Privacy Policy

1. Who We Are

SMW Multitech operates JawaBee — an AI-powered commerce operating system for merchants on Salla and Zid across the Gulf Cooperation Council (GCC). For questions about this policy, contact us at support@jawabee.com.

Two roles we play:

• Data Controller — for information we collect about you (the Merchant)
• Data Processor — for your customers' data that we process on your behalf

2. Information We Collect

From you directly:

• Name, business name, email, phone number
• Business registration and VAT details
• Billing information (processed by Stripe or Moyasar — we never store card numbers)
• Salla and Zid integration credentials (stored encrypted)
• WhatsApp Business API credentials (stored encrypted)

From your store (on your behalf):

• Order data: IDs, statuses, items, amounts, dates
• Product data: listings, descriptions, prices, inventory
• Customer messages: WhatsApp conversations and support tickets
• Store data from Salla and Zid

Automatically collected:

• IP address, browser type, device information
• Pages and features used within the Platform
• Error logs (anonymized)

3. How We Use Your Information

• Providing and operating the JawaBee service
• Processing your 14-day free trial and subscription
• Running AI automation on your behalf
• Generating store insights and reports
• Improving the Platform using anonymized, aggregated data only
• Sending service notifications and (with your consent) marketing updates

We never use your customers' personal data or message content to train AI models.

4. Who We Share Your Data With

We never sell or rent your data. We share only with these sub-processors:

Important about AI processing: Customer messages are sent to AI providers (including DeepSeek) for inference. These providers are contractually prohibited from using your data to train their public AI models.

5. Cookie Policy

A cookie consent banner appears on your first visit. You can update your preferences anytime in Account Settings.

6. Data Security

• Encryption: TLS 1.3 in transit, AES-256 at rest
• Access controls: Role-based access, MFA for all employees
• Infrastructure: Multi-tenant data isolation, 24/7 monitoring
• Breach notification: Within 72 hours where required by law

7. Data Retention

8. Your Rights

Under Saudi Arabia's Personal Data Protection Law (PDPL) and applicable GCC regulations, you have the right to:

1. Access — request a copy of your data
2. Correction — update inaccurate data
3. Deletion — request permanent deletion
4. Portability — export your data in JSON or CSV
5. Restriction — limit how we process your data
6. Object — object to certain processing
7. Withdraw consent — at any time for consent-based processing
8. Complain — to the Saudi Data & AI Authority (SDAIA)

To exercise your rights: Email support@jawabee.com with subject "Privacy Rights Request" — we respond within 30 days.

9. Request Your Data (DSAR)

To access, correct, delete, or export your data, email us at:

Include your full name, registered email, account ID, and the type of request. We will verify your identity and respond within 30 days, free of charge.

10. AI and Automated Decisions

JawaBee uses AI to automate WhatsApp support, generate insights, and detect security issues. All significant AI actions require your approval before execution. We do not make solely automated decisions with legal effects on individuals.

11. International Data Transfers

Some sub-processors operate outside the GCC. We ensure appropriate safeguards are in place for all cross-border data transfers in compliance with PDPL requirements.

12. Children

JawaBee is not directed at anyone under 18. We do not knowingly collect data from minors.

13. Changes to This Policy

We will notify you of material changes at least 14 days in advance via email and a Platform notification.

14. Contact

• Privacy questions: support@jawabee.com (Subject: Privacy)
• Urgent security issues: support@jawabee.com (Subject: SECURITY — URGENT)