Privacy policy

Who we are

Jasir (جسر) is based in the Kingdom of Saudi Arabia ("Jasir", "we", "us"). We are the controller of the personal data described in this policy. You can reach us at hello@jasir.app.

This policy explains what we collect when you use jasir.app, the Jasir connector for Claude, and the services behind them, why we collect it, who we share it with, and the rights you have under the Saudi Personal Data Protection Law (PDPL) and other applicable laws.

What we collect

Account data. Your name, email address, password hash or Google sign-in identifier, language preference, the devices you have trusted, and the workspace and brands you create.

Advertising platform data. When you connect a Google Ads, Meta, TikTok or Snapchat account through the platform's own sign-in (OAuth), we receive an access token and read the campaigns, ad sets, ads, budgets, statuses and daily performance metrics of the ad accounts you choose to link. We store these so you can see every platform in one place and so Claude can answer questions about them. We never ask for, see or store your platform passwords.

Changes you request. Every launch, pause, budget change or edit made through Jasir, whether from Claude or from the dashboard, is written to a change log with who asked for it, when, and what changed. Spend-guard settings and confirmations are stored with it.

Creative files. Images and videos you upload for a campaign are stored in a private bucket and delivered to the advertising platform you asked us to send them to.

Billing data. Your plan, billing country, invoices and payment status. Card details go directly to our payment provider, Moyasar (Saudi Arabia); we never receive the full card number.

Technical data. Server logs, IP address, browser type and the pages you visit, used for security and to keep the service running. Our website, sign-in page and app use advertising cookies and pixels from Google, Meta, TikTok, Snapchat and X only to measure our own advertising, and only after you accept them in the cookie banner; you can change your choice at any time from "Cookie settings" at the bottom of the site. If you accept, when you create an account or first pay for a plan we also tell Meta, TikTok and Snapchat from our servers, so they can count the result of our ads: a one-way hashed copy of your email and phone number, your IP address, browser type, the platform's ad-click identifier, and for a payment the plan's price. We keep the IP address, browser and click identifier for this purpose for at most 30 days. Each platform uses this data under its own terms.

How we use it

• To provide the service: show your campaigns, run the changes you ask for, send notices about launches and sync problems.
• To let Claude act for you: when you ask Claude something about your ads, your Claude client calls the Jasir connector, and we return only the data needed to answer that request.
• To answer you inside Jasir: when you use Jasir's chat or Quick Wins (campaign analyses), we send the data needed for that answer (what you typed, and your campaigns' names, settings, budgets and performance figures) to Anthropic's Claude API, which writes the answer. We never send passwords or advertising-platform tokens.
• To learn from your own history: Jasir keeps the outcome of your past launches to produce insights for your workspace. Insights are never shared with other customers unless you opt in to anonymous niche benchmarks, and then only once a benchmark covers enough brands that no single one can be identified.
• To bill you, prevent fraud and abuse, comply with the law and the policies of the advertising platforms, and respond to your requests.

Google user data

This section covers the data Jasir receives from Google through the Google Ads API when you connect a Google Ads account.

What we access. Google Ads account information (account name, ID, currency and time zone); campaigns, ad groups, ads, budgets and their settings; and performance metrics. We access only the ad accounts you choose to connect to a brand.

Why we use it. To show your reports, compare Google Ads with your other advertising platforms, and make the changes you ask for, from the Jasir dashboard or from your own AI assistant session. Jasir changes your Google Ads account only at your request, and larger changes wait for your explicit confirmation before anything is sent to Google.

AI assistants. If you connect an AI assistant such as Claude or ChatGPT to Jasir, we send Google Ads data to it only inside your own session, to answer a request you made there. We never give the assistant your Google tokens.

Jasir's chat and Quick Wins. Jasir's own chat and campaign analyses use Anthropic's Claude API as a service provider. When you use them, we send Anthropic only the Google Ads data needed for that answer, and only to produce it. Under its commercial terms Anthropic does not use this data to train its models. We never send your Google tokens.

Storage and security. Google OAuth tokens are encrypted at rest. Google Ads data is hosted in the European Union (Frankfurt, Germany). Access is limited to the Jasir service; our staff do not read it except with your permission, for security, or as required by law.

Sharing. We do not sell Google user data and do not use it for advertising. We do not transfer it to third parties except as needed to provide the features above (including the hosting providers listed under "Who we share it with") or as required by law. We do not use Google user data to develop, improve or train generalized AI or machine-learning models.

Disconnecting and deletion. You can disconnect Google Ads at any time from the Connected accounts page in Jasir. Disconnecting deletes the Google tokens we stored and revokes our access at Google (unless another of your brands still uses the same Google sign-in). You can also remove Jasir's access at any time from your Google Account, under Third-party apps & services. To delete all the data we hold for a brand immediately, delete the brand from its Settings page, or delete your whole workspace from Settings; both take effect at once. Otherwise, data is deleted as described under "How long we keep it". To ask us to delete your data, write to hello@jasir.app.

Jasir's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Who we share it with

We use service providers that process data on our behalf under contract: Supabase (database, authentication and file storage, Frankfurt, Germany), Vercel (hosting, Frankfurt), Inngest (background jobs), Resend (transactional email), Moyasar (payments), Anthropic (the AI model behind Jasir's chat and Quick Wins, United States), Cloudflare Turnstile (bot protection) and Vercel Web Analytics (aggregate site statistics). We send data to the advertising platforms (Google, Meta, TikTok, Snapchat) only to carry out what you asked for and, if you accepted advertising cookies, the sign-up and payment events described above (Meta, TikTok, Snapchat, X, Google). When you use Claude or ChatGPT through the Jasir connector, your requests and our answers pass through that assistant's service under its provider's own terms.

We do not sell personal data. We disclose it only when the law requires, to protect our rights or users, or as part of a business transfer.

Where it is stored

Our systems run in Frankfurt, Germany. By using Jasir you acknowledge that your data is processed there under the safeguards required by the PDPL for cross-border transfers. When you use Jasir's chat or Quick Wins, the data needed for each answer is also processed by Anthropic in the United States under the same safeguards.

How long we keep it

Your data stays while your workspace is active. If a workspace never subscribes, it and its data are deleted 30 days after sign-up. After a paid subscription ends, data and account memory are kept for 90 days so you can come back, then deleted. You can export everything as a ZIP of CSV files or delete the workspace yourself at any time from Settings; deletion also revokes our access at every platform. Audit and billing records are kept as long as the law requires.

Your rights

You may ask to access, correct, export or delete your personal data, object to or restrict processing, and withdraw consent. Most of this you can do from Settings; for anything else write to hello@jasir.app and we will answer within 30 days. You may also complain to the Saudi Data & AI Authority (SDAIA).

Security

Platform tokens are encrypted at rest, connections use TLS, access to production is limited to named staff with two-factor authentication, and every administrative view of a workspace is logged. If you allow it (when you sign up or later in Settings), named Jasir staff can see your campaigns, their settings and results in our admin console to help you and make sure your launches succeed; you can turn this off in Settings at any time. Without it, staff see only whether your launches succeeded or failed and which Jasir features you use. If you give Jasir support read-only access to your workspace, it expires automatically and every view is recorded.

Changes

We will post changes here and update the date above. For material changes we will notify you by email.