Draft — pending review by a UAE-licensed lawyer. Written in plain language to match how the product works; not legal advice.
Sub-processors
Version 0.3 · effective 2026-10-03
Who helps us run Turnly
These companies process data on our behalf. Some are only used when the matching feature is switched on. [Lawyer: confirm entities, regions and transfer terms against the signed agreements]
| Company | What for | Where |
|---|---|---|
| Railway | Hosting of the application and the PostgreSQL database | Outside the UAE (region set in the Railway project) |
| Meta Platforms (WhatsApp Business Platform) | Delivering WhatsApp messages. Where a business connects its own number, Meta acts under that business’s own agreement. | Global |
| Email provider (Resend) | Sending account, review and summary emails to business owners | Global |
| AI model provider (Azure OpenAI or Anthropic, when enabled) | Answering customer questions from the business’s own information, and checking business-entered text | Depends on the provider and region configured |
| Object storage (Cloudflare R2 or Amazon S3, when configured) | Storing uploaded trade licences, encrypted before upload, and encrypted database backups | Region set in the bucket |
| Stripe (when billing is enabled) | Taking subscription payments from businesses. No customer queue data is shared. | Global |
| Cloudflare (when placed in front of the site) | DNS, web application firewall and bot protection | Global |
| Sentry (when configured) | Error reports from the application | Depends on the region configured |
Changes
We will update this page before a new sub-processor starts handling data.