وصل
Start free
Jazerah Al IbdaaSmart AI Systems

Subprocessors and service providers

Subprocessors and service providers

This register describes providers that may receive personal data from the platform. Optional providers receive data only when the relevant feature is configured or enabled; the exact tenant record is authoritative.

DeepSeek — AI generation

Current live provider for relevant assistant prompts and responses. Data may include redacted or minimised chat, documents, and approved business context. Provider outside Saudi Arabia, currently China. Masking reduces exposure but is not a guarantee that identifiers never leave.

Oracle Cloud Infrastructure — hosting

Current deployment host in Jeddah, Saudi Arabia. Hosts the service and its PostgreSQL, Redis, and Qdrant components, and may therefore hold the data the service stores.

OCI SMTP and Google Workspace — email

Oracle Email Delivery processes recipients' addresses and transactional account emails, including single-use verification and reset links, through the configured Jeddah email service. Google Workspace handles messages sent to our business mailboxes and may process them globally. Resend is not the current transactional email provider.

Meta (WhatsApp and Instagram) — optional channels

When a business connects WhatsApp or Instagram, Meta processes account, phone and Instagram account identifiers, profile information, messages and supported attachments needed for messaging. Meta uses infrastructure outside Saudi Arabia and globally. Only the business's authorised integration is used; disconnecting it stops that connection but does not erase stored history.

Telegram — optional channel

When a business connects Telegram, Telegram handles the delivery and receipt of that business's messages, and so processes the chat identifier and the message text. Its infrastructure is in the Netherlands and globally. It receives data only for a business that has connected it.

Moyasar — payments

When a business pays for its subscription, it is sent to a payment page run by Moyasar Financial Company in Riyadh, which is licensed by the Saudi Central Bank. Card details are entered on Moyasar's page and never reach this application. We send Moyasar the amount and our own reference for the business; we keep the payment reference, amount and status. Moyasar states that it stores and processes this data inside Saudi Arabia.

Cloudflare — domain name service and visit counting

Cloudflare is the authoritative DNS provider for the domain and processes DNS query information. The current website points directly to the OCI host rather than using Cloudflare's web proxy. If proxying is enabled later, this register will be updated to describe the additional request data processed. Since 18 October 2026 it also counts visits to the public pages (Cloudflare Web Analytics): the page address, the page the visitor came from, the browser and device type, and the country worked out from the connection, without cookies. It is not loaded on the dashboard. Cloudflare is in the United States.

Providers not currently enabled

Anthropic, OpenAI-compatible endpoints, hosted Qdrant, Resend, and other optional integrations are not treated as active recipients unless the deployment and tenant configuration enable them. The provider, region, and usage record for an enabled AI call are authoritative.

Last updated

12 October 2026.

Contacting us about your data

Jazerah Al Ibdaa, Jeddah, Saudi Arabia. To ask what we hold about you, request a readable copy, correction, deletion, or withdrawal of consent where applicable, use either channel below. We will review the request under the applicable law and operational limits.

Operated by Muhannad Ahmed Ayesh Yahya · Freelance document FL-183995332, Ministry of Human Resources and Social Development