Last updated: Aug 7, 2026
You can browse, search, and compare on Tawveeri without creating an account or providing any personal data. This policy explains only the data we actually collect — nothing more — when you use features that require it, why, and how we protect it.
When you create an account: your email or phone number (depending on how you sign up), and your name if you provide one. We use a one-time code (OTP) to confirm your phone number via a Saudi SMS provider.
When you sign in: we record your device fingerprint, browser type, and IP address once per login, solely to alert you if a new device signs in to your account (account security).
What you add yourself: wishlists, price alerts, saved searches, and any reviews you write.
Anonymous usage data: we record events like searching, viewing a product, and leaving Tawveeri for a retailer, tied to a random session id stored in your browser — not your identity. We do not use any third-party advertising tracker (no Google Analytics, no Meta Pixel, or similar).
Cookies and local storage: used to remember your preferences (language, light/dark theme), your compare list, and your login session token if you have an account. We do not use advertising cookies.
We do not sell your personal data to anyone. We use service providers only to run the platform: database and authentication hosting (Supabase), email delivery (SendGrid), SMS verification codes (a Saudi OTP provider), and technical error monitoring (Sentry). These providers process your data on our behalf and do not use it for their own purposes.
Some of the providers above (database hosting and email delivery) process data on infrastructure located outside Saudi Arabia, which engages the cross-border transfer rules under the Personal Data Protection Law. We work with reputable providers held to recognized data-protection standards, and access to your data is limited to what the service itself requires.
We keep your account data for as long as your account is active. When you delete your account, we delete or de-identify your personal data within a reasonable period, unless the law requires us to retain it longer.
We take reasonable security measures to protect your data from unauthorized access, use, or disclosure, including encryption in transit and strict database access controls.
Under the Personal Data Protection Law, you have the right to:
To exercise any of these rights, reach us via our contact page. We respond within a reasonable period, not exceeding 30 days.
We may update this policy from time to time. We will update the "Last updated" date at the top of this page whenever a material change is made.
For any question about this policy or your data, reach us via our contact page.
