Rafie

1. Introduction

Rafie ("Rafie", "we", "us", or "our") is an online marketplace that connects clients with vetted experts for paid, one-on-one video consultations. Rafie is operated by Systems Lab, based in Doha, Qatar. This Privacy Policy explains what personal information we collect, how we use and share it, and the choices and rights you have.

This policy applies to our website at rafie.co and all related services, applications, and features (together, the "Platform"). By creating an account or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the Platform.

2. Information We Collect

We collect information you provide directly to us, information generated when you use the Platform, and information from third parties such as sign-in and payment providers.

Account Information:

Name, email address, and phone number
Profile photo or avatar
Password or authentication details (including when you sign in with Google or LinkedIn)
Account preferences and communication settings

Profile and Expert Application Information:

Professional background, biography, areas of expertise, and interests
For experts: application details, credentials, work history, links, availability, and pricing
Verification materials you submit to support an expert application

Booking and Session Information:

Bookings you make or receive, including dates, times, duration, and topics
Session status, participation, and related metadata for video consultations
Reviews, ratings, and feedback you choose to submit

Payment Information:

Payment metadata such as transaction identifiers, amounts, currency, and status
Card details are collected and processed directly by our payment processor, Tap Payments. Rafie does not store raw card numbers on its servers
For experts: payout details needed to remit your earnings

Usage and Analytics Information:

Device, browser, and approximate location information
Log data such as IP address, pages viewed, and actions taken on the Platform
Analytics events used to understand and improve how the Platform is used

Communications and Cookies:

Messages, support requests, and correspondence you send to us
Information stored through cookies and similar technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

Create and manage your account and, for experts, review and process applications
Enable bookings, host video consultations, and facilitate communication between clients and experts
Process payments, calculate platform commission, and remit expert payouts
Send transactional messages such as confirmations, reminders, receipts, and support responses
Personalize your experience and help match clients with relevant experts
Maintain, secure, and improve the Platform and develop new features
Detect, prevent, and address fraud, abuse, and security or technical issues
Comply with legal obligations and enforce our Terms of Service

4. Legal Bases for Processing

Where applicable law requires a legal basis for processing, we rely on the following:

Performance of a contract — to provide the Platform and complete bookings, sessions, and payments you request
Legitimate interests — to secure, operate, and improve the Platform and to prevent fraud and abuse
Consent — for optional analytics, certain cookies, and marketing communications, which you can withdraw at any time
Legal obligation — to meet accounting, tax, and other requirements that apply to us

5. How We Share Information and Subprocessors

We do not sell your personal information. We share it only as needed to operate the Platform, with the parties described below.

Other users:

When you book a session, we share the information necessary for the client and expert to connect and meet, such as name, relevant profile details, and booking details

Service providers and subprocessors:

Microsoft Azure — cloud hosting and infrastructure, including Azure Container Apps for the application, Azure Database for PostgreSQL for data storage, and Azure Blob Storage for files
Tap Payments — payment processing; card data is handled directly by Tap and is not stored on Rafie servers
Daily.co — hosting and delivery of one-on-one video sessions
Resend — sending transactional email such as confirmations and notifications
Google and LinkedIn — optional OAuth sign-in, if you choose to use it
Firebase — analytics, where enabled, to understand aggregate usage

Legal and safety:

We may disclose information where required by law, regulation, or legal process, or to protect the rights, safety, and property of Rafie, our users, or others
In connection with a merger, acquisition, or sale of assets, information may be transferred subject to this policy

6. Payments

Payments on the Platform are processed by Tap Payments. When you make a payment, your card details are collected and processed directly by Tap under its own security standards; Rafie does not store raw card numbers on its servers. We retain only payment metadata, such as transaction identifiers, amounts, and status, which we use to confirm bookings, calculate platform commission, remit expert payouts, handle refunds, and keep accurate financial records. Your use of Tap is also subject to Tap's own terms and privacy notice.

7. Cookies and Analytics

We use cookies and similar technologies to keep you signed in, remember your preferences, secure the Platform, and understand how it is used. Some cookies are essential for the Platform to function, while others support optional analytics. Where analytics are enabled, we may use Firebase to measure aggregate usage and improve the service. You can control non-essential cookies through your browser settings and any cookie controls we provide; disabling certain cookies may affect how the Platform works.

8. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Platform. We also retain certain information for longer where necessary to comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When information is no longer needed, we take reasonable steps to delete or anonymize it.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include:

Encryption of data in transit and at rest
Access controls that limit personal information to authorized personnel on a need-to-know basis
Use of reputable infrastructure and payment providers with their own security certifications
Ongoing monitoring, and periodic review of our security practices

No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International Data Transfers

Rafie is operated from Qatar, and our infrastructure is hosted on Microsoft Azure. Some of our service providers may process information in other countries. Where information is transferred across borders, we take steps to ensure it remains protected in line with this policy and applicable law, including using reputable providers that offer appropriate safeguards.

11. Your Rights and Choices

Depending on your location, you may have the right to:

Access the personal information we hold about you
Correct or update inaccurate or incomplete information
Delete your account and associated personal information
Request a portable copy of information you provided to us
Object to or restrict certain processing of your information
Withdraw consent where processing is based on consent, and opt out of marketing communications

You can exercise many of these choices directly in your account settings, or by contacting us at privacy@rafie.co. We will respond in accordance with applicable law and may need to verify your identity before acting on a request.

12. Children's Privacy

The Platform is intended for users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will take steps to delete it. If you believe a minor has provided us with personal information, please contact us.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the "Last updated" date above. Where required by law, we will provide additional notice. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please contact us:

Privacy: privacy@rafie.co
Support: support@rafie.co
Operated by: Systems Lab
Address: Systems Lab, Doha, Qatar