Privacy Policy

We collect information in the following categories:

• Account Information — Name, email address, password (hashed), and billing information when you register for Ruwaj.
• Store Data — Product titles, prices, images, descriptions, and catalog data synced from your Shopify store via the Shopify Admin API. We access only what is needed to generate ad creatives.
• Meta Ads Credentials — Your Meta access token, Ad Account ID, Facebook Page ID, and Pixel ID when you connect Meta Ads. These are stored encrypted and used solely to publish and manage campaigns on your behalf.
• Generated Creatives — AI-generated ad images, videos, and copy stored in your account. You own your creative outputs.
• Usage Data — Pages visited, features used, generation logs, timestamps, and error reports to improve the platform.
• Communications — Messages you send to our support team via email or WhatsApp.
• Technical Data — IP address, browser type, device identifier, and session tokens for security and authentication.

We use your information exclusively to provide and improve the Ruwaj platform:

• Generate AI ad creatives, videos, and copy from your product catalog
• Publish organic posts and launch paid campaigns to your Meta Ads account on your behalf
• Sync and score your Shopify product catalog for ad-readiness
• Send transactional emails such as billing receipts and account alerts
• Provide customer support and respond to your inquiries
• Improve the platform through anonymized usage analytics
• Comply with legal obligations and enforce our Terms of Service

We do not sell, rent, or trade your personal information. We share data only with trusted service providers required to operate the platform:

• Shopify API — To sync your product catalog. Governed by Shopify's Privacy Policy.
• Meta (Facebook) API — To publish posts and launch ad campaigns on your behalf. Governed by Meta's Data Policy.
• AI Processing Services — Third-party AI APIs used to generate creative strategy, copy, images, video, and voiceover. Inputs are processed in real-time and not retained for training.
• Cloud Infrastructure — Secure hosting and database services. Data is stored on servers with encryption at rest and in transit.
• Payment Processor — Billing information is handled by a PCI-compliant payment provider. We do not store full card numbers.
• Legal Compliance — We may disclose information if required by law, court order, or to protect the rights and safety of our users.

We take security seriously and implement industry-standard protections:

• All data is encrypted in transit using TLS 1.2 or higher (HTTPS)
• Sensitive credentials (Meta tokens, passwords) are encrypted at rest using strong encryption
• Access to production systems is restricted and logged
• Regular security reviews and dependency audits
• Generated creatives stored on secure servers with access controlled by account authentication

Despite our precautions, no system is 100% secure. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.

You have the following rights regarding your personal data:

• Access — Request a copy of all personal data we hold about you
• Correction — Update or correct inaccurate information via your account settings
• Deletion — Request deletion of your account and all associated data. We will process within 30 days
• Portability — Request your data in a machine-readable format
• Objection — Opt out of any optional data processing, including analytics
• Withdraw Consent — Disconnect your Shopify store or Meta Ads account at any time from Settings

To exercise any of these rights, contact us at [email protected]. We respond within 10 business days.

Ruwaj uses minimal, essential cookies to operate the platform:

• Session Cookies — Required to keep you logged in during your session. Deleted when you close your browser.
• Authentication Tokens — Stored in localStorage for "remember me" functionality. You can clear these at any time.
• Preference Cookies — Store your UI preferences such as autonomy level and language settings.

We do not use advertising cookies, cross-site tracking pixels, or third-party analytics cookies that identify you across the web. The Meta Pixel is only placed on your own ads, not on our website.

• Account Data — Retained for the duration of your subscription plus 90 days after cancellation
• Generated Creatives — Stored for the duration of your account. You can delete individual runs from the Creative Lab at any time
• Billing Records — Retained for 7 years as required by Jordanian financial regulations
• Usage Logs — Retained for 90 days for security and debugging, then deleted
• Support Conversations — Retained for 2 years to improve our support quality

Ruwaj is based in Amman, Jordan and primarily serves merchants across the MENA region. When you use our service, your data may be processed on servers located in the European Union or United States to ensure performance and availability.

All international data transfers are conducted under appropriate safeguards including standard contractual clauses and with service providers who meet GDPR-equivalent data protection standards.

Ruwaj is a professional B2B platform intended for use by businesses and adults aged 18 and above. We do not knowingly collect personal information from children under 18. If we discover that a child has provided us with personal data, we will delete it immediately.

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send an email notification to all registered users
• Display a banner in the dashboard for 14 days after the change

Your continued use of Ruwaj after changes take effect constitutes acceptance of the updated policy.

For any privacy-related questions, data requests, or concerns: