your account.
1.Who We Are
- Legal name: Mowjaz Global Company for Custom Software Design and Programming, Single Person Company. The registered Arabic name is authoritative.
- Brand: Mowjaz AI | موجز
- Commercial registration: 551073
- Licence number: 2026/12539
- Registered address: Al Asimah Governorate, Qibla, Block 12, Fahad Al Salem Street, Al Qibla International Real Estate Company Building, Unit 35, Automated Address No. 22025604, State of Kuwait
- Email: support@mowjaz.ai
- Website: https://mowjaz.ai
- Mowjaz is responsible for personal data used to manage accounts, billing, Platform security, communications, marketing, and customer and supplier relationships. When an organization uses Mowjaz to process content or data on its behalf, Mowjaz may act as a processor under that organization's instructions. The organization remains responsible for deciding the purposes and means of that processing and for providing its own notices and obtaining required consents. In that context, the enterprise agreement or Data Processing Addendum governs to the extent it relates to that processing.
2.Scope and Legal Framework
- We process personal data in accordance with applicable Kuwait laws and regulations, including Law No. 20 of 2014 Concerning Electronic Transactions, as amended, and its Executive Regulations; the Data Privacy Protection Regulation issued under CITRA Decision No. 26 of 2024 to the extent it applies to Mowjaz; and applicable cybersecurity and consumer-protection requirements.
- Depending on the activity, we rely on your explicit consent or affirmative conduct where the law permits, processing necessary to provide the service and perform our contract, compliance with legal obligations, protection of the Platform and its users, fraud prevention, and specific legitimate operational purposes where permitted by law. You may withdraw consent at any time. Withdrawal does not affect processing already carried out lawfully or processing needed for a contract or legal obligation.
3.Personal Data We Collect
- Account and organization data: name, email address, telephone number, country, company or organization, job title, profile image, account language and preferences; login identifiers, password in protected or hashed form, authentication information, team roles and permissions, invitations, approvals and administrative activity logs.
- Customer Content and AI data: prompts, instructions, questions and other text inputs, and conversation history when saved to the account; uploaded videos, audio, images, documents and presentations, plus transcripts, translations, captions and metadata; brand profiles, templates, guidelines and creative assets, generated outputs, edits, reviews and approval history.
- RFQ and collaboration data: project descriptions, scope, budget, timeline, requirements, attachments, questions and messages; creator and agency profiles, credentials, proposals, pricing, availability, project status and related ratings.
- Subscription and payment data: plan, credits, usage, invoices, billing address, payment status, transaction identifiers and accounting records. An authorized payment provider normally processes card or bank details directly — Mowjaz does not ordinarily receive or store the full card number or security code, but may receive payment status and limited payment-method data for reconciliation, support and fraud prevention.
- Usage and device data: IP address, device, browser and operating-system type, language, time zone, features and pages used, dates and times, referrals, error logs and performance data; cookies and similar identifiers, session data, and security, abuse-prevention and fraud signals.
- Support and communications data: messages, support requests, complaints, feedback, surveys and notification and marketing preferences; information supplied by your account administrator, employer, agency partner or a connected service when necessary and lawful to provide the service.
4.How We Collect Data
- We collect data directly from you when you register, pay, enter a prompt, upload a file, submit an RFQ or contact us. We collect some data automatically from your device and browser while you use the Platform. We may also receive data from the administrator of the organization that created your account, your team members, a creator or agency you work with, payment providers, hosting, analytics and security providers, and integrations you choose to connect. A person or organization providing another person's data must be authorized to do so and must give the required notice or obtain the required consent.
5.How We Use Data
- Create, verify and administer accounts, and enforce roles, permissions and approval audits.
- Process prompts and generate text, images and presentations; transcribe and translate audio; identify and edit clips; and prepare content for publication.
- Save projects, brand profiles and outputs and enable team collaboration when selected.
- Receive RFQs, match them with suitable creators or agencies, send them to partners selected by the user or identified by the Platform, and manage proposals, messages and project status.
- Manage subscriptions, credits, invoices and payments, support users, and respond to complaints and requests.
- Secure the Platform, verify identity when needed, prevent fraud, abuse and unlawful content, and investigate incidents.
- Measure performance, fix errors, understand feature usage and improve services using aggregated or de-identified data where possible.
- Send necessary service messages. We send electronic marketing only in accordance with your preferences and with consent where required.
- Comply with law and lawful requests, enforce our terms, and protect Mowjaz, users and third parties.
6.AI Processing
- Mowjaz uses AI models, AI services and cloud infrastructure to process prompts and files and to produce outputs. Processing may include analysis, summarization, generation, translation, transcription, editing, clip detection and safety moderation. We may send the part of a prompt or file needed for the task to a contracted provider, and processing may occur outside Kuwait as described in the international-transfer section.
- We do not use Customer Content to train general-purpose AI models, and we do not permit our service providers to do so, unless the customer provides separate explicit consent or the data has been aggregated or de-identified so that an individual cannot reasonably be re-identified. We may use de-identified operational data to evaluate quality and safety and improve Platform performance.
- A limited amount of content may be accessed by authorized personnel where necessary to provide support you request, investigate abuse or a security incident, or evaluate quality and safety under access and confidentiality controls. AI outputs are probabilistic and may contain errors or unexpected personal data. Users must review outputs before relying on or publishing them.
- The Platform may recommend or rank creators and agencies using the project description, expertise, availability and other suitability factors. These recommendations assist the user's choice and do not make a solely automated legal, credit, employment or similarly significant decision.
8.International Transfers and Processing
- Because cloud and AI services are international, your data may be processed or stored in countries outside Kuwait where our providers operate. Their laws may differ from Kuwait law. For an international transfer, we define the purpose, minimize the data, assess the provider, apply appropriate contractual obligations and security measures, and provide notices or obtain consents or approvals required by applicable law.
- You may request the current categories of providers, processing countries and relevant representative contact information, if any, by emailing support@mowjaz.ai. We may provide more specific information within a feature or at collection where the law requires it.
9.Retention and Deletion
- We keep data only as long as needed for the stated purpose, service delivery, legal and accounting duties, dispute resolution, fraud prevention and Platform security. The following default periods apply unless an enterprise agreement or law requires a different period:
- Account and organization data: while the account remains active, then deleted or de-identified from active systems normally within 90 days after closure, except for the minimum data needed for legal obligations.
- Prompts, files and outputs: until the user deletes them or closes the account. Removal from active systems normally begins within 30 days; encrypted, isolated backups may remain for up to 90 days before being overwritten.
- RFQs, proposals and project messages: during the project and for up to five years after closure for disputes, audit and fraud prevention, unless law requires longer or the user requests a legally available deletion.
- Financial, contractual and consent records: for periods required by accounting and commercial law or until related legal claims expire.
- Support requests: up to three years after closure, unless an investigation or dispute requires longer.
- Usage and security logs: normally 12 months, with longer retention for a specific incident or investigation.
- Marketing data: until consent is withdrawn, with a limited suppression record kept so we can respect the opt-out.
- We may delay deletion or retain an isolated copy when required by law, court order or an evidence-preservation duty, or to protect the system against documented fraud or abuse. When the need ends, we securely delete or de-identify the data.
11.Security and Incident Response
- We use administrative, technical and organizational safeguards proportionate to the data and risk. These may include encryption in transit and at rest where appropriate, need-to-know and role-based access, authentication and abuse controls, logging and monitoring, backups, vulnerability management, vendor review, authorized-personnel training and incident-response plans.
- No storage or transmission method is completely secure. If a breach affects personal data, we will contain, investigate and remediate it and notify the competent authority and affected persons with the information and within the time required by applicable law. Report suspected activity or lost credentials promptly to support@mowjaz.ai.
12.Your Rights and Choices
- Know whether and why we process your data, access it and obtain an appropriate extract or copy.
- Correct, complete or update inaccurate data.
- Delete or de-identify data when retention is no longer necessary or the data is inaccurate, subject to legal exceptions and other persons' rights.
- Withdraw consent for processing based on consent, or object to or request restriction of a use where recognized by law.
- Stop marketing messages at any time through the unsubscribe link or account settings. Necessary service messages will continue.
- Receive information about disclosures and transfers outside Kuwait, and complain to Mowjaz or a competent Kuwait authority, including CITRA where it has jurisdiction.
- Email support@mowjaz.ai with a clear description of your request. We may request reasonable information to verify your identity or your representative's authority before disclosure, correction or deletion. We respond within the time required by law. If your employer manages your account, we may direct you to the organization administrator and assist the organization when we act as its processor.
13.Marketing and Notifications
- We send operational notices about accounts, security, billing, projects and material service changes. Marketing messages are subject to a separate choice and withdrawable consent where required. You can opt out through the message, account settings or support@mowjaz.ai. Consent to marketing is not a condition for core features that do not require it.
14.Minors
- The Platform is intended for businesses and professionals and is not designed for anyone under 18. We do not knowingly collect a minor's personal data without explicit consent from the minor's guardian or legal representative and reasonable verification where the law permits the service. If you believe a minor submitted data without valid consent, contact us so we can delete it or take appropriate action. Do not use the Platform for structured processing of minors' data without an enterprise agreement and suitable legal controls.
15.Your Responsibility for Data About Others
- Your prompts, files and RFQs may contain personal data about employees, clients, speakers or others. Before submitting it, you must have the authority, lawful basis and consents needed, provide any required notice, and limit the data to what is necessary. Do not upload civil ID numbers, passwords, full payment-card data, health records, biometrics, children's information or highly sensitive secrets unless the feature is designed for that data and Mowjaz has agreed in writing to the required safeguards. Mask, substitute or de-identify data where possible.
16.Third Party Links and Integrations
- The Platform may link to services, websites or applications not operated by Mowjaz. Data you send to them is governed by their policies and terms. Review the third party's permissions and privacy notice before connecting, publishing or exporting.
17.Changes, Contact and Complaints
- We may update this Policy for legal, technical or operational changes. We will post the updated version and effective date and will provide notice or request new consent when a change is material or expands a processing purpose in a way that requires it. We do not use data for a new incompatible purpose without required notice or consent.
- For questions, rights requests, complaints or security reports, contact the Mowjaz privacy contact at support@mowjaz.ai or write to the registered address in Section 1. You may also complain through the official website of the Communication and Information Technology Regulatory Authority when it has jurisdiction, without limiting another right or remedy available under law.
- This Policy is issued in Arabic and English. If the versions differ in meaning or interpretation, then the Arabic text prevails unless applicable law or a written agreement requires otherwise.