Privacy is part of compliance work
This notice explains what Multazim processes, why it is needed, and how you can access, correct, or request deletion of your data.
Data we process
Account name, email, and Company permissions; employee names, numbers, and phone details; QID or passport details and date of birth; uploaded photos and files, including identity, licensing, and financial documents; case, task, and reminder data; Company Assistant questions and short session context when enabled; an optional app-installation identifier for alerts; and security and audit history. We do not use this data for advertising or tracking.
Why we use it
To operate the document vault, track renewals, assign work, secure access, and evidence Company actions. Processing is limited to the required purpose and granted role.
Where data is stored
Company, employee, document, task, and audit records sync to the secured Multazim server workspace so authorized team members can collaborate. Personal Google Drive or iCloud is not the primary record store. The app keeps protected sign-in and unfinished-upload information on the device, while biometric data stays with the operating system and is never sent to Multazim.
Sharing and access
Company members see only what their permissions allow. When configured, contracted providers may process limited data for hosting, private storage, file scanning, text extraction, email, and optional alerts. When the Company Assistant is enabled after legal approval, Google Vertex AI in the approved regional location processes the question, short session context, and minimal authorized record fields to produce a read-only answer. The global processing endpoint is not used. Optional alerts use Google Firebase Cloud Messaging. The approved production processor list and locations must be published before launch.
Protection
We use transport encryption, private storage, limited tokens, short-lived links, and audit records. Full production protection also depends on the approved hosting and provider configuration and monitoring.
Your rights
You may request access, correction, withdrawal of consent, or deletion when the purpose ends and no legitimate retention reason remains. Company or audit records may remain after your identity is removed when needed for compliance or evidence of a legitimate action.
Official reference
Qatar Law No. 13 of 2016 on Protecting Personal Data Privacy