Privacy Policy

1. What we collect

• Account details: your name, email address, account type and password (stored only as a secure hash).
• Profile details: company name, description, sectors, business stage, locations, website, logo and CR number. For mentors: title, bio, expertise, languages, photo, and LinkedIn profile or website.
• Activity on the Platform: session bookings, introduction requests, messages you send us, and when you accepted our Terms.
• Membership and payments: subscription status, amounts and dates. Card payments are handled by our payment provider. We never see or store your full card number.
• Technical data: IP address, device and browser type, and the logs we need to run and secure the service. In the app, a device token if you turn on notifications.

2. How we use it

• To create and run your account and to verify profiles, for example by checking a CR number or a LinkedIn profile.
• To show approved profiles in the community directories. You can hide your profile from the public listing at any time.
• To arrange mentor sessions and introductions and send related emails.
• To manage memberships and payments.
• To keep the Platform secure, prevent abuse and fix problems.
• To meet our legal obligations.

We do not sell your personal data or use it for third-party advertising.

3. Who we share it with

We share personal data only when we need to in order to run the Platform:

• Other members: approved profile details appear in the directories. Email addresses and phone numbers are never shown publicly. When you book a session or request an introduction, we share your name and company with the mentor or partner involved.
• Amazon Web Services (AWS): hosts our servers, database and files in its EU (Ireland) region.
• Resend: sends our emails, such as verification links, password resets and booking confirmations.
• Jitsi: mentor sessions run on Jitsi Meet, an open-source video-calling service hosted by a third-party provider. We do not record sessions.
• Our payment provider: to process membership payments.
• Authorities: when the law requires us to.

Because our hosting is in Ireland, your data is stored outside Bahrain, in a country with strong data-protection laws.

4. How long we keep it

We keep your data while your account is open. If you delete your account, we delete or anonymise your personal data within 30 days. The exception is records we must keep for longer by law, such as payment records needed for tax purposes. Backups are overwritten on a rolling basis.

5. Your rights

You can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data;
• stop or limit certain uses of your data; and
• withdraw your consent, where we rely on it.

You can edit most profile details yourself at any time. To make a request, email support@rwadroom.com and we will reply within the time the law allows. If you are not happy with our reply, you can complain to Bahrain’s Personal Data Protection Authority.

6. Deleting your account

You can delete your account at any time from your account settings in the Rwad Room app or on the website. Deleting your account removes your profile from the directories and ends your membership. If you cannot sign in, email support@rwadroom.com from the address you registered with and we will help.

7. Cookies

Our website uses only essential cookies: one keeps you securely signed in, and one tells the site that you are logged in. We do not use advertising or third-party tracking cookies. The mobile app keeps your sign-in token in your device’s secure storage instead of cookies.

8. Children

Rwad Room is for adults who run or advise businesses. It is not meant for anyone under 18.

9. Changes to this policy

We will post any changes on this page and update the date at the top. If a change is significant, we will also tell you by email or in the app.

10. Contact

Questions or requests about your data? Email us at support@rwadroom.com.