Privacy Policy

1. Who we are

The company that operates the CROWVY platform in the United Arab Emirates is the controller of your personal data. We process it in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable law.

2. What we collect

• Account: your email address or mobile number, sign-in codes and times, the language you use, and the versions of these documents you accepted.
• Profile (participants): the name you show to brands, photo, city, areas you can reach, activities, skills, interests, languages, availability, a short bio, portfolio items and social media handles you choose to add.
• Identity verification (participants): your identity document and a selfie are checked by our verification provider. We keep the result — verified or not, and confirmation that you are 18 or older — and delete the document images once a decision is made.
• Payout details (participants): your bank account is collected and checked through our payout provider; we keep only what is needed to pay you, such as the last digits of the IBAN.
• Company (brands): company name, trade licence details and document, industry, and the contact person's name, email and phone.
• Campaign activity: campaigns you view, join, apply to or create; answers you give; your place and its history; reviews and disputes.
• Proof and location: the photos, videos, files and links you submit, and your location at the moments you check in, check out or capture proof — never continuously.
• Payments (brands): what you paid, refunds and the payment provider's references. Card details go to the payment provider, not to us.
• Technical: device and browser type, IP address, and security and error logs.

3. Why we use it

• To provide the Platform under our contract with you: accounts, matching you with campaigns, campaigns, proof review, payments, payouts and reports to brands.
• To meet legal obligations: verifying age and identity, keeping financial records, responding to lawful requests.
• For legitimate interests that do not override your rights: preventing fraud and misuse, keeping the Platform secure, and improving it.
• With your consent where the law requires it, such as optional marketing messages. You can withdraw consent at any time.

4. Matching and automated tools

We show you campaigns, and show brands people, based on non-sensitive information: city and areas, activities, skills, interests, languages and availability. We never use religion, ethnicity, nationality, gender, health or age (beyond confirming you are 18 or older) for matching.

Some features use artificial intelligence, for example to explain why a person matches a campaign or to help check proof. They receive only the information needed for that task, make suggestions only, and never make decisions that affect your pay or access — a person does.

5. Who sees your data

• Brands: for campaigns you join or apply to, your display name, photo, profile details, answers, place status and the proof you submit. Brands see the area of a campaign, never your exact location history, identity documents or bank details.
• Participants: the brand's name and the campaign details. Confirmed participants see the exact meeting point.
• Service providers acting for us: hosting and storage, email and SMS delivery, identity verification, payments and payouts, and AI model providers — each bound to use the data only for us.
• Authorities: when the law requires it or to protect the safety of people.
• A buyer or successor, if the business is reorganised or sold, under the same protections.

We do not sell your personal data, and we do not share it for third-party advertising.

6. Transfers outside the UAE

Some providers may process data outside the UAE. We do so only where the PDPL allows, with appropriate safeguards such as contractual protections, and we keep identity documents and exact location data to the minimum needed.

7. How long we keep it

• Identity documents: deleted once the verification decision is made; the result is kept while your account is open.
• Exact location records: 180 days.
• Proof files: 730 days after the campaign, so brands can use their reports and disputes can be resolved.
• Financial and tax records: as long as UAE law requires.
• Account and profile: while your account is open, then deleted or anonymised, except what we must keep by law or to settle a dispute.

8. Your rights

Under UAE law you can ask to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent you have given. Most profile details can be edited in your account. For anything else, contact us; we answer within the time the law sets. If you are not satisfied, you may complain to the UAE Data Office.

9. Security

We protect data with encryption in transit, access limited to people who need it, private storage for identity documents and proof files shared only through short-lived links, and logged access by our staff. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

10. Age

The Platform is only for people aged 18 or over. We do not knowingly collect data from anyone younger and delete it if we learn of it.

11. Cookies

We use only the cookies the Platform needs to work: to keep you signed in, protect your session and remember your language. We do not use advertising or cross-site tracking cookies.

12. Changes and contact

We will tell you before a material change to this policy takes effect. Questions or requests about your data: contact our support team at the email address shown at the top of this page.

This policy is published in Arabic and English. If the two versions differ, the Arabic version prevails.