Privacy policy
Last updated: 2 October 2026
Mizan is a prototype built by the Midad team for the VentureX hackathon. This page explains what happens to a contract's text when you review it. We designed Mizan around the principles of the Personal Data Protection Law; we do not claim compliance with it, which needs a formal assessment.
Who is responsible
The Midad team, a participant in the VentureX hackathon. For privacy questions: contact the Midad team through the hackathon platform.
What we process and why
Only the contract text you upload or paste. The sole purpose: split it into clauses, link each clause to the Sharia committee decisions of Alinma Bank, and show you the result. We do not use the text for anything else, and it never enters evaluation, training or demonstrations.
What we mask before sending
Before the text leaves the server, Mizan masks ID and iqama, IBAN, account, card, mobile, email, passport, deed, birth date and national address numbers. It does not mask names or all of a document's context, so it asks you not to upload real individuals' data and shows you the masked text to review before sending.
Who receives the text
The masked text is sent through an API to Anthropic's Claude model, which runs outside the Kingdom and is subject to its provider's retention policy. The site is hosted by Vercel, with servers outside the Kingdom. The results you choose to save stay in your browser on your device and are not sent to the site's servers. In production, Mizan runs inside the bank's environment on a model the bank chooses.
What is kept, and for how long
The Mizan app does not store the contract file or its full text, and does not write the text to its logs. If you choose to save a result in your dashboard, it keeps: the file name, the contract ID (a fingerprint of the text that cannot be turned back into it), the run ID, each clause's result with its evidence and a masked excerpt of at most 160 characters, the clauses' positions in the text as numbers, not text (so the same contract shows the same result if reviewed again), and any committee decisions you record. They are kept in your browser on your device only, and deleted automatically after 90 days. The access code is kept in your browser only.
Your choices and rights
Using Mizan is optional, and so is saving (choose «Don't save»). Your dashboard shows everything saved, and you can delete any review or folder at any time; clearing the site's data in your browser deletes everything. For any question, contact the Midad team.
What Mizan does not do
It issues no fatwa and no approval. The result supports a review; the Sharia committee decides.