Privacy Policy
Last updated: June 2026
Mawedly is a general online scheduling tool for creating booking links and managing appointments. This policy explains what we collect, why, and how we protect it. Mawedly complies with the Personal Data Protection Law (PDPL) of Saudi Arabia.
Data we collect
For service providers: name, email, phone number, business details, working hours, and optional payment info (account number/QR code). For customers booking: name, phone number, and optionally email. Customers may also upload a transfer receipt as proof of payment (optional), stored privately.
How we use your data
We use your data solely to operate the scheduling service: creating and managing appointments, preventing conflicts, and sending booking notifications and reminders by email or WhatsApp. Analytics data (peak hours, appointment counts) is private to your account and is never shared with any third party. We do not handle your money — payment happens directly between you and the customer. We do not sell your data or use it for advertising.
Third-party providers
We use Supabase for our database and secure cloud storage, Resend to deliver email notifications, WhatsApp (WhatsApp/Meta) to send booking notifications and reminders, and Lemon Squeezy to process your paid plan subscription (if you subscribe). Your customers' booking payments happen directly between you and the customer with no payment gateway. These providers process data only to deliver their service to us.
Storage location & cross-border transfer
Data is stored on Supabase Cloud servers and may be transferred across borders for operational purposes. We apply appropriate safeguards (encryption in transit and data-processing agreements with our providers) to keep your data secure.
Security
Encryption in transit (TLS/SSL). Full tenant isolation via row-level security (RLS): each provider accesses only their own data and never sees another provider's customers. QR codes, receipts, and license scans are kept in private storage and served only through secure, time-limited links.
Contacts
Your contacts (your customers) are stored in your account only — we do not access or sell them. When you delete your account, all contacts are permanently deleted within 30 days.
Your rights
You may access a copy of your data, correct it from the dashboard, delete it anytime via the dashboard or by emailing hello@mawedly.com, and unsubscribe from notifications whenever you wish.
Data retention
We retain your data while you use the service. After account deletion we permanently delete your personal data within 30 days, and transfer receipts within 90 days, keeping only an anonymous statistical record.
Cookies
We use only essential cookies needed to run the site (such as your login session). We do not use tracking or advertising cookies.
Practitioner license data
For professions that require a license, a provider may enter their license number and issuing authority and upload a scan of it. License scans are kept in private storage and never shown publicly. This information is self-entered by the provider, and Mawedly does not verify the validity of any license — confirming the validity of a license and qualifications remains the customer's responsibility before booking.
Contact
For any privacy question or request, email us at hello@mawedly.com.