TawseelQ

Effective date	27 September 2026
App operator	digitalteam@powermindinc.com
Contact	digitalteam@powermindinc.com
Office	The Eighteen Tower, Zone 69, Street 303, Lusail City, Qatar

This Policy explains how TawseelQ collects, uses, shares, protects and retains personal data, and how users may exercise their privacy rights.

1. About this Privacy Policy

TawseelQ is an enterprise logistics and transportation platform used to manage drivers, shipments, border-clearance activities, refinery or receiving operations, route visibility, operational approvals, documents, reports and related workflows. This Privacy Policy applies to the TawseelQ mobile applications, web applications, administration portal and related services (collectively, the "Services").

The entity operating or providing TawseelQ for a customer acts as the controller or responsible organization for personal data processed through the Services, depending on the applicable contractual and operational arrangement. In some deployments, a customer organization may determine the purposes and means of processing, and we may process personal data on that customer's behalf. For privacy matters, contact digitalteam@powermindinc.com.

By using the Services, you acknowledge the practices described in this Policy. Where consent is required by applicable law, we will request it through the appropriate application screen or other valid method.

2. Personal Data We Collect

2.1 Account and identity data

• First name, last name, mobile number, company or employer, role and user identifier.
• Account credentials and authentication information, including password-related records, access tokens and one-time password verification status.
• Administrator-created profile information for border officers, receivers, supervisors and other authorized operational users.

2.2 Logistics and shipment data

• Shipment, transport, manifest, loading, destination, border-crossing, refinery or receiving information.
• Vehicle and driver details, including plate number, transport company, shipment status and assigned operational role.
• Measurements and operational entries, such as weight, temperature, quantity, density, timestamps, discrepancies, approvals, comments and trip status.

2.3 Location and tracking data

• Precise or approximate device location, GPS coordinates, route, speed, distance and estimated arrival information when location access is enabled and required for an active trip.
• Location-related timestamps and status information needed to display live shipment progress, calculate operational metrics, support alerts and close tracking when a trip is completed.

2.4 Documents and user content

• Shipment manifests and other documents uploaded or captured through the Services.
• Information extracted from documents using optical character recognition (OCR), including manifest number, loading information, weight, vehicle and driver details.
• Digital signatures, comments, attachments, photographs or other evidence submitted as part of operational workflows.

2.5 Technical and service data

• Device type, operating system, application version, language, IP address, session and authentication events.
• Push-notification tokens and communication-delivery status where notifications are enabled.

2.6 Communications data

• Messages and verification codes sent through SMS or other approved communication channels.
• Requests, questions, complaints, support records and account-deletion communications.

3. How We Collect Personal Data

• Directly from you when you create or use an account, upload a document, enter operational data, provide a signature, contact support or request account deletion.
• From your employer, customer organization or an authorized administrator who creates or manages your access.
• Automatically from your device and use of the Services, including location data, subject to device permissions and applicable law.
• From service providers supporting hosting, authentication, SMS delivery, notifications, mapping, OCR, security and technical support.

4. How We Use Personal Data

We process personal data only for legitimate and defined purposes, including to:

• Create, authenticate, administer and secure user accounts.
• Operate the end-to-end shipment and transport workflow, including driver registration, manifest processing, border clearance, refinery receipt, discharge, return and trip closure.
• Provide live tracking, shipment visibility, route information, operational alerts, estimated timing and reporting.
• Extract and validate document information through OCR and support discrepancy checks.
• Record approvals, comments, signatures, account names, upload details and timestamps for operational accountability and audit purposes.
• Send OTPs, service messages, push notifications, security alerts and essential operational communications.
• Generate operational reports required for shipment and transport workflows.
• Prevent misuse, investigate incidents, detect abnormal activity and maintain the integrity, availability and security of the Services.
• Provide customer service and technical support.
• Comply with contracts, legal obligations, regulatory requests, dispute-resolution requirements and enforcement of applicable terms.

5. Legal Grounds for Processing

Depending on the context and applicable law, we may process personal data because it is necessary to provide the Services or perform a contract; to comply with legal or regulatory obligations; for legitimate operational, security, fraud-prevention, audit and service-improvement interests; to protect vital or public interests where applicable; or based on consent when consent is required. If processing is based on consent, you may withdraw consent through device settings, the application or by contacting us, although withdrawal does not affect processing already lawfully completed.

6. Location Data and Device Permissions

TawseelQ may request location access to support active-trip tracking, route visibility, operational alerts and related logistics functions. Depending on the device and selected permissions, location may be processed while the application is in use and, where specifically enabled and necessary, in the background during an active trip.

You may change location, camera, files, photos and notification permissions through your device settings. Disabling a permission may limit or prevent features that depend on it. We do not use location data for third-party advertising.

7. Sharing and Disclosure

We do not sell personal data. We may disclose personal data only as reasonably necessary to the following categories of recipients:

• Your employer, customer organization, shipment stakeholders and authorized operational users, according to role-based access and business need.
• Affiliates supporting the operation, hosting, implementation, governance, security or support of TawseelQ.
• Vetted service providers supporting cloud hosting, storage, databases, SMS and OTP delivery, push notifications, OCR, mapping, cybersecurity and customer support.
• Professional advisers, auditors, insurers and contractual counterparties where access is necessary and subject to appropriate confidentiality obligations.
• Government authorities, regulators, law-enforcement bodies or courts when disclosure is required or permitted by law.
• A successor or relevant party in a merger, restructuring, financing, acquisition or transfer of business, subject to applicable safeguards.

Third-party providers may process data under their own privacy notices when they act independently. Where they process personal data on our behalf, we require appropriate confidentiality, security and data-protection commitments.

8. International Data Transfers

The Services may use infrastructure or service providers located outside the country where data was collected. When personal data is transferred across borders, we apply contractual, organizational and technical safeguards and follow applicable legal requirements for cross-border data flows. Users may contact us for further information about relevant safeguards, subject to confidentiality and legal limitations.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, including active account administration, transport operations, customer contracts, audit trails, security, dispute resolution and legal or regulatory obligations. Retention periods vary by data category and the requirements of the customer organization.

When data is no longer required, it is deleted, anonymized or securely isolated in accordance with applicable retention and backup procedures. Deletion from active systems may not immediately remove data from protected backups, audit logs or records that must be retained by law or for legitimate dispute, security or compliance purposes.

10. Data Security

We use reasonable administrative, technical and physical safeguards designed to protect personal data, including role-based access, authentication controls, encryption in transit where appropriate, environment separation, backup controls and restricted administrative access. No system or transmission method is completely secure, and we cannot guarantee absolute security.

Users are responsible for protecting their credentials, using the Services only through authorized devices and promptly reporting suspected unauthorized access or security incidents.

11. Your Privacy Rights

Subject to applicable law and any relevant customer or employer process, you may request to:

• Access or receive information about personal data held about you.
• Correct inaccurate or incomplete personal data.
• Delete your account and eligible personal data.
• Restrict or object to certain processing.
• Withdraw consent where processing relies on consent.
• Receive a copy of eligible personal data in a portable format, where applicable.
• Submit a complaint to the relevant data-protection or regulatory authority.

We may need to verify your identity and authority before completing a request. Certain requests may be limited where data must be retained for legal, security, audit, contractual or operational reasons, or where the account is managed by your employer or customer organization.

12. Account Deletion

You may initiate account deletion from the Profile section of the TawseelQ mobile application by selecting the account-deletion option and following the displayed steps. If that option is unavailable, you may send a deletion request to digitalteam@powermindinc.com with the subject "TawseelQ Account Deletion".

After identity verification, we will delete or de-identify eligible account data within a reasonable period, subject to data that must be retained for legal obligations, transport records, audit trails, fraud prevention, security, dispute resolution or contractual requirements. Deleting an account may permanently remove access to the Services and cannot always be reversed.

13. Children's Privacy

TawseelQ is an enterprise logistics application and is not directed to children. Users must be at least 18 years old or meet the minimum legal age required in their jurisdiction to use the Services in an employment or authorized business capacity. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us so that we can review and take appropriate action.

14. Cookies and Similar Technologies

The TawseelQ web services may use strictly necessary cookies, local storage, session technologies or similar mechanisms to maintain authentication, security, preferences and application functionality. We do not use these technologies for third-party behavioral advertising unless this Policy and the relevant consent mechanism are updated beforehand.

15. Third-Party Links and Services

The Services may contain links to, or integrations with, third-party websites or services. Their privacy practices are governed by their own notices. We encourage users to review those notices before providing personal data to an independent third party.

16. Changes to this Policy

We may update this Policy to reflect changes in the Services, technology, legal requirements or operational practices. The revised Policy will be made available through the application, website or another appropriate channel, and the effective date will be updated. If a material change requires consent or additional notice under applicable law, we will provide it.

17. Contact Us

For privacy questions, rights requests, complaints or account-deletion assistance, contact:

Organization	digitalteam@powermindinc.com
Application	TawseelQ
Email	digitalteam@powermindinc.com
Address	The Eighteen Tower, Zone 69, Street 303, Lusail City, Qatar
Postal address	P.O. Box 201184, Qatar

18. Qatar Privacy Framework

Where Qatar law applies, this Policy is intended to support compliance with Law No. 13 of 2016 on Protecting Personal Data Privacy and other applicable requirements. Nothing in this Policy limits rights available under mandatory law.

Store disclosure alignment: The privacy information entered in Apple App Store Connect and the Google Play Data safety section should accurately match the application's actual behavior, integrated SDKs and the practices described in this Policy.