1. Scope and who we are

Promovia is a non-cash voucher platform in Qatar. A voucher journey begins with an eligible purchase that is verified and the voucher can then be used in a specified offer at a participating business. Promovia is not a wallet, payment service, or cashback programme and does not hold customer cash balances.

This policy covers the customer app, promovia.qa, business-interest forms, and related support and verification messages. Additional agreements may apply to participating businesses and their personnel.

2. Information we collect

• Account and identity data: phone number, country code, one-time passcode (OTP) verification status, name and email if provided, language, and consent versions.
• Purchase evidence: the receipt image, extracted merchant, date, total and item data, and verification or review results. We aim to mask unnecessary payment and identity information before image processing.
• Vouchers and offers: issued vouchers, status and expiry, selected offers, and reservation, redemption or cancellation records, including any additional amount shown in an offer.
• Support and safety: communications with us, anti-fraud information, login and security logs, session and device identifiers, and network address when needed to secure the service and apply rate limits.
• Website and business interest: name, business name, category, city, contact method, partnership type and consent if you submit the form. We record limited operational events such as starting or submitting the journey without third-party advertising trackers.
• Language preference: your browser may save Arabic or English locally on your device.

We will not ask you to send a password or OTP to Promovia support, and we do not need payment-card details to operate vouchers.

3. How and why we use information

We process information with consent where required, to provide the service you request, for legitimate interests in preventing fraud and securing and improving the platform, and to meet legal obligations. Purposes include:

• creating the account, verifying the phone number, and managing sessions;
• verifying purchases, issuing vouchers, presenting offers, and completing reservations and redemptions;
• preventing duplicate or abusive use, investigating disputes, and protecting customers and businesses;
• providing support, handling privacy requests, and communicating material service changes;
• measuring reliability and improving the service through limited operational events; and
• handling business-interest submissions and possible partnership contact.

Automated systems may assist with receipt reading and duplicate or risk detection. Cases requiring judgment or materially affecting your rights can be referred for human review.

4. Sharing, service providers, and international transfers

We do not sell personal information or share it for behavioural advertising. We disclose only what is necessary to:

• Participating businesses: voucher or offer information and status needed to confirm redemption or resolve a dispute. We do not provide a raw receipt image unless necessary and permitted.
• Service providers: hosting, storage and security providers; WhatsApp verification messaging when enabled; OCR/AI services used to process receipt images; and support or communications tools when used.
• Authorities and professional parties: where legally required, to protect rights and safety, or for an audit or legal dispute.
• Business transfers: as part of a reorganisation or sale, subject to continued protection and any required notice.

Some providers may process data outside Qatar, including regional or international locations. We use appropriate contractual and security arrangements and limit processing to the required purpose. Receipt evidence is not sent to an external processor before available masking controls are applied.

5. Information security

We apply technical and organisational controls appropriate to the data, including encryption in transit, encryption of stored sensitive contact details, role-based access, time-limited image links, audit records for sensitive actions, and rate monitoring. No electronic method is completely secure, so we review and update controls regularly.

6. Data retention

We keep information only for as long as needed to provide the service, protect customers and businesses, or comply with law:

• Account data remains while the account is active and is deleted or de-identified after closure unless legal retention is required.
• Receipt images are available to the customer for up to 365 days and may be retained with related financial data for up to 10 years where needed for recordkeeping, disputes, and fraud prevention. The image is then deleted and a non-identifying fingerprint may remain to prevent duplicates.
• Voucher, redemption, and audit records remain as needed to evidence transactions and meet applicable recordkeeping obligations.
• OTP, session, and rate-limit state is retained for short periods appropriate to security and operation.
• A business-interest submission remains until contact is completed or you request deletion, unless a longer legal need applies.

Deletion may be paused during a claim, dispute, or legal hold. Retained information is restricted to that purpose.

7. Delete your Promovia account and data

After verification, we close the account and delete or de-identify associated information, including profile and extracted receipt data where retention is not required. Limited transaction or audit records may remain where law requires, to resolve a dispute, or to prevent fraud, and are restricted from other use. Uninstalling the app alone does not delete the account.

8. Your rights and choices

Under applicable Qatar law, you may ask what we process, access your information, correct inaccurate information, withdraw consent where consent is the basis, and object, restrict, or request deletion where applicable. You may also request a usable copy of certain information.

Email support@promovia.qa. We must verify identity before disclosure or alteration and will explain if a legal obligation or legitimate right prevents part of a request.

9. Essential service terms

• Your account is personal. Provide accurate information and protect your phone and verification codes.
• Voucher issuance depends on purchase eligibility, programme rules, and successful verification. Each voucher and offer has a displayed scope, validity period, and conditions before confirmation.
• Vouchers are non-cash and cannot be withdrawn, transferred, or used as a payment method. The customer pays any displayed additional amount directly to the business.
• Do not submit fabricated or duplicate evidence or use the service fraudulently. An account or transaction may be paused during investigation, with support available.
• Offer and business availability may change. A completed transaction is not changed retrospectively except to correct error or fraud or meet a legal duty.
• Third-party links and services are also subject to their own terms and policies.

10. Children and third-party links

The service is intended for adults and is not designed for children. A guardian who believes a child submitted information may contact us for deletion. Links may lead to third parties whose practices Promovia does not control; review their policies before providing information.

11. Changes to this policy

We may update this policy as the service or legal requirements change. We publish the new date here and provide additional notice or request renewed consent when a material change requires it.

12. Contact and complaints

For questions, complaints, or privacy requests, contact Promovia Marketing Services at support@promovia.qa. This policy is governed by applicable laws of the State of Qatar, including Law No. 13 of 2016 on Protecting Personal Data Privacy.