Mujamma.
About Features Pricing Log in

Privacy Policy

Last updated 8 November 2026

This policy explains what personal data Mujamma handles, why, and the choices people have. Mujamma is provided by Massive W.L.L., commercial registration 196053-1, registered at Shop 1390, Building 2102, Road 2825, Block 428, Al Seef, Kingdom of Bahrain ("Massive", "we"). We follow Bahrain's Personal Data Protection Law (Law No. 30 of 2018).

1. Who is responsible

A property management company that subscribes to Mujamma decides whose data goes into it and why: for its residents and staff, that company is the data manager (controller), and we process the data on its behalf. For our own customers' contacts, billing and the visitors of this website, we are responsible ourselves.

2. What we handle, and why

  • Residents and staff: name, phone and WhatsApp number, the villa or unit, lease details, and, where the company records them, national ID or passport numbers and utility account numbers. Used to receive and route requests, book visits and facilities, and contact people about them.
  • Messages: WhatsApp messages, photos and files sent to the company's number, and voice notes with their written transcript. Used to answer them and keep the record of each request.
  • Work records: work orders, visits, bookings, ratings and the history of each villa and piece of equipment.
  • Company users: name, e-mail, role and sign-in details of the people who use the dashboard.
  • Billing: the customer's billing contact, invoices and payment status. Card details go to Amazon Payment Services, not to us.
  • Website: the e-mail address left on the access request form. This website does not use advertising or tracking cookies.

3. How we protect it

Each company's data is kept apart from every other company's. Names, phone numbers, ID numbers and the other personal fields are encrypted with a key of the company's own, held in AWS Key Management Service. Traffic is encrypted in transit. Logs never hold message contents or personal details. Staff access is limited to what running the service needs.

4. Who else processes it

  • Amazon Web Services hosts Mujamma in the United States (N. Virginia), with a copy in a second region (Oregon) for recovery. AWS also provides the AI model behind the WhatsApp assistant (Amazon Bedrock), voice note transcription (Amazon Transcribe), spoken replies (Amazon Polly), sign-in (Amazon Cognito) and e-mail (Amazon SES).
  • Twilio and Meta carry WhatsApp messages between people and the company's number.
  • Amazon Payment Services, an Amazon company, processes card data and the other payment options for our invoices. Mujamma never sees or keeps card numbers.
  • Google, only when a user chooses to sign in with a Google account.

Each processes the data only to provide its service to us. Hosting outside Bahrain is done under safeguards the law allows; a company can ask us about hosting in the European Union.

5. How long we keep it

We keep a company's data while it uses Mujamma. When its contract ends, we delete the data it no longer needs, after any export it asks for. Records the law requires us to keep are kept for the periods Bahraini law sets, under the Personal Data Protection Law (Law No. 30 of 2018):

  • VAT records: 10 to 15 years
  • Commercial company records: 10 years
  • Financial and compliance records, such as invoices and payments: 5 to 10 years
  • Employee records: 2 to 10 years

Spoken replies are deleted after 7 days. Backups hold 7 days of history and expire on their own.

6. Your rights

People can ask to see, correct or delete their personal data, or object to its use. Residents and staff should ask the company that manages their compound, which controls their data; we help it answer. Anyone can also write to us at support@mujamma.io, and complain to Bahrain's Personal Data Protection Authority.

7. Changes and contact

We update this policy when what we do changes, and show the date above. Questions: support@mujamma.io.