Privacy policy

Last updated: September 2026 · Controller: RWAD, Sultanate of Oman · Contact: info@rwad.ai

1 · This site does not track you

The marketing site (ribhia.com) carries no tracking cookies, no advertising tools and no analytics scripts that identify you. If you visit and do not submit a form, we hold no personal data about you — beyond ordinary server logs (IP address, browser type, request time) that the hosting provider keeps briefly for security.

2 · If you submit a form

We take what you typed yourself: name, company, mobile, email and your message, plus the size details you select in a trial request. We use it for one thing: to answer and follow up on your request.

• We do not sell, rent or share your details with any marketing party.
• We do not add you to any mailing list unless you ask.
• We keep the request as long as needed to follow up, then remove it.

3 · If you are a customer using the system

An important distinction: your company’s data belongs to your company. Projects, invoices, employees, payroll and documents are yours; we host and process them on your behalf and on your instruction, not for our own purposes.

• We do not use your company data for any purpose other than running the service for you.
• We do not use it to train any AI model.
• We do not look at it except when you ask for support on a specific case — and that access is recorded in the activity log, where you can see it.
• Each customer’s data is isolated from every other at the database level, not merely at the screen.

4 · Employee data

The HR module holds sensitive data by nature — civil IDs, passports, salaries, sick leave. That is your company’s data about its employees, and you are responsible for the lawfulness of collecting it and for informing your staff. We provide the protections: per-screen permissions, an activity log recording who saw what, and a portal where an employee sees only their own records.

5 · Where data is stored and who sees it

We use cloud providers to run the service, each receiving only what its job requires:

• Hosting and protection: Cloudflare — serves the site and the application and shields them from attack.
• Database and storage: Supabase (on AWS) — system data and attachments.
• Email: a mail delivery provider for system notifications and replies.

No other third party receives your data. Any change to this list appears here.

6 · How data is protected

• All traffic is encrypted (HTTPS).
• Permissions are enforced in the database itself, so a user without permission cannot reach the data even from outside the screen.
• Passwords are stored one-way hashed — we cannot read them ourselves.
• Regular backups, and an audit trail on every change.

7 · Your rights

You may ask at any time for:

• A copy of the data we hold about you.
• Correction of anything inaccurate.
• Deletion of your data — within what the law and the agreement allow (accounting records, for example, carry statutory retention periods).
• A full export of your company data if you decide to stop the service.

Send your request to info@rwad.ai and we will respond within a reasonable time.

8 · Changes to this policy

If we change this policy the date above changes, and any material change is emailed to you if you are a customer.