Data residency
Last updated: 21 October 2026
The short version
Subscriptions, schedules and your customers' details are stored and processed in Saudi Arabia, and so are the backups. What leaves the Kingdom: the emails Maqadi sends to subscribers and to you, which pass through our email provider in the European Union, and what you choose to type into the website chat. Card data is never received or stored at all.
Where each part runs
| What | Where | Personal data |
|---|---|---|
| The store app: subscriptions, schedules, settings, the customer portal and the merchant dashboard | Saudi Arabia, Oracle Cloud, Jeddah region (me-jeddah-1) | Subscribers' names, phone numbers, email addresses, delivery address references, subscribed products, status. No card data. |
| Access keys the platform gives the app | Saudi Arabia, the same server in Jeddah, encrypted | None |
| Backups of the database | Saudi Arabia, Oracle Object Storage, Jeddah region; encrypted before upload, kept for 35 days | As above |
| Payments for orders | The store's own platform checkout and payment provider; never through Maqadi | Maqadi receives only the result (succeeded or failed) and a subscription reference |
| Beta sign-ups from this website | Saudi Arabia, the same server in Jeddah | Name, email, phone, store details (details) |
| Emails: reminders, payment links and portal links to subscribers; our correspondence | Rackhost, Hungary (European Union) | Email address and message text |
| WhatsApp messages | Not used yet. The provider will be named here before the feature is enabled. | None today |
| Domain name service (DNS) | Rackhost, Hungary | None |
| TLS certificates | Let's Encrypt | None |
| Website chat (only what you type into it; not part of the store app) | Anthropic, United States, for questions about Maqadi; other questions are answered by our server in Jeddah | The question, if it contains any. Email addresses, phone numbers and keys are removed first; nothing is stored |
| Availability monitoring | UptimeRobot: external checks of the public website and health address, from outside the Kingdom (status page) | None |
| Administration | Yimello LLC, United Arab Emirates, over encrypted SSH to the server in Jeddah | Access only when needed to operate the service |
What this means for your store
- There is no content delivery network, proxy or load balancer in front of the server. Requests go straight to Jeddah over HTTPS.
- Your customers' subscription data is not sent to AI services, analytics or advertising tools.
- Backups are encrypted on the server with a key whose private half is not kept on the server.
- When you remove the app, your data is deleted from the live system at once and from backups within 35 days.
Changes
If a part of the service moves to another location or provider, or a new provider is added (for example for WhatsApp), this page is updated first, and stores using the app are told at least 30 days in advance, as set out in the data processing agreement.