Interest Form Data Notice

Controller and contact

MetaServ Company (شركة ميتاسيرف السعودية) is responsible for processing information submitted through the Zimam CAIO™ interest forms.

Privacy Team - MetaServ Saudi Arabia is responsible for handling these requests. Contact privacy@metaserv.me about your data, to exercise your rights, or to withdraw your processing consent.

Information collected and purpose

Depending on your selected form, we collect information you provide directly, including contact details, professional information, details of the organization you represent where applicable, program or collaboration preferences, and the content of your request. Required and optional fields are identified in the forms.

We use this information to review your interest, determine suitable follow-up, respond to your request and manage that follow-up. We also retain consent evidence and a request-handling history, and use limited operational data to protect submission handling against abuse and technical duplication.

Consent and marketing updates

We process your interest request on the basis of the consent you provide when submitting it. Required information is needed to review and respond to your request.

Submitting this form does not subscribe you to marketing updates. It does not constitute admission, a seat reservation or a commitment to pay.

Hosting, providers and geographic processing

Database service: Supabase stores the interest request, the consent evidence and the request-handling history. Evidence: the project's database connection configuration in this application.

Application runtime and network services: Cloudflare receives the submission request and its network headers (including the connection IP address) and passes the form content to the database service. Evidence: this repository's deployment configuration.

Managed application and deployment environment: Lovable manages application releases and operational logs. Evidence: the managed project configuration.

The content of this form is not sent to any email, analytics, CRM or other provider, and submitting it generates no external message. Evidence: the submission path in this application.

Geography: the primary database is hosted in Southeast Asia — Singapore (ap-southeast-1) according to the project settings. Application request execution, network handling and provider operational logs run on a globally distributed network and may occur in other locations we have not verified, so we do not promise that all processing takes place in Singapore or in any single location.

The database service retains backups for 14 days, separately from the 12-month retention period for an interest request. Data deleted from the primary database may remain in earlier backups until their applicable retention cycle expires. Provider operational logs are subject to the providers’ applicable retention and storage arrangements; their retention periods and storage locations have not yet been confirmed for this deployment. We therefore do not promise that deleting a request from the application immediately removes every related backup copy or provider log. MetaServ Company remains responsible for processing your data when using these services.

Retention

We retain interest requests that have not moved into a subsequent process for 12 months from submission, then delete them and their associated data under the approved retention policy. Any extension requires a documented continuing purpose and a specific review date, or an applicable legal requirement.

Changing a request's status, reassigning it or adding an internal note does not restart the retention period; the period runs from the original submission. Consent evidence, notes and the handling history are deleted together with the request itself.

If your request moves into a subsequent process, we explain the relevant processing purpose and retention arrangements. Changing the request's status alone does not permit indefinite retention.

We retain abuse-protection and duplicate-submission records for short operational periods. Records whose retention periods have expired are removed through daily scheduled maintenance.

Your rights and privacy requests

Contact privacy@metaserv.me to request access to or a copy of your data, correction or destruction, or withdrawal of processing consent, as applicable.

Include your request reference if available. We may request limited information to verify your identity before releasing or changing your data. We handle requests under applicable procedures and statutory time limits.

Withdrawing consent may affect our ability to continue handling your request where that handling depends on consent.

Please do not submit sensitive personal data, confidential institutional information, or unnecessary information about other people.