Waffy protects your personal and financial data by limiting the collection and sharing of your information to what is necessary to provide the service.
Bank card information
- Waffy does not store your card number, expiration date, or CVV.
- Your payment is processed through a third-party payment gateway licensed by the Saudi Central Bank.
- Waffy only processes the financial details needed for the transaction and does not have access to your card details.
Seller bank account information
- Waffy stores only the bank account information needed to transfer your funds after a successful sale.
- This information does not include passwords or other sensitive banking credentials.
- The transaction amount is transferred to Waffy’s bank account through the payment gateway and then transferred to your account after service fees are deducted.
Sharing your data
Waffy only shares your data with a limited number of service providers that are necessary to provide the service, such as:
- Identity verification providers
- Banks
- Payment processors
Waffy may also share your data with government or security authorities when required by applicable laws and regulations.
Your data is not used for any other purpose without your consent.
Your data rights
- You can request access to the data Waffy holds about you.
- You can request that inaccurate or outdated information be corrected or updated.
- You can request deletion of your data, subject to cases where Waffy is legally required to retain certain information under Saudi regulations.
Protecting your data from unauthorized access
- Waffy uses appropriate security measures to protect your data while you use the platform.
- Your personal data is stored in Waffy’s secure databases, while sensitive payment information is not stored by Waffy.
For more information, please see Waffy’s Privacy Policy.

