Privacy Policyسياسة الخصوصية

Oweili (oweili.com) is an online gallery for real, human-made art, founded in Saudi Arabia and open to the world.

Oweili is the party responsible for your personal data under the Saudi Personal Data Protection Law (PDPL) and its regulations.

You can reach us about anything in this policy at contact@oweili.com.

We stand between artists and buyers. When a buyer is interested in an artwork, the buyer’s details come to the Oweili team, not to the artist.

The artist only learns that someone is interested and how many people are interested. We never give the artist a buyer’s name, phone or email.

In the same way, we do not show an artist’s phone or email to buyers. Buyers see the artist’s public profile only.

• Account details: your name, email address, phone number and password. Passwords are stored only as a secure one-way code, never as text.
• Artist profile: profile photo, artist name, bio in English and Arabic, city, country, art styles and social links. Artists may also send portfolio photos and an optional video when they join.
• Artwork photos: the photos of each artwork at 25%, 50% and 100%, with the date each one was taken. We remove hidden data such as GPS location from every photo before saving it.
• "I’m Interested" requests: the name, phone and email you type in, and the artwork you asked about.
• Buyer profile: country, city, preferred language, and the artworks you save as favorites.
• Activity: what you do in your account and when (for example signing in or saving a favorite). With it we keep a one-way code made from your internet address that changes every month. We never keep the address itself.
• Photo consent records: for local artists featured in Artist Spotlights, a record of their approval (who, when and how).
• Browser storage: a small sign-in cookie, and your language and light or dark mode choice saved in your own browser.

• To run your account and let you sign in safely.
• To show artworks and the creation journey in the Gallery.
• To review every artwork and keep Oweili for human-made art only.
• To contact you about an artwork you asked about, and to tell an artist that someone is interested.
• To send account emails, such as confirming your email or resetting your password.
• To keep the site safe: limits on sign-ups and sign-ins, and the activity log.

We rely on your consent, on what is needed to give you the service you asked for, and on what the law asks of us. You can withdraw your consent at any time.

We do not sell your data. We do not use it for advertising profiles.

• Everyone: what an artist chooses to make public (artist name, profile photo, bio, city, country, art styles, social links and approved artworks).
• The Oweili team: the details needed to review artworks and answer requests. Only the admin sees full personal details.
• Companies that help us run the site, only for that job: our hosting and email provider (Hostinger). They may not use your data for anything else.
• Bashro, Oweili’s own internal control center, through a private read-only connection. It is switched off until we turn it on.
• Authorities, only when Saudi law requires it.

Our hosting provider may keep data on servers outside the Kingdom. When that happens we follow the PDPL rules for sending data abroad.

• Your account and profile: for as long as your account is open. When you ask us to delete it, we delete it within 30 days.
• Artwork photos: while the artwork is on Oweili. When an artwork or account is deleted, its photos are deleted too.
• "I’m Interested" requests: up to 2 years after the last contact, then deleted.
• Activity log: up to 12 months.
• Database backups: up to 90 days, then replaced by newer ones.
• Photo consent records: for as long as the photos are published, and up to 5 years after, so we can show the approval if asked.
• Records the law asks us to keep (for example sales records, once payments open) are kept for the time the law sets.

Under the PDPL you have the right to:

• know what data we hold about you and why;
• get a copy of your data;
• correct data that is wrong or out of date (most of it you can change yourself in your dashboard);
• ask us to delete your data;
• withdraw your consent at any time.

To use any of these rights, write to contact@oweili.com from the email of your account. We answer within 30 days.

If you are not happy with our answer, you can complain to the Saudi Data and Artificial Intelligence Authority (SDAIA).

Send an email to contact@oweili.com from the email of your account with the words "Delete my Oweili account". We confirm it is really you, then delete your account, profile, photos, favorites and requests within 30 days.

Some records stay for a short time only when the law asks for it, or inside backups until they are replaced (up to 90 days).

You can also delete any of your artworks yourself, at any time, from your dashboard.

Every page uses a secure connection (HTTPS). Passwords are stored as one-way codes. Private files, such as consent proofs and backups, are blocked from the public. Only the admin can see full personal details, and every staff action is recorded.

No system is perfect. If a breach ever affects your data, we will tell you and the authorities as the PDPL requires.

Oweili is for people aged 18 and over. Younger artists and buyers may use it only with a parent or guardian, who agrees for them.

When we change this policy we update the date below. If a change is important, we tell you by email or on the site first.