Who we are and scope
Amwaj Al Faw Group operates this application for employees and authorized users to manage shipments, customs clearance, transfers, documents and company operations. This policy covers our device applications, web interface and this privacy website.
Work accounts and permissions are provisioned by a system administrator. Access depends on the user's assigned role and permissions; having an account does not give access to every company file.
Information we process
Depending on your use and permissions, information may include:
- Account and employee details: name, username or identifier, email, telephone number, profile photograph, work role and authentication information.
- Business records: customer and supplier names and contact details, shipments, invoices, transfers, bank account and financial information, tasks, notes, correspondence and activity records.
- Files you choose to upload or share: documents, images, PDFs and attachments, which may include personal, financial or identity information.
- Operational and security information: sign-in and sign-out events, access attempts, recorded actions and a locally generated app installation identifier used for synchronization and change tracking. Service providers may also process errors and connection information, such as IP address and device or browser information.
- Preferences and local copies: appearance and notification settings, session information and documents cached on your device.
How we use information
We use information to authenticate users, enforce access permissions, manage company records, tasks and transactions, synchronize changes, and display, export or print documents when requested. Operational logs help protect the service, verify actions, resolve errors, provide support and meet applicable obligations.
We do not sell personal information, use it for targeted advertising, or track your activity across other companies' apps and websites for advertising purposes.
Optional AI assistant
If you choose the AI assistant, your questions, selected attachments, conversation context and relevant work information available under your permissions are sent to OpenAI to process your request. We request explicit consent before sending. Other ordinary app functions do not require enabling the assistant.
The assistant requires a user-configured API key; we do not supply a shared key to all accounts. The key is kept in session memory and excluded from backups. You can withdraw consent by unchecking the consent box in the assistant to stop future submissions; this does not recall information already sent. Avoid sending sensitive information unnecessary for your request. Provider processing and retention depend on its service terms and the settings of the account being used.
Mobile notifications
If you enable mobile notifications, we use Google Firebase Cloud Messaging and Apple Push Notification service on Apple devices. App installation identifiers, delivery tokens, platform type and connection information needed for delivery are processed. On our server, the device is associated with your work account and sign-in session.
External notifications contain a generic message and technical identifiers, without customer names, document contents or financial amounts. Details are shown inside the app after checking account permissions. This notification integration does not enable Firebase Analytics or advertising tracking.
You can disable mobile notifications in the notification center or system settings. We unregister devices on sign-out or account deletion and remove registrations that have not been renewed for 45 days. Delivery jobs expire after 24 hours, and delivery records are deleted within a short retention period of up to 8 days, subject to server cleanup cycles.
Device permissions and choices
The app accesses files or images you select to attach, view or export. It may request camera access when you choose to photograph a document, and notification permission when you enable notifications. You may refuse or revoke permissions in device settings; the related feature may then be unavailable.
The app does not require precise location tracking or access to your device contacts for its document-management functions. This privacy website uses no advertising cookies or advertising analytics. Its hosting provider may process connection information needed for security and delivery.
Storage and retention
We retain information needed to operate accounts and business services, and records needed for legitimate business purposes, legal or accounting obligations and dispute resolution. Retention varies by record type and purpose; there is no single fixed period for every document. We review the need for retention and delete personal information or remove identifying details when no longer needed, subject to those obligations.
Closing the app does not clear all local information. Sessions, preferences and cached documents may remain until cleared or until the selected storage policy removes them. Manage and clear cached files in settings. Copies exported or downloaded outside the app, and backups you create, must be managed and deleted separately.
Account deletion and your rights
You can initiate account deletion inside the app: Account menu → My account → Privacy and account deletion → Request account deletion. Identity and password confirmation help prevent accidental deletion. The confirmation explains the consequences before you proceed, and access is withdrawn once the operation is accepted.
Deletion covers sign-in credentials, the profile photograph, unnecessary personal profile information, preferences and personal conversations. A deleted-account reference may remain to link shared company records, including shipments, transfers, invoices and audit records, where needed for business continuity or legal obligations, with access restricted. Deleting an employee account does not delete company transactions or other users' files.
A verified request is processed automatically and normally completes while being submitted. If a service-provider step cannot finish, the request remains in progress and is retried automatically. The app shows the request status; no fixed completion time is guaranteed during external outages. Disabling sign-in alone is not treated as completed deletion.
To request access to, correction or deletion of your personal information, or ask about retention, contact info@amwajalfaw.com. We may verify your identity before responding and explain any applicable restrictions on a request. If you cannot sign in, use the same email address for assistance. Never email your password.
Protecting information
We use encrypted connections in transit, authentication, access permissions and controls to protect documents and records. No storage or transmission method guarantees absolute security. Protect your device and password, do not share sign-in credentials, and report suspected unauthorized access.
Intended users
This is a business tool for employees and authorized users, not a service directed at children. We do not knowingly collect children's information for their use of the app. If inappropriate collection is reported, we review it and take appropriate action.
Policy updates and contact
We may update this policy as app functionality or data practices change. We publish revisions here with an updated date and explain material changes in the app when needed. The public policy is always available at privacy.amwajalfaw.com.
Responsible organization: Amwaj Al Faw Group. For privacy, account or data enquiries: info@amwajalfaw.com.
A question about your data?
Contact Amwaj Al Faw for privacy, access, correction and deletion requests. Do not include your password or sensitive documents in your first message.
info@amwajalfaw.com