Rewaaj Privacy Policy

1. Who we are

Rewaaj is operated by TOKENIZ-ED L.L.C-FZ, Dubai, United Arab Emirates, which is responsible for your information (its controller). You can reach us at:

2. Information We Collect

• Basic account information (name, company name, email, phone number)
• Business details related to food products and services
• Platform usage data to improve performance and user experience
• Compliance-related information provided by suppliers (certifications, documents)
• Documents you upload on our home page, and the contact details you give with them (section 5)

3. How We Use Your Information

• To create and manage your Rewaaj account
• To connect food suppliers with buyers globally
• To support compliance verification and platform trust
• To communicate important platform updates and opportunities
• To improve platform functionality and security

4. Businesses We Email

We also email food and beverage businesses that do not use Rewaaj yet, to introduce the platform. If we emailed your company, our privacy notice for businesses we email explains where we got your details, what we do with them, and how to make us stop.

5. Documents You Upload on Our Home Page

You can upload catalogues, price lists and other company documents on our home page, with or without an account. To send them to us with your details, you confirm your email address with a code we email to it. When you do, we keep:

• The files and their names
• The company name, work email and, if you give one, WhatsApp number you enter, and when you agreed to us keeping them
• The language of the page you used
• A random key stored in your browser so you can return to your upload; we keep only a scrambled copy of it
• Your IP address and browser type, in our server logs of each request, which we delete after 30 days; we also use your IP address to limit how many uploads one connection can make

Our staff and the document-processing services in section 6 read your documents so that your products appear in the Rewaaj terminal search and in RFQ matching, and we use your email to contact you about them. If the files are in a supplier account, or in an account that starts selling while we still keep them, we import them automatically and publish the products under that account; products missing details stay hidden from buyers until you complete them. Published products show buyers what we read from your documents and pictures taken from them: a photo you upload, or a picture in a catalogue, can become a product’s picture. Otherwise your files are seen only by our staff and those services.

Files uploaded without contact details are deleted 48 hours after your most recent upload. Once you give your details or add the files to an account, we delete the files and your details 30 days after the later of those two steps.

Until the files are added to an account, you can delete your upload, its files and your details with “Delete my upload” on the home page, in the browser you used. Entering the code we email you when you give your details signs you in to your Rewaaj account with that address — or creates one, with no password, under the name you give if a new account needs one — and adds the upload to it. If you are signed in, a file you upload goes to your account straight away, together with any earlier upload still open in that browser. If you follow the link in the email confirming an upload, then sign in or create an account with the address you gave and confirm it with the code we send to it, we add that upload to your account. Uploads in your account are listed under “Uploaded documents” in your account settings, where you can delete them. You can also write to us (section 11) at any time to have an upload deleted, and deleting your account deletes the uploads you added to it.

Deleting an upload or your account does not delete what was made from it: the products published from your documents (removing a product, or deleting your account, takes it off the platform, but we keep its record), and drafts the import could not publish, which are deleted after 3 days. For documents imported into a supplier account, we also keep a record of each file the import read (its name and a fingerprint of its contents) for 7 days, or until you delete your account, and the service that reads them keeps its reading for up to 7 days.

6. Data Sharing

We do not sell your personal data.

Information is shared only with:

• Verified platform users for sourcing purposes
• Service providers that run parts of the platform for us, on our instructions and under contract: application hosting (Render, Germany, reached through Cloudflare), our database (Neon, United Kingdom), sign-in (Clerk), email delivery (Twilio SendGrid), subscription payments (Stripe), analytics (Google and Meta, see section 10), and the AI and document-processing services that read the catalogues and documents you upload
• Authorities only if legally required

7. Transfers Outside Your Country

We are based in the United Arab Emirates, and several of our service providers are in the United States, the United Kingdom and Germany, so your information may be processed outside your country. Our providers handle it under data-processing terms that include standard contractual clauses where the law requires them.

8. Data Security

• We use industry-standard security measures to protect your data
• Access to data is restricted to authorized personnel only

9. Your Rights

• Access, update, or correct your information
• Request data deletion (subject to legal or compliance obligations)
• Opt out of non-essential communications
• Complain to a data-protection authority: in the EU or UK, the authority where you live or work; in the United Arab Emirates, the UAE Data Office

10. Cookies & Analytics

We use cookies to improve user experience and platform performance. We also use third-party analytics services, including Google Analytics and the Meta Pixel, to understand how visitors use the platform and to measure the performance of our marketing. These services may set cookies and collect usage data such as pages viewed and actions taken.

11. Contact Us

For privacy-related questions or requests, write to us at the address or email below.