Mazoom Privacy Policy

Mazoom (“Mazoom”, “we”, “us”) runs an invitation and event-management service from Riyadh, Kingdom of Saudi Arabia, for customers in Saudi Arabia, Kuwait and the UAE. This policy covers everything Mazoom offers: the Mazoom mobile apps (including the Mazoom Invitations Scanner app used by door staff), our website and web app, our WhatsApp services (invitations, reminders and our WhatsApp assistant), and the Mazoom connector that lets you use Mazoom from AI assistants such as Claude and ChatGPT.

It applies to hosts, who create a Mazoom account to organise events and invite people, and to guests, who are invited by a host or register for an open event.

2.1 Your account. Your name, email address, mobile number and password, which we store only in hashed form. If you sign in with Apple, Google, Facebook or LinkedIn, we receive your name and email address from that service. We also keep your language, plan, credit balance and purchase history.

2.2 Payments. Payments are processed by our payment providers and, for in-app purchases, by Apple and Google. We receive a confirmation, the amount and the payment method type. We do not store full card numbers.

2.3 Guests’ details that hosts give us. To invite guests, hosts add their name, title (for example “Mr.” or “Dr.”), mobile number, email address, and how many companions each guest may bring. Hosts can type these in, import them from their phone’s contacts or a spreadsheet, or add them through an AI assistant. Hosts must only add people they have the right to contact (see our Terms).

2.4 Invitations, replies and attendance. When we send invitations, we record whether each message was delivered and read; each guest’s reply (accepting, declining, or the number attending); any message a guest sends to the event’s WhatsApp number; and, at the event, when a guest’s QR code was scanned and which door-staff account scanned it.

2.5 Event content. Event names, dates and times, the venue’s name, address and map location, the host’s name, invitation text and designs, logos, images, QR-code designs, and the questions on registration forms for open events.

2.6 Event photo galleries. If a host turns on a photo gallery, the host and guests can upload photos, which the people the host shares the gallery with can see.

2.7 Information collected automatically. Device and app details (device model, operating system, app version), push-notification tokens, unique device identifiers, IP addresses, the features you use and the time spent in the app, and error reports. On our website we use cookies and similar technologies to understand how visitors use it, such as the pages they visit and how they reached us. You can block or delete cookies in your browser settings.

• To provide the service: create events, send invitations, reminders, QR codes and thank-you messages by WhatsApp, SMS or email, record replies, and check guests in. Basis: our contract with the host.
• To reach a guest another way when a message fails, for example by SMS when WhatsApp can’t deliver it. Basis: our contract with the host.
• To run our WhatsApp assistant, which uses AI models to answer messages sent to it. Basis: our contract with you.
• To process payments and keep financial records. Basis: our contract with you, and our legal obligation to keep invoices and tax records.
• To provide support, keep the service secure, prevent abuse (for example by limiting repeated sign-in codes) and fix problems. Basis: our legitimate interest in a safe, working service.
• To improve Mazoom, using aggregated or de-identified data where we can. Basis: our legitimate interest.
• To send you service messages about your account, events and payments. Basis: our contract with you. We don’t send marketing messages. If that changes, we’ll ask for your consent first.

Guests’ data. When a host invites guests, we process the guests’ details on the host’s behalf and follow the host’s instructions. The host decides who to invite and is responsible for having the right to contact them. Invitations may show Mazoom branding and a link to Mazoom offers that guests can choose to open. We don’t send marketing messages to guests.

We do not sell personal data.

We share personal data only as described here.

• With the people involved in an event. Guests see the event’s details and the host’s name. Hosts see their guests’ replies and messages. Door staff a host authorises see what they need to check guests in.
• With service providers that process data for us under contract and only to provide their service:
  • Messaging: the WhatsApp Business Platform (Meta), through our providers 360dialog and 2Chat; SMS through Dreams; email through our email provider.
  • Hosting and storage: DigitalOcean, and Huawei Cloud for business clients who ask for hosting in Saudi Arabia.
  • Payments and subscriptions: Stripe, Tap, PayTabs, Apple, Google and RevenueCat.
  • Digital wallet passes: Passkit, for Apple Wallet and Google Wallet.
  • Push notifications: OneSignal and Firebase Cloud Messaging (Google).
  • Maps and locations: Google Maps.
  • AI processing for our WhatsApp assistant: AI model providers.
  • Customer relationships and invoicing: HubSpot and Daftra.
  • Error monitoring: Bugsnag.
  • Usage analytics: analytics providers that help us understand how our app and website are used.
• With an AI assistant you connect (see section 5).
• When the law requires it, or to protect the rights, property or safety of Mazoom, our users or others.
• In a merger, acquisition or sale of assets. We will tell you before your data falls under a different privacy policy.

You can connect your Mazoom account to an AI assistant, such as Claude or ChatGPT, through the Mazoom connector at mcp.mazoom.sa. The assistant then works with your Mazoom data on your instructions.

• Connecting is your choice. You sign in on Mazoom’s own sign-in page. The assistant never sees your Mazoom password.
• What the assistant can see: what it needs to do what you ask, from your account: your events and the events you’ve been invited to, guest lists (names, mobile numbers, emails, companions and replies), guests’ messages, check-in status, event photos, QR-code designs, reports and your credit balance.
• What it never receives: your password, your event’s door-scanner password, or the private links and keys in your guests’ invitations.
• What it can do: create and edit events, guests, contacts, designs, registration forms and your profile; upload event photos and change gallery settings; mark messages as read; and send invitations, reminders and thank-you messages to your guests on your instructions, using your credits. The assistant always asks you to confirm before anything is sent.
• What it cannot do: delete anything, check guests in, or answer an invitation on a guest’s behalf. You do those in the Mazoom app. Credits can only be bought in the Mazoom app or on our website.
• Your assistant’s provider (for example Anthropic for Claude, or OpenAI for ChatGPT) receives the data the assistant reads, and handles it under its own privacy policy and your settings with that provider. Mazoom does not control how that provider stores or uses it.
• What Mazoom records: sign-ins to the connector (which account, from which assistant) and which actions ran and whether they failed, to keep the service secure and fix problems. These records don’t include your password, your sign-in tokens or your conversations with the assistant. We don’t receive your conversations, and we don’t use your data to train AI models.
• Disconnecting. You can disconnect Mazoom at any time in your assistant’s connector settings.

Our main servers are hosted by DigitalOcean in its data centre in Bangalore, India. Business clients can ask to have their data hosted on our server in Saudi Arabia, provided by Huawei Cloud.

Some of our service providers process data in other countries. When personal data is transferred outside the Kingdom, we do so as the Personal Data Protection Law and its regulation on transfers outside the Kingdom allow.

• Account data: kept while your account is open. When you tap Delete account in the app, we erase your account and its data straight away, including your events, guest lists and photos. We keep only records the law requires, such as invoices, for as long as the law requires.
• Items you delete: when you delete a guest, invitation or other item, we archive it so you can restore it. Archived items are erased when you delete your account.
• Guests’ details, replies and messages: kept with the host’s event while the host’s account is open. If the host deletes them, they’re archived, and they’re erased when the host deletes their account. A guest can ask us to remove their details at any time (see section 9).
• Event photos: kept until the host deletes them or their account.

We protect data with encryption in transit, hashed passwords, access controls, limits on repeated sign-in attempts, and staff access only where needed. No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.

Under Saudi Arabia’s Personal Data Protection Law, you can ask what personal data we hold about you, get a copy, correct it, ask us to delete it, and withdraw consent where we rely on consent. You can delete your account at any time in the Mazoom app (Profile → Delete). To make any other request, email admin@mazoom.sa. We reply within 30 days. You can also complain to the Saudi Data & AI Authority (SDAIA).

If a host invited you through Mazoom and you want your details removed, or don’t want more messages, contact the host or email us and we will help.

Mazoom accounts are for people aged 18 and over. If we learn that someone under 18 has opened an account, we close it and delete its data.

Hosts sometimes invite children as guests. A host who adds a child’s details confirms they have permission from the child’s parent or guardian. We use those details only to deliver the invitation and manage attendance.

We post changes on this page with a new effective date, and tell you in the app or by email before a significant change takes effect. By using Mazoom, you agree to this Privacy Policy.

Mazoom Telecom and Information Technology Company (شركة معزوم للاتصالات وتقنية المعلومات), Commercial Registration No. 1010493695, Riyadh, Kingdom of Saudi Arabia.

Email: admin@mazoom.sa