1. Introduction & Legal Compliance

Afeed is committed to safeguarding the personal data of all Users and Content Creators. This Privacy Policy sets forth the principles, scope, and obligations under which Afeed collects, stores, uses, and discloses information.

This section is intended to comply with the Kuwait Personal Data Protection Law (Law No. 20 of 2021) and relevant international best practices.

2. Data Collected

Afeed may collect the following categories of personal and system data:

Identification Data: Name, email address, phone number, country of residence, and, where applicable, civil ID (Kuwait nationals and residents);

Billing & Transaction Data: Credit card information, payment confirmation logs, refund records, and payout summaries;

Usage Data: Pages accessed, time spent on content, device/browser information, IP address, and login history;

Communication Data: Emails, inquiries, support tickets, and any internal correspondence within the Platform.

Data is collected through:

Account creation and subscription forms;

Payment gateway integrations;

Session tracking and cookie usage;

Voluntary interactions with Afeed's support team.

3. Purpose of Collection

Collected data is used for the following lawful purposes:

Enabling secure access to Platform services;

Processing payments and disbursing Creator earnings;

Personalizing the user experience and improving performance;

Complying with anti-fraud, tax, and financial services regulations;

Responding to customer service inquiries and enforcing this Agreement.

Afeed does not use personal data for profiling, automated decision-making, or advertising without explicit consent.

4. Data Storage & Security

All personal data is securely stored using Amazon Web Services (AWS) and DigitalOcean infrastructure with end-to-end encryption and restricted access protocols. Afeed is evaluating final regional hosting locations in compliance with data residency requirements in Kuwait.

Afeed applies reasonable administrative, physical, and technical safeguards to prevent data loss, unauthorized access, and misuse.

In the event of a data breach affecting User or Creator data, Afeed will notify affected parties in accordance with the applicable breach notification timelines under Kuwaiti law.

5. Data Retention & Deletion

User and Creator data is retained only for as long as necessary to fulfill the purposes outlined above.

Upon voluntary account deletion, data will be purged within thirty (30) business days, unless subject to:

Outstanding disputes;

Legal obligations under banking or AML regulations;

Historical audit trail requirements.

Users may submit requests to:

Access their data;

Correct inaccuracies;

Permanently delete their information (where feasible);

Object to specific uses of their data.

All such requests must be directed to [email protected] and will be reviewed in accordance with applicable legal guidelines.

6. Third-Party Data Access

Afeed does not sell, rent, or share personal data for marketing purposes.

Data may be shared with third-party processors (e.g., UPayments) solely for:

Payment processing;

Fraud prevention;

Service delivery as part of the Platform's technical infrastructure.

All third-party processors are contractually bound to uphold equivalent data protection and confidentiality standards.