Privacy Policy
Last updated: September 13, 2026
yelga is operated by Smart Recipe for Information Technology, business identifier 7004397498. This notice explains what we collect and how we use it.
What we collect
Your request text and its parsed details (category, city, quantity) and any photo you optionally attach; contact details when you provide them (your email when you create an account, and your phone number to send a one-time verification code); your preferences (language, theme); and cookieless usage analytics via PostHog with no advertising trackers.
Why we use it
We use the data to provide the supplier search and connection service; to create and manage your account and verify your sign-in; to improve the product and measure usage; to protect against abuse and bots; and to comply with legal obligations.
Request processing and optional choices
We process your request and attachments to find relevant options. Sending a request does not give permission for optional analytics or marketing messages; those choices are separate where offered. You can request withdrawal of consent through the data-request form.
Sharing
We may share the details of your request needed to respond with shortlisted suppliers and use the services below to operate the platform.
Who processes your data
Shortlisted suppliers receive the details of your request needed to respond. The platform uses Supabase (database and authentication) and Vercel and Railway (hosting and runtime). When remotely hosted Google Fonts are used, the browser sends font requests to Google. Depending on enabled features, PostHog may process usage data and Cloudflare Turnstile may process anti-bot signals. Information derived from your request may be sent to AI and search providers for analysis and matching: Anthropic, Voyage, Brave, SerpApi and Apify. When the Parallel integration is enabled for your hunt, it may receive request-derived queries and research objectives to search public sources and extract information. When messaging channels are enabled, WhatsApp messages go through Meta and support emails through Resend. Customer requests are sent to suppliers over WhatsApp only after their consent to receive them is recorded; suppliers can stop them by sending «توقف» (stop). We do not sell your data or share it for advertising.
Retention
We keep your data while we process your request. Once a request is settled we anonymize it within 180 days, unless the law requires us to retain it longer.
Your rights
You can request access to your data, a copy, correction or deletion, and withdraw consent to processing that relies on it. Open the data-request form using the link below and choose “Withdraw my consent” to request withdrawal; identify the processing concerned in the notes. To request correction, contact privacy@yalga.com. Recording a request sends it for review; it does not mean deletion or stopping processing has happened automatically.
International transfer
Data is processed through the cloud services described in this policy and may be stored or processed outside Saudi Arabia. This includes PostHog analytics in the United States when enabled, and processing by AI and search providers. You can ask about the processing of your data through the data-request form linked below.
Contact
For any privacy question: privacy@yalga.com