Version 1.0 · Effective 1 November 2026
tijariq Sub-processor List
Cyberstream Solutions and Trading SPC (CR No. 1664225, Muscat, Oman) uses the companies below to run tijariq. Each one processes personal data only to provide its part of the service, under a contract with us. We send each one only the data its part of the service needs.
This list is part of the tijariq Data Processing Addendum and is referred to in the tijariq Privacy Policy.
Last updated: 1 November 2026
Where your data lives
- Stored: the tijariq database and files are in Frankfurt, Germany (European Union).
- Run: the tijariq apps run in Frankfurt (Vercel region fra1).
- Email: sent and received through Ireland (European Union).
- Also processed: in the UAE (iq Pro only), in the United States (some AI features, including the iq assistant through OpenRouter, and support email), and on global networks (Cloudflare, Meta, Google). Some providers below may also process data in the EU or the United States, and the company that hosts the iq assistant's model may be in another country.
Sub-processors in use
| Company | What it does for tijariq | Personal data it handles | Where | Used by |
|---|---|---|---|---|
| Supabase, Inc. | Database, sign-in, file storage, encrypted key vault | All tijariq data | Frankfurt, Germany | All modules |
| Vercel, Inc. | Runs the tijariq apps | All data passing through the apps; request logs (IP address, browser) | Frankfurt, Germany (fra1); global edge network for delivery | All modules |
| Cloudflare, Inc. | DNS, network security and proxy; bot check on Clients enquiry forms (Turnstile); web analytics without cookies; storage of website images (R2); the secure tunnel to the iq assistant's gateway | Request data (IP address, browser); form check data; Builder images; assistant questions and answers in transit | Global network | All modules |
| Resend (Plus Five Five, Inc.) | Sending and receiving email: sign-up, invoices, reminders, Clients emails | Email addresses, names, email content | Ireland (EU) for sending and receiving; Resend may also process data in the United States | Home, Billing, Clients, POS, Business documents |
| Meta Platforms Ireland Limited (WhatsApp, Instagram) | WhatsApp Business Platform for Connect and for receipts and reminders sent through Connect; Instagram publishing in Builder when you connect it | WhatsApp numbers, profile names, messages and media; Instagram posts you publish | Global | Connect, POS receipts, Bookings and Team messages, Builder |
| Google LLC (Gemini, Maps) | Gemini AI: reading supplier-invoice photos (POS), drafting and checking website text and images (Builder), back-up for the POS assistant. Google Maps: maps and location picker | Invoice images and their contents; business text and images; the questions sent to the assistant; map requests (IP address) | United States and other countries where Google has facilities | POS, Builder |
| Google LLC (Google Workspace, Gmail) | Email hosting for support@tijariq.com | What you write to support, and your email address and name | United States and other countries where Google has facilities | Support |
| Groq, Inc. | AI drafting of website text, as a back-up | Business text you enter for your website | United States | Builder |
| OpenRouter, Inc. | Passes the iq assistant's requests to the AI model that answers them, and returns the answers | The questions sent to the iq assistant, the business data it needs to answer them, and its answers | United States; OpenRouter passes each request to the company that hosts the model, which may be in the United States or another country | iq |
| TypeSafe AI, Inc. | Ranks business-name suggestions | The business description and name ideas you enter | United States | Builder |
| Functional Software, Inc. (Sentry) | Error reports from the POS app | Technical error data; may include a user ID, page address and browser details | EU or United States | POS |
| Journey Mobile, Inc. (PowerSync) | Offline sync for the POS till | The POS data synced to the till device | EU or United States | POS |
| Oracle (Oracle Cloud Infrastructure) | Servers for iq Pro managed assistants | The data the iq Pro assistant works on for that business | Dubai, UAE | iq Pro only |
Not sub-processors
- Your own payment provider. In Clients, your customers pay into your own account with a payment provider you choose (for example Stripe). That provider works for you, under your contract with it. Cyberstream never holds your customers' money.
- Card payment for tijariq subscriptions is not live. Today you pay us by bank transfer. We will add the card provider to this list before card payment starts.
Built in, not in use
The code can use these, but they are not switched on in production (checked 28 October 2026). We will add a provider to this list, with notice, before switching it on:
- OpenAI, Anthropic, OpenRouter, xAI and Apify in Builder (OpenRouter is in use for iq only, as listed above);
- voice-note transcription in Connect: no transcription service is connected.
Changes
We give at least 30 days' notice by email before adding or replacing a sub-processor, and we update this page. You can object, or stop using the affected module, as set out in DPA §6.