Privacy policy

Who is responsible

Mutjir is operated by the Jordanian sole proprietorship registered under the trade name «عالم الابتكار للبرمجة», owned by «ركاد عصام علي الدويري», individual commercial register number 618172 and trade-name registration number 305384, both dated 13 July 2026. Its registered business address is Jordan, Amman, Al-Jubaiha, Umm Zuwaytina neighbourhood, near Higher Education (الأردن، عمان، الجبيهة، حي أم زويتينة، قرب التعليم العالي). The Arabic registered names identify the contracting operator; Mutjir is the service brand.

For privacy, support and rights requests contact contact@mutjir.com. This notice covers Mutjir accounts, the website and mobile companion. We act as controller for our own account, billing, service-security and privacy-request purposes. Your business normally determines the purposes and permissions for the employee, customer, supplier and operational records it adds; we process those records on its instructions under the data-processing appendix. We help direct requests to the responsible party.

Information and sources

We receive account and profile details from you or an authorized business administrator: name, email, authentication details, role, workspace and branch memberships, preferences and optional business contact details. Workspace records may include staff, customer and supplier information; inventory and pricing; sales, purchases, invoices, payments, balances and financial records; documents, files, tasks and messages. Information can come directly from the person, the business, authorized users or integrations they instruct.

Service operation involves IP addresses, device or session identifiers, access times and security or audit events. Support and privacy requests include the contact details, request, correspondence and outcome you provide. Agreement evidence records the signing user and business identifiers and names, signer email, time, language, channel, authority confirmation and exact document versions and text. The agreement receipt does not itself store the signer’s IP address or user-agent; separate operational security logs may contain technical details.

Purposes and lawful processing

We use relevant information to authenticate users, apply permissions, provide workspaces and reports, carry out business instructions, administer subscriptions and payments, support users, secure the service, address misuse, document contractual acceptance and fulfill applicable legal obligations. We record and handle personal-data requests and complaints to carry out rights and demonstrate the outcome.

Processing requires the permission or legal exception applicable to the activity. Where Jordanian law permits necessary processing for a contract to which the person is a party, or for a specific legal obligation, we use that limited basis; a contract with a business does not automatically supply a legal exception for every employee or customer. The business must establish the necessary basis and give notices for its own records. A privacy-notice acknowledgment or administrator’s agreement is not blanket consent for other people, marketing, optional tracking, AI processing or international transfers. When consent is required, it must be specific and withdrawable; withdrawing it does not undo earlier lawful processing or override a separate lawful retention duty.

Mobile permissions and storage

Camera access is optional and is requested when you scan a product barcode or photograph a supplier document. These features do not require microphone access. If you choose a file to import or attach, the selected file and its contents may be sent to your workspace to complete that action.

The app stores session credentials and preferences on your device and may cache workspace content. Web sessions use cookies and related storage for sign-in, security and preferences. Signing out ends app access on that device; uninstalling does not delete your server account or business records.

Supplier documents and AI-assisted reading

You can choose to photograph or select supplier invoices and receipts to help prepare a purchase order. Photos and selected files are uploaded to your workspace when you add them, so you can review pages and resume your capture. These documents may contain supplier and customer names, phone numbers, addresses, invoice numbers, product details, prices, taxes and other business or financial information. Only provide information you are authorized to use.

In Mutjir Mobile, before a new AI reading or a retry, we ask permission to send the selected pages and close-ups to OpenAI to extract document details. You can decline or cancel without starting that reading. Declining does not delete files already uploaded or reverse an earlier reading. You can review and correct extracted information before confirming a purchase-order draft. Reading a document does not receive stock or make a payment.

Source files are available until the expiry shown in the capture. We then remove access and schedule source cleanup; a cleanup failure may require another attempt. Extracted details, your corrections, purchase records, processing and audit records, and backups have separate retention needs and are handled under this policy’s retention and deletion section. Cancelling a capture does not immediately erase all these records.

We request that OpenAI not save the reading as stored response history. This is not a promise of zero retention: provider security and abuse-monitoring records and other retention required by applicable service terms may remain. Processing may occur outside your country, as described in this policy. For a privacy or deletion request, use our contact or account-deletion page.

Cookies and device storage

We use session and security storage to sign you in and protect requests, and functional storage for language, appearance, selected branch and recovery of actions you initiate. A remembered-browser security option stores a limited-duration proof when you choose it. Local recovery information may contain draft business data; protect shared devices and sign out when finished.

Mutjir Mobile does not include advertising or cross-app advertising tracking. If optional analytics or advertising technologies are introduced, we will describe them and provide any legally required choice before enabling them. You can manage storage in your browser or device settings; blocking essential storage may prevent sign-in or recovery functions. This notice does not treat optional tracking consent as a condition of accepting the business agreement.

Recipients and processing locations

Authorized workspace users see information according to the business’s permissions. Our authorized personnel and contracted infrastructure, storage, communications and security providers process only what their service requires. Optional AI-assisted supplier-document reading sends the selected document content to OpenAI as described above. We may disclose information when you direct an integration, when required by law, or as necessary for security incidents and legal claims, subject to applicable safeguards.

The current API and database hosting identified for this service is Render in Oregon, United States. Information can therefore be processed outside Jordan and your country; optional AI and other approved providers may have additional processing locations. Before further transfers we must establish the applicable conditions, provider obligations and safeguards. You may request information about relevant recipients, countries and safeguards at contact@mutjir.com. This notice and your business’s acceptance do not by themselves authorize a transfer that the law does not permit. External services you open have their own notices.

Retention and erasure

We keep personal data only for the service purpose, an applicable legal obligation or a documented lawful claim or hold. The applicable period depends on the category, required accounting or other law, subscription status, open requests or disputes and the minimum evidence needed. We restrict retained information to that purpose, review it, and erase or irreversibly anonymize it when the reason ends. Agreement evidence is retained to prove the agreement while needed for the relationship and any applicable claim or legal period; an immutable audit design is not permission to retain it forever.

Supplier-document source access expires at the date shown in the capture. The configured source-file period is at most 30 days from creation, with 30 days as the default; cleanup may need a retry. That period does not cover extracted business records, separate audit logs, provider records or backups. Erasure planning includes backup and downstream copies, including foreign copies. We explain any lawful retained category and period and any inability to confirm deletion with a recipient, rather than promise that deactivating access erases every copy.

For requests governed by Jordan’s personal-data rights rules, we verify identity and relevant authority, record and acknowledge the request, and carry it out within 15 Jordanian working days starting on the day after receipt. Verification does not restart that period. Where the applicable rules permit and require more time, we may extend once for an equivalent period, informing you of the extension and reasons before the original period ends. A different mandatory legislative deadline takes priority.

Personal-account deletion is different from workspace closure or subscription cancellation. We verify identity and any required business authority before disclosing or erasing records; verification is proportionate and we do not request passwords. An account request does not authorize erasing another business’s records. Before closing the request we explain the result, any limitation or refusal and its basis, and retained information, purpose and applicable period.

Your rights and complaints

Depending on applicable law, you may request information and access, correction, completion, a copy or transfer, erasure or concealment, restriction or objection, and withdrawal of consent. Use contact@mutjir.com or the public privacy-request/account-deletion page, including if you cannot sign in. Do not submit passwords, payment-card details or identity documents in the public form. We arrange a proportionate verification method separately where necessary.

Privacy complaints can be sent to contact@mutjir.com or submitted through the privacy-request page with the complaint option. We record the complaint, provide a reference, and respond within 10 calendar days starting on the day after submission under Jordan’s applicable complaints rules. There is no charge for exercising these rights or making a privacy complaint. If you remain dissatisfied, you may complain to the Personal Data Protection Unit at Jordan’s Ministry of Digital Economy and Entrepreneurship through its official channels; this process does not restrict your other legal rights.

When you withdraw consent, we stop the processing that depends on that consent immediately; the general rights-response period is not a grace period to continue it. We explain any information separately retained on a lawful basis. Optional newsletter signup requires a separate affirmative choice with the stated marketing purpose and privacy link, followed by confirmation through a link sent to the email address. The confirmation link expires after 24 hours. Marketing messages provide an unsubscribe link that works without signing in. Unsubscribing stops newsletter marketing and does not cancel your business service. Rejoining after unsubscribe requires a new choice and confirmation.

Security and incidents

We apply technical and organizational measures appropriate to the processing risks and restrict access according to duties. No security system can guarantee that an incident never occurs. For a personal-data security breach capable of causing serious harm to a person under Jordanian law, our controller response includes notifying affected people within 24 hours of discovering the breach and the Personal Data Protection Unit within 72 hours, with the information and protective steps required by law. Other applicable notification obligations are assessed separately; not every routine service error is such a breach.

Children and changes

Mutjir is a business service and is not directed to children. Do not submit unnecessary children’s information. Contact us if you believe a child’s personal data has been provided without the required authority or safeguards. We update this notice when processing changes, identify its version and communicate material changes. A new acknowledgment does not replace consent where separate consent is required.