Privacy policy

Quick unlock on your device

The iPhone app may protect saved sign-in with Face ID, Touch ID, or your device passcode. Apple verifies locally; Brwaz does not receive face images or fingerprints. Session keys stay in this device’s Keychain and are not synced through its cloud backup. Remembering a personal device for a fixed30-day period requires separate approval, retains existing account permissions and sensitive-action checks, and can be revoked. Brwaz stores a hash of the renewal key and its fixed expiry, not biometric data.

Device notifications and the app

Device notification subscriptions are optional and revocable. We encrypt the browser endpoint or Apple device token together with a device label and expiry. When enabled, the browser push service or Apple receives a generic notice, without conversation text, client names or amounts. Private details require account authentication. Attempt results are retained for 30 days; provider acceptance is not proof of display or reading. Device settings, Focus and connectivity may prevent delivery.

Widgets and shortcuts do not store client data or credentials. Live Activity is a local work timer started by the user, not location or project tracking. Staff WhatsApp access requires separate device consent and record permissions; client accounts cannot access company conversations.

1. Who is responsible

Brwaz Media provides visual production services through مؤسسة برواز الرقمية لتقنية المعلومات, commercial registration 2059103195. This notice covers our website, enquiries, bookings and business communications. Our contact details are provided below.

2. Information we collect

We collect details you provide in enquiries and bookings: name, company, email, phone number, project brief and meeting information. Engagement records may include quotes, contracts, invoices, payment references, transfer receipts and project files.

When WhatsApp is connected, we process your number, profile name, message content and delivery status to handle the conversation. Hosting services may record technical information such as IP addresses, browser details and security logs. We also measure page performance. Required fields are marked; other details are optional. Avoid sending unnecessary sensitive information.

Support, creative team and website assistant

When you submit a service, support, complaint or creative-team request, we store the name, contact method, request details, specialty and portfolio link you provide so authorized staff can review and respond. This does not create a staff account or marketing subscription. The website assistant gives preset answers locally in your browser and does not send your question to an AI provider. Brwaz receives the text only when you submit the request form, and retains the original submission and its receipt time.

3. Purposes and legal basis

We use information to respond to requests, perform agreements, arrange meetings, manage payments and records, protect the service and improve performance. Depending on the activity, processing is based on consent, an agreement with you, a legal obligation or a legitimate interest assessed against your rights.

An enquiry does not subscribe you to marketing. Newsletter subscriptions require a separate opt-in and email confirmation, and can be cancelled using the unsubscribe link. WhatsApp marketing requires the relevant permission; you can ask us to stop. Authentication messages are used for account security when enabled.

4. Providers and disclosures

Access is limited to authorised personnel and providers needed for the relevant service. Hostinger hosts our website. When connected, services may include Meta WhatsApp Business, email providers, Google Drive/Calendar/Meet, payment providers such as PayTabs and private file storage.

We may disclose specific information when required by applicable law or a competent authority. We do not sell personal information. Providers may process information outside Saudi Arabia; any transfer requires an applicable legal basis and safeguards. External links and media are subject to their providers’ notices.

5. Payments and private files

When card payments are enabled, card details are entered on the payment provider’s hosted page. Brwaz stores payment references and status, not full card details or security codes. Transfer receipts and private project files are restricted to authorised personnel and kept separate from public portfolio materials.

6. Cookies and performance

Essential cookies support sessions, authentication and request protection. Your browser may save your display preference. Page-load and interaction timings are sent to our website to improve performance, without form content in those measurements. We also retain daily page-view aggregates by page and country for 90 days, without visitor IP addresses, identities or URL query parameters in those aggregates. Country is accepted only from a configured trusted proxy; otherwise it remains unknown. If you opt in to Google Analytics, page views and approximate countries are processed by Google. We send no form content, URL query parameters or user identifiers to this analytics integration, disable advertising signals, and load the Google tag only after consent. You can change your preference in the website footer; rejection takes effect on the next page load if the tag was already loaded. Google may process data outside Saudi Arabia. Playing external videos may connect to their provider. You can manage cookies in your browser; blocking essential cookies may affect forms or sign-in.

7. Retention

We retain information while needed for an enquiry, project, agreed support, legal obligation or dispute. The period depends on its purpose and applicable requirements; project-file storage follows the engagement. When no longer needed, information is deleted or anonymised. Restricted backups may remain until their retention cycle expires and are not reused for unrelated purposes.

8. Your rights and requests

Subject to applicable rules, you may request information about processing, access or a readable copy, correction, completion or deletion. You may withdraw consent where it is the basis for processing, without affecting earlier lawful processing or records we must retain.

Send requests to info@brwaz.media. We may ask for proportionate information to verify identity and explain any lawful limit on fulfilment. Contact us first about a complaint; you may also contact the competent authority through the National Data Governance Platform.

9. Security and updates

We use access controls, encrypted connections and appropriate technical safeguards, without promising absolute security. Do not send passwords or verification codes to our team. We update this notice as practices change; the date above identifies this version.