Privacy
Privacy
This notice explains how Jazerah Al Ibdaa handles information in its public site, AI demonstration, and hosted business workspace. Some integrations are optional and only process data when a business enables them.
Public site and demonstration
You can browse and use the public demonstration without creating an account. Demo conversations, contact requests, phone numbers supplied for follow-up, and the short-lived session and returning-visitor references are handled as described here. Do not submit secrets, patient records, or confidential documents to the public assistant.
Workspace accounts
A hosted workspace may contain account details such as name, business details, email address, password hash, multi-factor authentication records, invitations, and security events. Passwords are not stored in readable form. We use these details to provide sign-in, workspace security, support, and requested account operations.
Business records
When a business uses the workspace, it may store client profiles and contact details, conversations and messages, documents and revisions, approved knowledge, assistant rules and profiles, bookings, tickets, notifications, and action or audit records. The business chooses what to enter and remains responsible for its instructions, permissions, notices to its customers, and lawful use of those records.
AI processing
Relevant uploaded documents and chat or business context may be sent to DeepSeek to extract information, draft replies, assess instructions, or select permitted actions. DeepSeek processes data outside Saudi Arabia. Masking reduces exposure but cannot guarantee that all identifying information is removed. Only upload information you are authorised to process. AI output may be inaccurate; businesses control available capabilities and whether actions need human approval.
WhatsApp and other integrations
A business may connect messaging or other integrations. If WhatsApp is enabled, the relevant business account identifiers, access tokens, phone numbers, message content, and attachments may be processed by the configured channel providers to deliver the requested service; they are not used for advertising by us. The integration is optional, and disconnecting it does not by itself delete historical records. Provider availability and configuration can change, so the workspace and this notice should be checked before activation.
Hosting, email, and infrastructure
The platform and its database run on Oracle Cloud Infrastructure in Jeddah, Saudi Arabia. Oracle Email Delivery sends account messages such as verification and password-reset links. Business mailboxes use Google Workspace. Hosting in Saudi Arabia does not prevent cross-border processing by AI, email recipients, or optional messaging providers. See the service-provider page for more information.
Cookies and analytics
We use session and security cookies for sign-in and to keep demo conversations working across page reloads. A returning-visitor reference can link public demo visits for up to 180 days. It contains no message text, but the associated record may identify you when you provide contact details. Demo visits using the same phone number may be joined across devices; clearing browser storage does not delete the server record. The dashboard does not load marketing analytics. When Google Analytics is configured on public pages, storage is denied by default for Saudi Arabia, the other Gulf states, and the specified European consent-required regions.
Your choices and rights
You may request access to a readable copy of your personal data, correction or completion, or deletion, and withdraw consent where consent is the basis for processing. We may need to verify your identity and consider other people's rights and applicable legal retention requirements. For records held by a business using Jazerah, contact that business first; we assist with platform-related requests. Contact Jazerah using the details below. If a request is not resolved, you may use the complaint channels of the Saudi Data and Artificial Intelligence Authority (SDAIA).
Retention and deletion
Retention depends on the record's purpose, the business's configuration, account status, applicable legal obligations, security and audit needs, and disputes. We assess deletion requests across relevant systems, including backup retention. Disconnecting an integration does not by itself delete stored messages or business records. Contact us to request deletion of those records or to ask which retention period applies.
Why we process information
We use information to provide the requested service and account operations, fulfil applicable contractual and legal obligations, protect the platform, and respond to enquiries. Where processing relies on consent, you can withdraw it. A business using the workspace determines the purposes and instructions for its customer records and must have an appropriate lawful basis; Jazerah determines the processing needed for its own website and platform accounts.
Last updated
7 September 2026.
Service providers and data processing
Contacting us about your data
Jazerah Al Ibdaa, Jeddah, Saudi Arabia. To ask what we hold about you, request a readable copy, correction, deletion, or withdrawal of consent where applicable, use either channel below. We will review the request under the applicable law and operational limits.
- Phone and WhatsApp+966561626616
- Emailprivacy@jazeraalibdaa.com