Legal & Compliance

Privacy Policy

Last Updated: November 2, 2025

Introduction

Welcome to Amwal Tech Inc. ("Amwal," "we," "us," or "our"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our authentication, identity orchestration, and payment services, including our website, mobile applications, and related services (collectively, the "Services").

By using our Services, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Services.

About Amwal

Amwal is a regulated Payment Service Provider licensed by Saudi Payments (Central Bank of Saudi Arabia) under license PSP013 and regulated in Abu Dhabi Global Market under tech license 00076. We provide frictionless biometric authentication, 1-click checkout solutions, and Buy Now, Pay Later (BNPL) services to merchants, financial institutions, and consumers across the Middle East.

Information We Collect

Personal Information You Provide

  • Identity: Name, DOB, Nationality, ID numbers
  • Contact: Email, phone, address
  • Financial: Bank details, cards, history
  • Auth Data: Biometrics, passkeys, device IDs

Collected Automatically

  • Device: Type, OS, unique identifiers
  • Usage: Pages viewed, time spent, clicks
  • Location: IP address, geo-location
  • Tech: Browser type, time zone
* Information from Third Parties: We may receive info from Merchants, Financial Institutions, Identity Verification Services, Credit Bureaus, and Business Partners.

How We Use Your Information

  • Service Delivery: Provide authentication, process payments, manage accounts.
  • Security & Fraud: Detect fraudulent transactions, verify identity (AML/KYC).
  • Legal Compliance: Comply with Saudi, UAE, and other applicable laws.
  • Business Operations: Analyze usage patterns, R&D, data analytics.
  • Marketing: Send promotional materials and personalized recommendations (with consent).

How We Share Your Information

We may share your information with:

Service Providers: Payment processors, cloud storage, identity verification.
Merchants: Where you make purchases using our Services.
Regulatory Authorities: Saudi Payments (SAMA), ADGM regulators, law enforcement.
Corporate Transactions: In the event of a merger or acquisition.

International Data Transfers

Your information may be transferred to Saudi Arabia, UAE, and other locations. We ensure safeguards such as standard contractual clauses and adequacy decisions are in place.

Data Security

We implement industry-standard security measures including:

Technical Measures

TLS/SSL Encryption, Multi-factor authentication, FIDO protocols, Penetration testing.

Organizational Measures

Access controls, Employee training, Confidentiality agreements, Incident response.

Data Retention

We retain personal information as long as necessary. Typical periods include:

  • Transaction Records: 5-7 years (Financial regulations).
  • Security Logs: 12-24 months.
  • Marketing Data: Until consent is withdrawn.

Your Rights and Choices

Depending on your location, you have the right to:

Access & Correction
Deletion & Restriction
Data Portability
Withdrawal of Consent

Cookies & Other Matters

We use Essential, Performance, Functionality, and Targeting cookies. You can control these via browser settings.

Children's Privacy

Our services are not intended for individuals under 18. We do not knowingly collect data from children.

Regulatory Compliance

We comply with Saudi PDPL, UAE Data Protection Laws, PCI DSS, and FIDO standards.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact our privacy team.