Template content awaiting legal review. Do not treat as binding.
Privacy policy
Last updated: 2026-07-06
RA-FEWS is operated by Raven Analytics (Cairo, Egypt). This policy explains what personal data we process, why we process it, and the rights you have. We comply with the Egyptian Personal Data Protection Law (No. 151/2020) and the applicable UAE and KSA data protection laws, and we follow the principles of the EU GDPR. User data and forecast workloads are hosted with Hetzner in the European Union.
Controller
Raven Analytics — Mohamed Elghorab, Cairo, Egypt, is the controller for all personal data processed through RA-FEWS. For any privacy request, email legal@ra-fews.com.
Data we collect
Account data: email address, password (stored only as an Argon2id hash, never in plain text), optional display name, service tier, language and audience preferences, and the account creation date. Security data: if you enable two-factor authentication, the MFA secret and backup codes; session refresh tokens; password-reset tokens. Contact form: name, email, organisation, role, and your message. Technical data: IP addresses and request metadata in server logs, rate-limiting counters, and administrative audit records.
Purposes and legal bases
We process account and security data to provide and secure the service you signed up for (performance of contract); log and audit data to protect the platform against abuse (legitimate interest); contact-form data to answer your inquiry (consent); and your email address to send transactional messages such as password resets (performance of contract). We do not use your data for advertising and we do not sell it.
What we do not do
No advertising, no cross-site tracking, no profiling, no sale of personal data. Web analytics uses Plausible, which is cookieless and stores only aggregated page-view counts. The forecast and hydrological data processed by the pipeline is environmental data and contains no personal information.
Processors and recipients
Hosting: Hetzner (data centres in the European Union). Content delivery: Cloudflare. Anti-spam on the contact form: hCaptcha, loaded only after you consent. Map tiles: when the map loads, your browser requests tiles directly from CARTO, Esri, or OpenStreetMap servers, which see your IP address. Transactional email is delivered through our SMTP provider. Weather input data comes from DWD open data and contains no personal data.
International transfers
Personal data is stored in the European Union (Hetzner). Some of the third parties above (for example hCaptcha, Esri, and Cloudflare's global network) may process requests in other countries, including the United States. Where they do, we rely on their published data-protection commitments and contractual safeguards.
Retention
Account data is kept until you delete your account and is removed from operational systems within 30 days. Server and audit logs are retained for 90 days. Contact-form messages are kept for up to 12 months after resolution. The consent cookie expires after 12 months.
Your rights
You may request access to, correction of, or deletion of your personal data, object to or restrict processing, request a copy in a portable format, and withdraw consent at any time. Email legal@ra-fews.com; we respond within 30 days. You may also lodge a complaint with the data-protection authority responsible for you, including the Egyptian Personal Data Protection Centre or your national authority.
Security
All traffic is encrypted with TLS. Passwords are hashed with Argon2id. Sessions use httpOnly, Secure, SameSite=Strict cookies. Optional two-factor authentication (TOTP with backup codes) is available on every account. Administrative actions are recorded in an audit log.
Children
RA-FEWS is a professional service directed at organisations and adult professionals. It is not directed at children, and we do not knowingly collect data from anyone under 18.
Changes to this policy
We will update this page when our processing changes and adjust the 'last updated' date above. Material changes affecting signed-in users are announced by email or an in-app notice.
Privacy contact: legal@ra-fews.com