Effective Date: 14 September 2025
At Mawqoot, we prioritise the security, privacy, and trust of our customers. To deliver a reliable and high-quality service, we rely on carefully selected third-party service providers (“sub-processors”). These sub-processors provide essential infrastructure, analytics, payment, and communication services that enable Mawqoot to operate efficiently and securely.
This document lists our current sub-processors, their registered business addresses, the purposes for which they process data, and the types of personal data they may handle. We publish this information to ensure transparency in how customer data flows within our platform and to help our customers understand the role of each service provider in supporting Mawqoot..
The following table outlines our current sub-processors, their registered business addresses, and their provided services within the Mawqoot platform.
Sub‑processor | Address | Service provided | Country |
Moyasar | Moyasar Financial Company | Secure online payment processing | KSA |
Google Cloud Platform (GCP) | Google LLC | Cloud infrastructure hosting for application servers, databases, and media storage | USA |
Firebase Cloud Messaging | Google Ireland Limited | Mobile push notification delivery | Ireland |
Google Maps Platform | Google Ireland Limited | Geocoding, map rendering, and location services | Ireland |
MillionVerifier | GBD Software as a Service Ltd. | Email address validity checks | Hungary |
Google Analytics | Google Ireland Limited | Website and usage analytics | Ireland |
Gleap | Gleap GmbH | In‑app bug reporting and support ticketing | Austria |
Sub-processors support specific business functions and may process limited categories of personal data in order to deliver their services. Mawqoot ensures that all sub-processors adhere to industry standards for data protection and security, and we maintain strict contractual and technical safeguards.
The table below provides a detailed overview of the categories of personal data processed, the purposes of processing, and references to each sub-processor’s privacy and security information.
Sub‑processor | Categories of Personal Data Processed | Purpose of Processing | Privacy & Security |
Moyasar | Payment details (card number, expiry date, CVV), transaction metadata (amount, currency, timestamp) | Processes online payments securely in compliance with PCI‑DSS standards. Facilitates refunds, payment confirmations, and fraud prevention. | |
Firebase Cloud Messaging | App tokens (unique identifiers per app on a device), notification payloads (message content, metadata) | Sends real‑time push notifications to user devices for alerts, reminders, and updates. | |
Google Maps Platform | Location queries (coordinates, addresses), map display requests (map tiles, route data) | Enables location‑based features such as map rendering and location search within Mawqoot. May log anonymized request data for performance monitoring. | |
MillionVerifier | Email addresses provided during account creation or updates | Validates the format and deliverability of email addresses to reduce bounce rates and prevent fraudulent sign‑ups. Retains only minimal verification logs, and. | |
Google Analytics | Pseudonymised usage data (page views, device type, browser version, session duration, referral source) | Tracks aggregated user behaviour to analyse site and app performance, identify usability issues, and improve user experience. Does not store identifiable personal data. | |
Gleap | User‑submitted messages, chat transcripts, chatbot interactions, knowledge base search queries, screenshots, device information (OS, browser, screen size) | Provides customer support via live chat, chatbot conversations, and self‑service knowledge base. Collects feedback and bug reports to improve service quality and resolve issues efficiently. |
