Privacy Policy

Sadaa is operated by Sadaa Digital Platform for Retail Trade, CR 246129, Doha, Qatar. We decide how and why your personal data is processed, and we are responsible for it under Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016).

Information you give us:

• Account: company name, email address and password. Our sign-in provider stores your password in hashed form, and we cannot read it.
• Brand verification: Commercial Registration number, legal name, registered address and a copy of the CR document.
• Creator profile: display name, photo, market, niches, social media handles, follower counts, rate ranges, availability and, if you choose to give it, a gender category.
• Marketplace activity: campaigns, applications, offers and counter-offers, messages, deliverables, deal records and ratings.
• Payments: amounts, status and the reference numbers our payment provider returns. We do not receive your full card number.
• Support: whatever you send us when you contact us.

Information collected automatically:

• Your IP address, which we use to limit repeated requests and protect the Platform.
• Basic request logs kept by our hosting provider, such as browser type, the page requested and the time.
• A sign-in cookie and a language cookie (see Cookies).
• If you enable creator push notifications: a device push token, an installation identifier, your notification language and delivery status. Turn them off in Profile or phone settings.

Information from public sources:

For creator profiles we collect public Instagram data: follower count, recent posts, likes, comments and captions. We collect it through Meta’s official API and through Apify, a data collection service. We skip private accounts, do not collect audience demographics, and label figures from this source “From public posts”.

• to create and secure your account and sign you in
• to review brand verification
• to run creator search, AI creator matching, campaigns, messaging and deals
• to process payments and monthly bank payouts
• to keep deal records and resolve disputes
• to detect and prevent fraud, abuse and attempts to move deals off the Platform
• to answer support requests and send messages about your account, your deals and changes to our terms
• to meet our legal obligations

We process your data because it is needed to provide the service you signed up for, to meet a legal obligation, for a legitimate purpose such as preventing fraud, or with your consent where we ask for it. We do not sell personal data and do not use it for advertising.

• Public creator profiles: display name, photo, market, niches, total followers and badges, shown only when the creator turns on public visibility. Visitors can expand the follower total to see the count on each platform.
• Rate ranges: visible to verified brand accounts only.
• Gender category: never shown on profiles. Brands can filter by it only if the creator separately allows that.
• Brands: creators see the company name and the details of campaigns it posts.
• Deals: the brand and the creator in a deal see each other’s messages, offers and deliverables for that deal.

Sadaa checks messages, applications, offers and campaign briefs for phone numbers. In an application, offer or brief, only the number is replaced with “number hidden”. A chat message that contains a phone number is hidden from the other party in full. Offensive words may also be filtered.

The original text is kept in a log that only Sadaa administrators can see. We use it to investigate fraud, abuse and disputes, and it has no fixed deletion date (see How long we keep it).

Sadaa staff may also read a conversation when it is needed to handle a dispute, a report or a legal request.

When a brand searches with a campaign brief, the brief it types and the creator directory fields that brand can already see are sent to OpenRouter, which passes them to a Google Gemini model to read the brief and write a short reason for each match. Do not put confidential or sensitive personal information in a brief.

Sadaa’s own rules rank the creators, not the AI model. Match results are cached in your browser (local storage), not on our servers.

We share personal data only with the other party in your deal and with the services below, and only what each one needs:

These services process data under their own terms and security commitments. We may also disclose data when the law requires it, to a court or a competent authority, or to protect the rights and safety of our users or Sadaa. If Sadaa is merged, sold or reorganised, data may pass to the new owner under this policy.

Our database and files are hosted by Supabase in Singapore. Our other services may process data in the United States, the European Union or elsewhere. When data leaves Qatar, we send each service only what it needs.

Sadaa uses only what the site needs to work. There are no advertising or analytics cookies.

Because these are needed for the site to work, we do not ask for consent to them. Clearing your browser data removes them and signs you out.

• Account and profile data: for as long as your account is open. When you close it, we delete the data or make it anonymous, except for the records below.
• Deal, payment and settlement records: for as long as we need them for accounting, tax and legal purposes, and to handle disputes.
• CR documents: for as long as the brand account exists, including earlier versions replaced by a newer upload, as the record of verification.
• Originals of hidden messages: with no fixed deletion date, because we may need them later to investigate fraud or a dispute.
• Hosting logs: kept by our hosting provider for a short period under its own policy.

Data travels over encrypted connections (HTTPS). Database rules limit each account to its own data, CR documents are kept in private storage, only Sadaa administrators can open the admin tools, and admin decisions are recorded in an audit log.

No system is completely secure. If a breach puts your personal data at risk, we will tell you and the competent authority as the law requires.

Under Qatar’s Personal Data Privacy Protection Law, you can ask us to:

• tell you what personal data we hold about you and give you a copy
• correct data that is wrong or incomplete
• delete your data where we no longer need to keep it
• stop processing it for a purpose you object to, or withdraw consent you gave

Creators can change their public visibility, availability and gender filter setting in the app at any time. If your creator profile was built from public data and you have not joined Sadaa, you can ask us to correct or remove it.

Email hello@sadaa.online. We may ask you to confirm your identity before acting on a request. If you are not satisfied with our answer, you can complain to the competent authority in Qatar, the National Cyber Security Agency.

Sadaa is not for anyone under 18, and we do not knowingly collect children’s data. If we learn that we have, we delete it.

We update this policy when our practices change, and change the date at the top. If a change is material, we will tell you through the Platform or by email before it takes effect.

Privacy questions: email hello@sadaa.online. Sadaa Digital Platform for Retail Trade, CR 246129, Doha, Qatar.