Privacy Policy

01Overview

This Privacy Policy describes how Wathiqa ("we", "us", "our") collects, uses, and protects information about users of the Wathiqa platform. By using the Service, you agree to the practices described here.

Wathiqa is operated by Somatic Wellness Consulting FZC, a company registered in the Ajman Free Zone, United Arab Emirates, under the Smart Civic Solutions brand. Our platform is designed for organizations seeking to generate, customize, and deploy gender equality policies. The information we collect is used solely to provide and improve this service.

02Data We Collect

We collect information you provide directly:

• Account data — name, email address, phone number, and password when you register
• Organization profile — organization name, industry, country of origin, operational scope, and organization type provided during guided intake
• Payment data — when you pay by card, billing information (name, billing address, and card details) is collected and processed directly by our payment processor, Stripe, Inc. We do not store your full card number or security code; Stripe handles all payment card data under its PCI DSS Level 1 certification. See Stripe's Privacy Policy for how Stripe processes this data
• Generated content — the policy packages your organization generates through the platform
• Communications — messages sent through our support or contact channels

We also collect data automatically when you use the Service:

• Usage data — pages visited, features used, generation history
• Device and browser information — browser type, operating system, and screen resolution
• IP address and approximate location
• Cookies and similar tracking technologies (see Section 8)

03How We Use Your Data

We use collected data to:

• Provide, maintain, and improve the Wathiqa platform
• Personalize policy recommendations based on your organizational profile
• Process payments and send billing confirmations
• Send transactional emails (policy ready, credit expiry, account updates)
• Respond to support requests and enquiries
• Monitor platform performance, detect bugs, and improve reliability
• Comply with legal obligations

If you have opted in, we may use anonymized usage data to improve recommendation accuracy. You can opt out at any time from your Settings page.

04Data Sharing

We do not sell your personal data. We share data only with:

• Service providers — hosting (Cloudflare and infrastructure we operate ourselves), database (Supabase), payment processing (Stripe, Inc.), and email delivery providers operating under data processing agreements
• Expert consultants — if you purchase Expert Review or Fully Managed Review services, relevant policy details are shared with the assigned consultant under confidentiality obligations
• Legal requirements — if required by applicable law, court order, or governmental authority

All third-party providers are bound by data processing agreements and are prohibited from using your data for any other purpose.

05Data Retention

We retain your data for as long as your account is active, or as needed to provide the Service. Specifically:

• Account data is retained for the life of the account plus 30 days after deletion
• Generated policy files are retained for the duration of your subscription and up to 12 months after credit expiry
• Billing records are retained for 7 years for accounting and legal compliance purposes
• Support communications are retained for 3 years

You can request deletion of your account and associated data at any time from your Settings page or by contacting us directly.

06Your Rights

Depending on your location, you may have rights including:

• Access — request a copy of the personal data we hold about you
• Correction — update inaccurate or incomplete data
• Deletion — request that we delete your data, subject to legal retention requirements
• Portability — receive your data in a structured, machine-readable format
• Restriction — ask us to restrict processing of your data in certain circumstances
• Objection — object to certain processing activities, including profiling for recommendations
• Withdrawal of consent — withdraw any consent you have given at any time

To exercise any of these rights, contact us via our contact page or email wathiqaapp@gmail.com. We will respond within 30 days.

If you are located in the EU or EEA, you also have the right to lodge a complaint with your local supervisory authority.

07Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS), encrypted storage, access controls, and regular security reviews. Despite these measures, no system is completely secure. We will notify affected users of any data breach as required by applicable law.

08Cookies

We use cookies and similar technologies to maintain session state, remember your preferences, and analyze usage. For full details, see our Cookie Policy. You can manage cookie preferences from your browser settings or from our cookie consent interface.

09International Data Transfers

Wathiqa is used by organizations globally. Your data may be processed by infrastructure and service providers in the European Economic Area, the United States, and other jurisdictions. When transferring data outside the EEA, we rely on appropriate safeguards including Standard Contractual Clauses.

10Contact Us

For questions about this Privacy Policy or to exercise your rights, contact us:

We may update this Privacy Policy from time to time. Material changes will be communicated by email to registered users and by a notice on the platform. Your continued use of the Service after any change constitutes acceptance of the updated policy.