Privacy Policy

Welcome to Adawati ("the Platform"), accessible at https://adawati.app. This Privacy Policy explains in detail how we collect, use, store, disclose, and protect information about visitors and users of our website and mobile applications. By accessing or using the Platform, you acknowledge that you have read and understood this Privacy Policy and agree to its terms. If you do not agree with any part of this policy, please discontinue use of the Platform immediately. Adawati is committed to transparency and protecting user privacy in compliance with applicable data protection regulations, including the European General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the Saudi Personal Data Protection Law (PDPL).

Adawati collects two categories of information: (a) Files You Upload — When you use our tools (PDF conversion, audio transcription, image OCR, etc.), you upload files to our servers for processing. These files are processed in real-time and automatically deleted from our servers within 60 minutes of processing completion. We do not retain, archive, or back up any user-uploaded files. (b) Automatically Collected Data — We collect non-personally identifiable technical data through cookies and analytics services, including: your IP address (anonymized), browser type and version, operating system, device type, referring URL, pages visited, time spent on pages, and general geographic location (country/region level only). This data is collected via Google Analytics (GA4) and Microsoft Clarity for the sole purpose of improving user experience and monitoring platform performance. We do not collect names, email addresses, phone numbers, or any other personally identifiable information unless you voluntarily provide it through our contact form.

We use the information we collect for the following specific purposes: (1) To process your uploaded files and deliver the requested output (e.g., converted PDF, transcribed text, extracted images). (2) To analyze aggregate usage patterns to improve our tools, fix bugs, and prioritize new feature development. (3) To display contextually relevant advertisements through Google AdSense and Adsterra to support the free operation of the Platform. (4) To monitor and prevent abuse, unauthorized access, or misuse of the Platform. (5) To comply with legal obligations and respond to lawful requests from authorities. We do not use your personal information for profiling, automated decision-making, or any purpose not explicitly stated in this policy.

The Platform uses cookies and similar tracking technologies. Cookies are small text files stored on your device that help us recognize returning visitors and understand usage patterns. We use the following types of cookies: (a) Essential Cookies — Required for the Platform to function properly, including session management and security. These cannot be disabled. (b) Analytics Cookies — Google Analytics (GA4) and Microsoft Clarity cookies that help us understand how visitors interact with the Platform. Google Analytics uses the cookie '_ga' with a retention period of 2 years. (c) Advertising Cookies — Google AdSense and Adsterra may place cookies to serve personalized or contextual advertisements. These third-party cookies are governed by their respective privacy policies. You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may impair Platform functionality. By continuing to use the Platform after being presented with our cookie consent banner, you agree to the use of non-essential cookies as described above.

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their marketing purposes. However, we use the following third-party services that may process data on our behalf: (a) Google Analytics (GA4) — For website traffic analysis. Data is processed by Google LLC under their privacy policy. We have enabled IP anonymization. (b) Google AdSense — For displaying advertisements. Google may use cookies to serve ads based on your prior visits. You can opt out of personalized advertising at https://adssettings.google.com. (c) Google Tag Manager (GTM) — For managing analytics and advertising scripts. (d) Microsoft Clarity — For session recording and heatmap analysis to improve user experience. Clarity does not collect personally identifiable information. (e) Adsterra — For additional advertising services on the Platform. All third-party processors are bound by their own privacy policies and data processing agreements. We have verified that each service provider maintains adequate data protection measures.

We implement industry-standard technical and organizational measures to protect your data, including: (a) All data transmitted between your browser and our servers is encrypted using HTTPS/TLS 1.3 encryption. (b) Uploaded files are stored in temporary server memory and automatically purged within 60 minutes. (c) Server access is restricted to authorized personnel only. (d) We conduct regular security reviews and updates of our infrastructure. (e) Our backend infrastructure uses isolated processing environments to prevent cross-request data contamination. While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security but will notify affected users promptly in the unlikely event of a data breach.

Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) Right of Access — You may request a copy of any personal data we hold about you. (b) Right to Rectification — You may request correction of inaccurate personal data. (c) Right to Erasure (Right to Be Forgotten) — You may request deletion of your personal data. Since we auto-delete uploaded files, this primarily applies to analytics data. (d) Right to Restrict Processing — You may request that we limit how we process your data. (e) Right to Data Portability — You may request your data in a structured, machine-readable format. (f) Right to Object — You may object to processing based on legitimate interests, including direct marketing. (g) Right to Withdraw Consent — Where processing is based on consent, you may withdraw it at any time. For California residents under the CCPA: You have the right to know what personal information is collected, to request deletion, and to opt out of the sale of personal information (we do not sell personal information). To exercise any of these rights, contact us at admin@adawati.app. We will respond within 30 days.

Adawati processes user-uploaded files solely for the purpose of providing the requested service (conversion, compression, transcription, OCR, etc.). Here is exactly what happens to your files: (1) You upload a file through the Platform interface. (2) The file is transmitted via encrypted HTTPS to our processing server. (3) Our backend processes the file using the appropriate tool engine. (4) The processed output is returned to your browser for download. (5) Both the original uploaded file and the processed output are automatically deleted from our servers within 60 minutes. We do not create backups, copies, or archives of any user-uploaded file. We do not analyze, read, or review the contents of your files beyond what is strictly necessary for automated processing. Our file processing pipeline is fully automated with no human intervention.

The Platform is not directed at children under the age of 13 (or 16 in the European Economic Area). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided personal information to us, please contact us at admin@adawati.app and we will take steps to delete such information promptly. If we become aware that we have inadvertently collected personal data from a child under the applicable age threshold, we will delete that data as soon as reasonably possible.

The Platform is operated from servers that may be located in different jurisdictions. If you access the Platform from outside the server's jurisdiction, your information may be transferred across international borders. We ensure that any such transfers comply with applicable data protection laws and that adequate safeguards are in place, including standard contractual clauses where required by GDPR. By using the Platform, you consent to the transfer of your information as described in this section.

We retain different types of data for different periods: (a) Uploaded files — Deleted automatically within 60 minutes of processing. (b) Analytics data (Google Analytics) — Retained for up to 14 months, after which it is automatically aggregated and anonymized. (c) Cookie consent preferences — Stored locally on your device indefinitely until you clear your browser data. (d) Contact form messages — Retained only in our email inbox for as long as necessary to resolve your inquiry, then archived or deleted. We do not retain any data longer than necessary for the purposes described in this policy.

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the 'Last Updated' date at the top of this page and, where appropriate, notify users through a banner on the Platform. We encourage you to review this page periodically to stay informed about how we protect your data. Your continued use of the Platform after changes are posted constitutes your acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: Email: admin@adawati.app. We aim to respond to all privacy-related inquiries within 30 days. If you believe your data protection rights have been violated, you also have the right to lodge a complaint with your local data protection supervisory authority.