RAWAJ

Privacy Policy

Last updated:

RAWAJ (“we”) connects Claude, Anthropic’s AI assistant, to advertising accounts so you can ask about your campaigns in your own words. This policy explains what personal data we handle, why, and what you can do about it. It applies to rawaj.io and to the RAWAJ service.

Who is responsible

The data controller is [[COMPANY NAME]], [[ADDRESS]]. Contact: contact@rawaj.io.

What RAWAJ is today

RAWAJ is in an early, invitation-only stage. Snapchat is the only connected platform, and it is read-only: RAWAJ can read your campaigns and reports when you ask, but it cannot change anything yet. Meta, Google Ads and TikTok are not connected. The demo on our home page uses sample data, not anyone’s real account.

What we collect and why

Waitlist. When you join the waitlist we store your name, email address, business type, the ad platforms you use, your monthly ad budget range, the language of the page, and the date. We use them only to invite you when RAWAJ opens and to tell you about the service you signed up for. We do not store your IP address with your entry.

Connected ad accounts (invited users). When you connect an ad account, the platform gives RAWAJ access tokens on your behalf. We store them encrypted at rest with AES-256-GCM; they are never shown in clear, including in our administration tools. We also store your account email and workspace name.

Ad data. RAWAJ reads campaign data from the platform only when you ask (for example “how much did I spend this week?”) and returns it to you in Claude. We do not keep a copy of your reports.

Audit log. Every change RAWAJ makes, or is asked to make, to an ad account is recorded: who asked, when, what, whether you confirmed it, and the result. Previews and blocked attempts are recorded too. The log protects you and lets you check what happened.

Technical logs. Our web server records the IP address, date, requested page, status and browser type of each request, to keep the service secure and working. For sign-in callbacks we log the path only, never the codes in the address. These logs are deleted after 14 days. [[LEGAL REVIEW: confirm the retention period of server logs]]

What we never do. We do not sell your data, we do not use it for advertising, and we do not share it except with the processors listed below, to run the service.

Cookies

The site sets one cookie, lang, only when you choose a language. It remembers your choice for one year, is strictly necessary for that preference, and is not used for tracking. We use no advertising or tracking cookies.

Processors

  • Cloudflare (DNS; Turnstile, which checks that forms are sent by a person and not a bot; Web Analytics, which measures visits without cookies and without tracking individuals; email routing for contact@rawaj.io). Turnstile processes technical signals such as your IP address and browser characteristics for that check only.
  • Contabo (hosting of our server). [[LEGAL REVIEW: server location and the transfer safeguards to name]]
  • Resend (sending service emails), once we start sending email. No email is sent today.
  • The ad platforms you connect (today Snapchat, by Snap Inc.), under your own agreement with them.
  • Anthropic: when you use RAWAJ inside Claude, what RAWAJ returns is shown to you in Claude and processed by Anthropic under your agreement with Anthropic.

How long we keep data

  • Waitlist entries: until RAWAJ launches, or until you ask us to delete them, whichever comes first. [[LEGAL REVIEW: retention of waitlist entries]]
  • Access tokens: until you disconnect the platform or close your account.
  • Audit log: for as long as your account exists, then deleted, unless the law requires us to keep it. [[LEGAL REVIEW: audit log retention]]
  • Server logs: 14 days.

Your rights

Depending on where you live (including under Moroccan law 09-08 and, for visitors in the European Union, the GDPR), you can ask to access, correct or delete your data, object to its use, withdraw your consent, and receive a copy of it. Write to contact@rawaj.io from the address concerned. We answer within 30 days. You can also complain to your data protection authority: in Morocco the CNDP, in France the CNIL.

Disconnect a platform, or delete your data

You can revoke RAWAJ’s access at any time from your ad platform’s settings for connected apps, or ask us to disconnect it. To delete your waitlist entry or your account, see Data deletion.

Age

RAWAJ is for businesses and is not intended for anyone under 18.

Changes

If we change this policy we will update the date at the top, and tell registered users by email before a significant change applies.

[[LEGAL REVIEW: legal bases for each purpose, international transfers, CNDP declaration reference]]