Legal

Privacy Policy

Last updated: May 2025

1. Who We Are

Reezk LLC ("RFxAI", "we", "us") is the data controller for personal data processed through the RFxAI platform at rfxai.io. We are committed to protecting your privacy in compliance with Qatar's Personal Data Protection Law (PDPL — Law No. 13 of 2016) and applicable international standards.

For data protection enquiries: contact@rfxai.com

2. Data We Collect

2.1 Account & Profile Data

Name, email address, company name, and job title provided during registration;
Billing information (payment is handled by SkipCash — we do not store card details);
Communication preferences.

2.2 Usage Data

Pages visited, features used, and actions taken within the Platform;
Device and browser information, IP address, and session identifiers;
Search queries and filters applied within RFxFinder.

2.3 Documents & Company Data

Files and documents you upload to the Platform (e.g., for RFxBrain or RFxBid);
AI-generated drafts and outputs created on your behalf.

3. How We Use Your Data

We do not use your documents or uploaded data to train AI models. Your data is processed only to deliver the services you have subscribed to.

To provide and operate the Platform and its features;
To process payments and manage subscriptions;
To send transactional emails (purchase confirmations, alerts, support responses);
To detect, prevent, and investigate security incidents or fraud;
To improve the Platform based on aggregated, anonymised usage analytics;
To comply with legal obligations under Qatari law.

4. Data Residency & Storage

All data is stored and processed on Microsoft Azure — Qatar region (Qatar Central). Your data does not leave the GCC region without your explicit consent, except where required by applicable law.

AI processing is performed via Azure OpenAI Service with data residency controls aligned to Azure's enterprise data handling commitments.

5. Data Sharing

We do not sell your personal data. We share data only with:

SkipCash — to process payments (they receive order amount and customer name/email only, not card details);
Microsoft Azure — our cloud infrastructure and AI provider, under enterprise data processing agreements;
Legal authorities — when required by Qatari law or a valid court order.

6. Data Retention

Active account data: retained while your account is active;
After account deletion: personal data purged within 90 days;
Financial records (invoices, payment references): retained for 7 years per Qatari commercial law;
Uploaded documents: deleted within 30 days of account closure.

7. Your Rights

Under Qatar PDPL and applicable law, you have the right to:

Access — request a copy of the personal data we hold about you;
Correction — request correction of inaccurate data;
Deletion — request deletion of your data (subject to legal retention requirements);
Portability — receive your data in a machine-readable format;
Objection — object to processing for direct marketing purposes.

To exercise these rights, email contact@rfxai.com. We will respond within 30 days.

8. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access control, and regular security reviews. Our infrastructure is hosted on Microsoft Azure, which holds ISO/IEC 27001 certification.

9. Cookies

We use only essential cookies required for authentication and session management. We do not use third-party advertising or tracking cookies. You can disable non-essential cookies in your browser settings without affecting core Platform functionality.

10. Changes to this Policy

We will notify you by email of material changes at least 14 days before they take effect. Continued use of the Platform after the effective date constitutes acceptance.

11. Contact

Data protection enquiries: contact@rfxai.com

Reezk LLC, State of Qatar