Privacy Policy

Current Preview boundary

The Organizer product is currently a private Preview for sample information and is not authorized for live weddings. Do not enter real Guest details, payment information, passwords, private invitation links, or other sensitive information until Tawasul presents an approved production collection notice and event agreement.

Information we handle

• Website delivery data: ordinary request information such as IP address, request time, requested page, browser details, and security signals needed to deliver and protect the public website. The website does not place advertising or analytics cookies, create an account, or collect a Guest list.
• Organizer device preferences: selected language, appearance, accepted policy version, optional measurement choice, and whether the introductory journey was completed. These remain on the device unless a described feature sends a bounded value.
• Organizer and event data: session and authority data; wedding name, date, arrival time, venue, optional Maps link and private-location marker; family access; Guest names and private Organizer aliases; invitation, reply, admission, export, activation, and event-lifecycle state; and bounded security and command records. The current Preview permits sample information only.
• Reception and administrative operations: a worker-facing assignment label, shift schedule, granted wedding sides and duties, pass and session state, semantic workspace, search, admission, recovery, sign-out, completion, alert-review, and containment occurrences, and attendance-report versions. Search evidence stores only a query-length range and result count, not the search words. Raw shift passes are never stored, and administrative audit views exclude Guest names and report rows.
• Guest pages: the private invitation capability presented by the Guest, the named people within that response unit, their replies, and admission state. Guests do not need an account.
• Communications: profile or contact details, message content, attachments, and conversation information you choose to send through email, WhatsApp, Facebook, Instagram, or another linked service.

Why we use information

We use information to provide and secure the requested service, authenticate and authorize access, maintain wedding and Guest operations, prepare user-initiated invitations or exports, respond to support, prevent misuse, diagnose failures, improve Tawasul within the choices described below, maintain required business and security records, resolve disputes, and comply with applicable obligations.

Where consent is required, we ask before the relevant collection or use and retain evidence appropriate to the product state. Other processing is limited to what is necessary to provide or protect the service, perform an accepted agreement, or meet an applicable legal obligation.

Reception audit evidence is used to attribute activity to an issued assignment, recover from operational mistakes, detect bounded patterns for human review, contain compromised access, and prepare the family's post-wedding attendance record. It does not prove which human physically held a device, and a security alert is not by itself a finding of misconduct.

Essential reliability telemetry

Tawasul's public site, Organizer app, accountless Guest pages, reception console, and administration console use content-free operational telemetry to deliver, secure, diagnose, and improve service reliability. It records an API route template, request method, timing, outcome, app or service release, deployment environment, server-generated random request ID, and bounded surface, native/web/desktop runtime, operating-system family and major version, and browser family and major version. It also records a surface-start signal and a reviewed client-failure category such as API, network, rendering, script, storage, or unhandled-promise failure. A browser User-Agent may be classified transiently to produce those bounded values but the raw value is discarded.

Essential telemetry excludes names, Guest details, wedding or record identifiers, form entries, search words, message or exception text, stack traces, credentials, authorization headers, cookies, private links or capabilities, full URLs, IP addresses, device models or identifiers, advertising identifiers, screenshots, and tap locations. The aggregate Guest-page signal cannot identify a Guest or invitation and is not an invitation-open receipt.

This operational telemetry is not used for advertising, profiling, or tracking across apps or websites. It is stored in Tawasul's private, self-hosted observability system and raw records expire after no more than 30 days.

Optional app-use measurement

The language screen explains optional app-use measurement in the notice beneath Continue. After selecting a language, open Privacy choices to review or change measurement before continuing. It is on initially for a new installation; a previous opt-out remains off. When it is on and you continue, Tawasul receives only reviewed names for meaningful screens, actions, and bounded outcomes such as succeeded, failed, cancelled, or unavailable; the selected Arabic or English interface; the current notice version; a random in-memory session ID with an increasing sequence number; and the essential bounded client context described above. The ID resets when the app restarts and is not an account, advertising ID, or persistent device identifier.

This measurement excludes raw touches, scrolling, keystrokes, screenshots, searches, typed content, names, contact details, wedding or Guest identifiers, messages, private links, advertising identifiers, and activity in other apps. It is used only to improve Tawasul, is not sold or used for advertising, and raw signals expire after no more than 30 days.

You can turn measurement on or off at any time under Profile → Privacy and data. Turning it off immediately stops future measurement and clears unsent signals. The app remains usable when measurement is off. A materially changed notice returns you to the language screen with your prior measurement choice preserved for review before you continue.

Sharing, processors, and user-directed handoffs

We disclose information only to people authorized for the relevant wedding; infrastructure, security, support, and communications providers acting for the stated purpose; a provider you deliberately open or select; or an authority or other recipient when disclosure is legally required or necessary to protect rights and safety. Providers acting for Tawasul must be limited by appropriate confidentiality, security, purpose, and deletion obligations.

Opening WhatsApp, email, Google Maps, Apple Maps, an app store, or another linked service hands control to that provider. We do not send a message merely because you open a link; you decide whether to send or share. Those providers process information under their own notices.

We do not sell personal information, place third-party advertising in the Organizer app, or build advertising profiles. If ownership of the service changes, information may transfer as part of that transaction subject to applicable notice, purpose, and protection requirements.

Where information is processed

The current public website, private Organizer Preview backend, and private observability store are hosted on infrastructure in Germany. Linked communications, app-store, or Maps providers may process information in other countries under their own terms and safeguards. Before Tawasul is authorized to accept real event or Guest data, any international processing and required notice, consent, contract, or transfer safeguard must be reviewed and presented at the applicable collection point.

Retention and deletion

Device preferences remain until you change them, clear the app's storage, or uninstall the app. Raw telemetry expires after no more than 30 days. Communication records are retained only as reasonably needed for the conversation, security, disputes, or an applicable obligation.

Wedding data follows a controlled lifecycle: an authorized Event Lead may request closure, access continues while the request is reviewed, protective or legal holds can delay deletion, and deletion occurs only after the approved lifecycle completes. Limited content-free audit or tombstone records may remain where necessary to prove security, deletion, or legal compliance. The current Preview permits sample information only and creates no customer account from the public website.

Reception assignments, semantic security and admission evidence, alerts, and attendance-report versions follow that wedding lifecycle unless an event agreement, dispute, security need, or applicable obligation requires a narrower or longer period. Tawasul does not invent a universal production retention period before the required operational and legal review.

Your rights and choices

Subject to applicable law and the rights of other people, you may ask for access, correction, deletion, restriction, objection, portability, or withdrawal of consent by emailing support@jointawasul.com. The Data Deletion page gives the current process. We may request proportionate verification, explain any lawful limit or retention duty, and respond through a secure channel. Withdrawing consent does not make earlier lawful processing invalid.

Security and incidents

Tawasul uses access controls, encrypted transport, capability digests instead of raw bearer storage, least-privilege authorization, bounded logs, backups, and tested recovery controls appropriate to the current service. No internet service can guarantee absolute security. If an incident affects personal information, Tawasul will investigate, contain, document, and notify the regulator or affected people as required by applicable law.

Organizers, Guests, and children

The Organizer app is intended for adults aged 18 or older. An Organizer must provide information about another person only with appropriate authority and must not use Tawasul to mislead, harass, or disclose private information unlawfully. A guardian may manage a named dependent only through an authorized path. Tawasul is not directed to children and will require an appropriate guardian notice and permission before any production processing involving a person under 18.

Changes and contact

We may update this Policy prospectively as Tawasul, the law, or platform requirements change. We will publish the revised Policy here and update its effective date. If a change materially affects collection, use, retention, sharing, or a person's choices, we will give appropriate advance notice and request renewed consent where required. We do not use a policy update to retroactively authorize a materially different purpose. Privacy questions and complaints may be sent to support@jointawasul.com.