Last updated: August 2026
🇦🇪 اقرأ بالعربية ←This policy is provided in English. An Arabic version is available upon request at privacy@mawahibna.com.
This policy explains what personal data Mawahibna collects, why we collect it, the legal basis for processing it, who we share it with, and your rights. It applies to brands, talent, and visitors to mawahibna.com. We process personal data in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its Executive Regulation (Cabinet Decision No. 33 of 2024), and where applicable, the data protection laws of the free zones in which users are registered.
Account information you provide directly: full name, email address, phone number, password (stored as a one-way cryptographic hash — never in plain text), company name, country, and for talent accounts: skills, bio, day rate, portfolio links, social handles, equipment, notable clients, and years of experience. Content you create: briefs, applications, deal messages, ratings, and reviews. Portfolio uploads: images and audio files uploaded directly to the platform. Payment information: we never see or store your card details — payments are processed entirely by Stripe, our PCI-DSS certified payment processor. Usage data: pages visited, device type, and browser collected automatically for security and platform reliability purposes. Referral information: if you reach our signup page from an advertisement or a shared link, we record the campaign identifiers contained in that link (source, medium, campaign, and creative) so we can tell which of our own campaigns brought people to the platform. This is recorded once, at signup, from the address you arrived on. We do not use advertising pixels or third-party analytics to collect it, and it is never shared with the advertising platform or any other third party.
We process your personal data on the following legal bases: (a) Contract — processing necessary to provide the services you signed up for, including account management, escrow payments, and facilitating deals; (b) Consent — where you have explicitly opted in, such as receiving product update emails; you may withdraw consent at any time by emailing privacy@mawahibna.com or using the unsubscribe link in any marketing email; (c) Legitimate interests — fraud prevention, platform security, and aggregate analytics to improve our service, where these interests are not overridden by your rights; (d) Legal obligation — retaining transaction records as required by UAE tax and accounting laws.
To operate the marketplace: creating your account, matching briefs with talent, processing bookings and escrow payments, generating digital invoices for completed transactions, and enabling messaging between parties to a deal. To communicate with you: transactional emails (welcome, application updates, hire notifications, payment confirmations, password resets) and, where you have consented, occasional product updates. To improve and secure the platform: fraud prevention, debugging, and understanding how features are used in aggregate — never at the individual level. AI features: where our AI features are used (brief writing, talent matching, budget suggestions), relevant profile and brief text is sent to our AI provider (Anthropic) solely to generate that specific output — it is not used to train their models under our data processing agreement with them.
We do not sell your personal data. We share it only with service providers that make the platform function, each bound by data processing agreements: Airtable (database), Stripe (payment processing and escrow), Resend (transactional email), Anthropic (AI features), and Vercel (application hosting and file storage). Within the platform, when you apply to a brief or are hired, the other party can see the profile information relevant to that deal — name, skills, bio, rate, portfolio for talent; company name and brief details for brands. Deal messages are visible only to the two parties on that specific deal. We may disclose data if required by UAE law or a competent authority, or in connection with a merger or acquisition, in which case we will notify affected users in advance where permitted.
We retain your account data for as long as your account is active. If you close your account, we retain transaction records (deals, payments, invoices) for a minimum of 5 years as required by UAE Federal Tax Authority regulations and applicable accounting law. We may retain limited profile data to prevent fraud and enforce our Non-Circumvention Agreement for up to 24 months after account closure. Portfolio files stored in Vercel Blob are deleted within 90 days of account closure upon request.
Under UAE Federal Decree-Law No. 45 of 2021, you have the right to: access a copy of your personal data; correct inaccurate or incomplete data; request deletion of your data (subject to legal retention obligations); withdraw consent at any time where processing is based on consent; object to processing based on legitimate interests; request restriction of processing while a complaint is being resolved. To exercise any of these rights, email privacy@mawahibna.com. We will respond within 30 days. You may also submit a complaint to the UAE Personal Data Office if you believe your rights have been breached.
You can delete your account at any time from within the Mawahibna app — open your profile and choose "Delete my account". Deletion is immediate and cannot be undone. We remove your profile, your contact details, and everything you have posted: briefs, applications, portfolio items, services, saved talent, messages and notifications. We retain records of completed bookings because UAE tax and accounting law requires us to keep financial records; this is the legal-obligation exception to erasure under Article 16 of the PDPL. Your personal details are removed from those records, which are kept as transactions rather than as anything identifying you. Once deleted, your account cannot sign in, does not appear in talent search, and its public profile no longer exists.
We use information about completed bookings — the category of work, the city, the amount paid, and how long a booking took to fill — to understand and publish how the GCC production market behaves. This information is aggregated and anonymous: it is recorded without your name, your account, or anything else identifying you or the other party, and it cannot be traced back to you or to any individual booking. Because it contains no personal data, we may retain, analyse, publish and license it, including commercially, and we continue to hold it after you close your account. We do not publish figures drawn from a small number of bookings, so that no individual's rates can be inferred from an average. We never sell your personal information.
We implement appropriate technical and organisational measures to protect your data, including encrypted storage, HTTPS-only access, and access controls limited to authorised personnel. Passwords are stored as bcrypt hashes and are never readable. In the event of a personal data breach that poses a risk to your rights, we will notify the relevant UAE authority within 72 hours of becoming aware of the breach, and notify affected users without undue delay, in accordance with UAE PDPL requirements.
We use a single essential cookie to keep you signed in — a secure, HttpOnly, SameSite session cookie that contains no personal data other than a session reference. We do not use third-party advertising, tracking, or analytics cookies. If you install the Mawahibna app to your home screen, a service worker may be used for offline page caching only.
Mawahibna operates across the GCC and uses service providers that may process data outside your home country (including in the US and EU). Where this occurs, we rely on our providers' own compliance frameworks, including Standard Contractual Clauses where applicable under UAE PDPL Executive Regulation requirements, to ensure your data receives equivalent protection.
Mawahibna is not directed at anyone under 18. We do not knowingly collect personal data from minors. If you believe a minor has created an account, contact privacy@mawahibna.com and we will promptly delete it.
We may update this policy as the platform evolves. The date of the most recent revision appears at the top. For material changes, we will notify active users by email at least 14 days before changes take effect.
Mawahibna (mawahibna.com) is the data controller for personal data processed through this platform. For privacy questions, access requests, or complaints: privacy@mawahibna.com. We aim to respond within 30 days.
Privacy questions or requests: privacy@mawahibna.com