Last updated: October 1, 2026
Your privacy matters to us. This policy explains what information Tawezy collects, how we use it, and what choices you have.
We collect information you provide directly, including:
Images. Before an uploaded image is stored, we remove its embedded metadata — including any location coordinates recorded by the camera. We keep the picture, not the data attached to it.
If you choose to verify your identity, we also collect:
We also automatically collect technical data such as your IP address, browser type, device information, and usage patterns to help us maintain and improve the platform.
Signing a contract records more than this. When you sign an agreement or an amendment we keep a permanent record of the time, IP address and device you signed from, and that record can be shown to people outside Tawezy. Section 4 explains exactly what is kept, who can see it, and how you control it.
We use the information we collect to:
Identity verification is required before posting a collaboration, applying to one, or signing a contract. This requirement exists to prevent fraud and to ensure that all users entering into legally binding agreements on the platform are adults (18 or older).
Verification is not required for community features such as messaging, posting, commenting, or following. Tawezy is an 18+ platform throughout; for those features your age is taken from the date of birth you provide at sign-up rather than from a verified document. We may require verification of any account at any time.
To complete verification, you must submit a government-issued ID (such as a passport or driver's license) and a facial image. These are processed by Didit, our third-party identity verification provider, which performs liveness detection, document authenticity checks, and age verification on our behalf.
Your identity documents and biometric images are transmitted directly to Didit and are governed by their privacy policy. Tawezy does not store your raw ID documents or facial images on our servers. From a completed verification we store:
We use that hash for one purpose. If an account is permanently banned for serious harm such as fraud, the hash lets us refuse identity verification to that same person if they return under a new account. It is not used for advertising, profiling, or any other purpose, and it is never shared.
If your verification is unsuccessful, you may contact us at hello@tawezy.com to request manual review.
When you sign an agreement or an amendment, we record the moment you signed, the IP address the signature came from, and the browser and device you used. These are observed by our servers at the moment of signing. They are not supplied by your device, and once recorded neither you nor the other party can alter them.
We do this because an electronic signature is worth only what can be proven about it. If one party later denies having signed, or disputes what they signed or when, this is the evidence that answers it.
The Certificate of Completion. Once both parties have signed, we create a read-only record of the agreement with its own private link. It shows the parties' names as verified, their email addresses, whether each completed identity verification, the exact time each signed, the IP address and device each signed from, the signature images, the agreement exactly as it was signed, a cryptographic fingerprint of that wording, and any amendments both parties later signed.
Anyone holding the link can open it, without a Tawezy account. That is the point of it: a lawyer, accountant, mediator or court may need to confirm an agreement is genuine, and requiring them to join the platform first would make the record useless at the moment it matters. The link contains a 32-character random code that cannot be guessed, and the page is not indexed by search engines.
Please share it deliberately. The link exposes personal information about both parties — including two email addresses and two IP addresses. Anyone you send it to can read all of it, and can pass the link on to someone else. It is not private once it leaves your hands.
You stay in control of it. Either party can replace the link at any time, which stops the previous one working immediately, or switch it off altogether so it opens nothing for anyone. Both controls are on the agreement page. Replacing or switching off a link never alters the underlying record, its fingerprint, or its history.
Every opening is logged. Each time the link is used we record the date, time and IP address of the visit and show it to both parties on the agreement page. If a link has travelled further than you intended, that log is how you find out.
This information is used for one purpose: proving what was agreed, by whom, and when. It is not used for advertising, profiling, or personalization, and it is never sold. Tawezy is not a party to any agreement between members.
To keep Tawezy safe and policy-compliant, certain user-submitted content — including messages, project offers, applications (cover messages and screening answers), and contract amendment proposals — is automatically reviewed by an AI moderation system powered by Anthropic's Claude API. Content is submitted for review at the time it is sent and is not used to train AI models. Anthropic's data processing is governed by their own privacy and usage policies.
Translation. When you choose Translate under something another member wrote — a profile, project, post, comment, application or message — that text is sent to Anthropic's Claude API to be translated into your language. The translation is saved, without your name attached, so the same text is not translated twice. We also record how much text each member translates, to keep use within fair limits. Translations are produced automatically and may not be exact; the member's original words are what they actually said.
Links, not files. Tawezy does not store or scan the files members share. Work is shared as a link to where it already lives, and links in messages, applications and shared work are limited to trusted services (listed in our Community Guidelines). When you open a link, you leave Tawezy, and that service's own privacy policy applies.
Members can report another member for harassment, fraud, impersonation, or other breaches of our rules. A report includes the reason chosen, anything the reporter writes, any files they attach, and a reference to the conversation, agreement, project or post it concerns.
Reports are private. They are visible only to Tawezy moderators. The person being reported is not told who reported them, and cannot see that a report exists.
What a moderator can see. To assess a report fairly we have to look at what actually happened rather than a description of it. When a report is attached to a conversation, a moderator can read the messages in that conversation. This access is limited to the specific conversation attached to that specific report — it is not general access to your private messages, and no moderator can browse the messages of members who have not been reported. A moderator also sees the reported member's account details, including their email address, and a record of previous reports about them.
Automated checks. Written report comments and reviews are screened by the automated moderation described above before they are stored.
Security monitoring. Text written on Tawezy that matches known patterns of attack — attempts to inject code, scripts or database commands — is recorded automatically: who wrote it, where, and the surrounding text. Our moderators are alerted and review it. This record is kept as an enforcement record (see section 10). Anyone who shares a link can also be reported by the person they shared it with, using Report this link.
Enforcement. If we suspend or ban an account we record the decision, the reason, and which moderator made it. We keep that record after a suspension is lifted so that repeated behaviour remains visible. We will tell you by email if your account is suspended or banned, including the reason, and you can appeal by writing to support@tawezy.com or using our appeal form. Appeals are reviewed by a moderator.
Permanent bans. For serious harm such as fraud, a ban may also block the hashed identity described in section 3, which prevents the same person verifying again under a new account. This is the only situation in which that hash is used.
When you are logged in, Tawezy uses your profession, profile skills and category, your recent Explore searches, and your application history to rank and personalize the projects shown on the Explore page and in the mobile app. The same match decides where boosted (featured) projects appear: a boosted project is shown first to members it fits, and ranked higher than usual for everyone else. We keep only your 20 most recent searches, for no more than 90 days, and you can clear them at any time in Settings → Account. Who you follow is used to prioritize posts from those people in the community feed. This processing happens on our servers and is not shared with third parties for advertising purposes.
We do not sell your personal information. We share data only with the following trusted service providers who help us operate the platform:
We may also disclose information when required by law or to protect the rights and safety of our users.
Your public profile information — including your name, bio, skills, and posted projects — is visible to other users on the platform.
Sharing you initiate. The Certificate of Completion link described in section 4 lets you show an agreement, and the personal details of both parties to it, to anyone you choose — including people and organisations outside Tawezy. That sharing is your decision rather than ours, it is logged, and you can withdraw it at any time by replacing or switching off the link.
All payment processing is handled by Stripe. We never store your full card details on our servers. If you connect a Stripe payout account to receive payments from collaborations, that account is managed directly by Stripe and subject to Stripe's own identity verification and privacy requirements. Your payout account details are not stored by Tawezy.
We retain your account information for as long as your account is active. If you delete your account, we will delete your personal data within a reasonable period, except where we are required to retain it by law (for example, financial transaction records). Boost credit and subscription purchase records may be retained for tax and legal compliance purposes. Explore search history is limited to your 20 most recent searches and is deleted after 90 days, or straight away when you clear it or delete your account.
Signing records are kept with the agreement. The time, IP address and device recorded when a contract or amendment was signed are retained for as long as we keep the agreement itself, and are not deleted when a collaboration ends. This is deliberate: a dispute about a contract usually arrives long after the work is over, and evidence that expired before the disagreement did would protect nobody.
Reports and enforcement records are kept longer. A report, and any record of a suspension or ban, is retained after the matter is resolved and after a suspension is lifted. This is deliberate: a single complaint means little, while a pattern of them is often the only evidence that something is wrong, and deleting that record would remove the protection it exists to provide. Where an account is permanently banned, the hashed identity described in section 3 is retained for the same reason — if it were deleted the ban could be defeated by simply signing up again.
You can access, correct, or delete your personal information at any time by contacting us at hello@tawezy.com. You may also delete your account directly from your profile settings. If you would like a copy of the data we hold about you, or wish to object to any processing, please reach out and we will respond within a reasonable timeframe.
Two limits are worth stating plainly. We will not disclose who reported you, because doing so would expose people to retaliation and would stop others reporting genuine harm. And we may decline a request to delete an enforcement record or a banned identity hash where keeping it is necessary to protect other members. If you disagree with a moderation decision, the route is an appeal to support@tawezy.com, which a moderator will review.
Tawezy is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a minor has provided us with personal information, please contact us and we will promptly delete it.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the platform. Continued use of Tawezy after changes take effect constitutes your acceptance of the updated policy.
If you have any questions about this Privacy Policy, please contact us at hello@tawezy.com.