How We Protect Your Information

TAWALI Modern Technology Systems & Information Establishment ("TAWALI AI", "we", "us", "our") operates the TAWALI AI platform accessible at tawali-ai.com and associated subdomains. This Privacy Policy describes how we collect, process, use, and safeguard information in connection with your use of our platform and services. By accessing or using the TAWALI AI platform, you acknowledge that you have read and understood this Privacy Policy.

We may collect the following categories of information: • Technical Data: IP address, browser type and version, device type, operating system, access timestamps, and pages visited. • Usage Data: Navigation patterns, features accessed, session duration, and interaction data within the platform. • Communication Data: Information you voluntarily provide when contacting us via email, phone, or any contact form — including your name, email address, and the content of your communication. • Business Inquiry Data: Information provided in the context of investor, government, or partnership inquiries. We do not collect sensitive personal data (as defined under applicable Saudi law) without explicit consent.

We use the information we collect for the following purposes: • To operate, maintain, and improve the TAWALI AI platform and its services • To respond to your inquiries, communications, and requests • To analyze usage patterns and optimize the user experience • To process and manage investor, government, or partnership inquiries • To comply with applicable legal obligations under Saudi law • To protect the security and integrity of our platform We process your information only for the purposes described above and do not use it for automated decision-making that produces significant legal effects without human review.

We retain information only for as long as necessary to fulfill the purposes for which it was collected: • Technical and usage data: Retained for a maximum of 12 months from collection, then deleted or anonymized. • Communication and inquiry data: Retained for as long as necessary to manage the relationship or fulfill our obligations, and deleted when no longer required. • Legal compliance data: Retained as required by applicable Saudi law and regulatory obligations. You may request deletion of your data at any time by contacting us at info@twq.ai, subject to any overriding legal retention requirements.

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances: • Service Providers: Third-party vendors who assist in platform operations (hosting, analytics, security) under appropriate data processing agreements and confidentiality obligations. • Legal Requirements: When required to comply with applicable Saudi law, court orders, or legitimate requests from authorized government authorities. • Business Transfers: In the event of a merger, acquisition, or reorganization, information may be transferred as part of business assets, subject to equivalent privacy protections. • Protection of Rights: When necessary to protect the rights, property, or safety of TAWALI AI, its users, or the public. All third-party data sharing is conducted under terms that require the protection of your information.

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, disclosure, alteration, or destruction. These measures include: • Secure data transmission protocols • Access controls limiting data access to authorized personnel • Regular review of our security practices While we apply industry-standard security practices, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to protecting your information to the best of our ability.

Subject to applicable Saudi law, you have the following rights with respect to your personal information: • Access: Request a copy of the personal information we hold about you. • Correction: Request correction of inaccurate or incomplete information. • Deletion: Request deletion of your personal information, subject to legal retention requirements. • Restriction: Request that we restrict processing of your information in certain circumstances. • Objection: Object to processing of your information for specific purposes. To exercise any of these rights, please contact us at info@twq.ai. We will respond to your request within a reasonable timeframe in accordance with applicable law.

This Privacy Policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, including applicable data protection regulations. Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts of the Kingdom of Saudi Arabia.

We reserve the right to update this Privacy Policy at any time. When we make material changes, we will update the "Last Updated" date at the top of this page. Your continued use of the platform after any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy periodically.