Terms of Service

Muyasir Portal (the "Service") is a web-based operations platform for Hajj and Umrah agencies, available at muyasir.com. It is provided by SAAD ICT, a company based in Mogadishu, Somalia ("SAAD ICT", "we", "us" or "our").

These terms apply to the organisation that subscribes to the Service (the "Agency", "you" or "your") and to every person the Agency allows to use its account (an "Authorised User"). By creating an account, signing in, or using the Service, the Agency agrees to these terms. A person who accepts them on behalf of an Agency confirms that they are authorised to bind it.

If the Agency has signed a separate written agreement or order with us, that agreement takes priority over these terms where the two conflict. Our Privacy Policy explains how personal data is handled and forms part of these terms.

These terms are written in English, which is the binding version. Somali and Arabic translations are provided for convenience; if they differ, the English text applies.

• "Service": Muyasir Portal, including the website at muyasir.com, the signed-in dashboard, the public verification pages, generated documents, emails and any related support.
• "Agency": the company or organisation that subscribes to the Service and has its own workspace.
• "Authorised User": an employee or other person the Agency creates an account for, with the role and permissions the Agency assigns.
• "Customer Data": all information the Agency and its Authorised Users enter, upload or generate in the Service, including personal data about pilgrims, travellers, employees, suppliers and other people.
• "Workspace": the Agency's separate area of the Service, which holds its Customer Data and settings.
• "Subscription": the plan, modules, limits and billing period agreed between the Agency and SAAD ICT.

The Service is intended for businesses that organise Hajj, Umrah and related travel. The Agency confirms that it holds any licences or approvals that its activities require, and that Authorised Users are at least 18 years old and act for the Agency.

There is no public sign-up. Agency workspaces are created by SAAD ICT, and the Agency's administrators then invite their own Authorised Users. Each account belongs to one person and must not be shared.

• Every sign-in requires a password and a one-time code sent by email. The Agency and its Authorised Users must keep passwords and codes confidential.
• The Agency is responsible for everything done through its accounts, for giving each person only the access they need, and for removing access promptly when someone leaves or no longer needs it.
• The Agency must tell us without delay at info@muyasir.com if it suspects that an account has been compromised.
• We may require additional verification, or temporarily block an account, if we detect behaviour that suggests unauthorised access.

The Agency pays the fees for the Subscription agreed with us, as shown on the plans page or in its order. Fees may be billed monthly or yearly. There is no card payment inside the Service: payment is made directly to SAAD ICT by bank transfer, mobile money or cash, as agreed.

• The Subscription record in the Service shows the current start and renewal dates.
• A grace period may apply after the renewal date. If the Subscription is not renewed by the end of it, we may restrict the Workspace (for example to read-only access) or suspend it until payment is received. We will not delete Customer Data because of late payment without first giving the notice described in section 14.
• Fees are stated exclusive of any taxes, bank or transfer charges, which are the Agency's responsibility unless agreed otherwise.
• We may change our prices for future billing periods. We will give at least 30 days' notice, and the change will not affect a period that has already been paid for.
• Fees that have been paid are not refundable, except where we end the Service without cause (section 14) or where the law requires a refund.

As between the Agency and SAAD ICT, the Agency owns and controls its Customer Data. The Agency grants SAAD ICT a limited right to host, store, copy, process, transmit and display Customer Data only as needed to provide, secure, support and improve the Service for the Agency, and to comply with the law.

• For personal data inside Customer Data, the Agency is the data controller and SAAD ICT acts as its processor, following the Agency's instructions. Our Privacy Policy describes this in detail.
• We do not sell Customer Data, use it for advertising, or use one Agency's data for the benefit of another.
• Our staff do not browse Customer Data. Access is limited to what is necessary to operate, secure or support the Service, to investigate a problem the Agency reports, or to meet a legal obligation.
• The Agency can export its data while its Subscription is active, and can ask us for an export at the end of the Subscription (section 14).

• Lawful basis and notice: the Agency must have a lawful reason to collect and use the personal data it enters, and must give pilgrims, travellers, employees and other people the privacy information the law requires, including about the use of the Service.
• Only what is needed: the Agency should enter only the data it genuinely needs. Health information and document copies should be recorded only when necessary and permitted.
• Children: where the Agency records data about a minor, it is responsible for obtaining any consent required from a parent or guardian.
• Accuracy: the Agency is responsible for the accuracy of Customer Data and of everything the Service produces from it, including invoices, receipts, ID cards, manifests, certificates and verification pages.
• Passport scanning: the Service can read the machine-readable zone of a passport to pre-fill forms. The result may contain errors and must be checked against the original document before it is saved or used.
• Official processes: the Service does not submit applications to any government, embassy, airline or visa system. Any submission the Agency makes elsewhere, and its outcome, remain the Agency's responsibility.
• Its own customers: the Agency is solely responsible for its services, prices, contracts, refunds and relationships with its own customers and suppliers.

The Agency and its Authorised Users must not:

• use the Service for anything unlawful, fraudulent or misleading, including creating false documents or verification records;
• enter data they have no right to process, or content that infringes the rights of others;
• try to access another Agency's Workspace, another person's account, or any data they are not authorised to see;
• bypass or test authentication, permissions, rate limits or other security controls without our prior written permission;
• upload malicious code, or interfere with the performance, availability or integrity of the Service;
• scrape the Service or access it by automated means other than those we provide;
• copy, resell, sublicense or reverse engineer the Service, except where the law expressly allows it.

We may investigate suspected misuse and may restrict or suspend access where reasonably necessary to protect the Service, other Agencies or the people whose data is stored in it.

The Service can generate documents (such as pilgrim and employee ID cards, certificates, invoices and manifests) that carry a QR code. Scanning the code opens a public verification page that anyone holding the document can view, without signing in.

• Verification pages show only what is needed to confirm that a document is genuine, such as a name, photo, nationality and status. Document numbers are partly masked.
• Verification links for pilgrims and travellers expire after 180 days by default. The Agency can revoke or reissue a link at any time.
• The Agency decides which documents to issue and to whom, and must not issue a document or verification record it knows to be inaccurate.
• Public pages are protected against automated misuse and are excluded from search engines.

• We aim to keep the Service available at all times, but it may be interrupted for maintenance, updates, incidents or failures of the internet or of third-party infrastructure. Unless a separate written agreement says otherwise, we do not guarantee a specific uptime.
• Where possible we schedule maintenance to limit disruption and show a notice in the Service.
• We may add, change or remove features. If we remove a feature that is essential to the Agency's use of the Service, we will give reasonable notice.
• Support is available at info@muyasir.com during our published working hours.

We maintain reasonable technical and organisational measures to protect the Service and Customer Data, including encryption in transit, separation between Agency Workspaces enforced by the database itself, two-step sign-in, private file storage and activity logging. Our Privacy Policy describes these measures.

No system is completely secure. The Agency is responsible for the security of its own devices, networks and email accounts, and for the actions of its Authorised Users. If we become aware of a security incident affecting Customer Data, we will inform the Agency without undue delay, as described in our Privacy Policy.

The Service runs on infrastructure provided by third parties, including a hosting provider, a database and file-storage service, an email delivery provider and a bot-protection service. These providers act under agreements that require them to protect the data they handle. The Privacy Policy lists their roles and locations.

We are not responsible for services that the Agency chooses to use outside the Service, such as its own email, website, messaging or payment providers.

SAAD ICT owns the Service, including its software, design, texts, templates and trademarks. The Agency receives a limited, non-exclusive, non-transferable right to use the Service for its own business during its Subscription. No other rights are granted.

The Agency keeps all rights in its Customer Data and in the logos, stamps and other branding it uploads, and allows us to use them only to provide the Service to it. If the Agency sends us suggestions or feedback, we may use them freely without obligation.

Each party will keep confidential the non-public information it receives from the other in connection with the Service, use it only for the purposes of these terms, and protect it with at least reasonable care. This does not apply to information that is or becomes public without breach, was already lawfully known, or must be disclosed by law, in which case the disclosing party will, where legally possible, give the other party advance notice.

• The Agency may stop using the Service at any time by telling us at info@muyasir.com. The Subscription then ends at the end of the period already paid for.
• We may end the Service for convenience with at least 30 days' written notice, in which case we refund any fees paid for the unused period.
• We may suspend or end access immediately if the Agency seriously breaches these terms, fails to pay after the grace period and a reminder, or if continuing would expose the Service, other Agencies or other people to serious risk or would break the law.

What happens to your data

• For 90 days after the Subscription ends, the Agency can ask us for an export of its Customer Data in a common, machine-readable format.
• After those 90 days we delete the Agency's Customer Data from the Service, unless the law requires us to keep part of it. Copies in our backups are overwritten automatically within the following 7 days.
• We may keep a minimal record of the Agency's account, invoices and payments for as long as tax, accounting or legal-defence reasons require.

Sections 5, 12, 13, 15, 16, 17 and 18 continue to apply after the Subscription ends.

To the extent the law allows, the Service is provided "as is" and "as available". SAAD ICT does not guarantee that the Service will be uninterrupted or error-free, or that it will meet every requirement of the Agency.

Calculations, reports and documents produced by the Service depend on the data entered. The Agency must review them before relying on them. The Service does not provide legal, financial, tax, immigration or religious advice, and does not decide whether any person may travel or receive a visa.

• To the extent the law allows, neither party is liable for indirect or consequential loss, or for loss of profit, revenue, business or goodwill, arising from the Service.
• To the extent the law allows, SAAD ICT's total liability arising from the Service in any 12-month period is limited to the fees the Agency paid for the Service in the 12 months before the event that caused the liability.
• Nothing in these terms limits liability for fraud, for death or personal injury caused by negligence, or for any other liability that cannot be limited by law.

The Agency will compensate SAAD ICT for claims, losses and reasonable costs brought by third parties that result from the Agency's Customer Data, from the Agency's breach of these terms, or from the Agency's dealings with its own customers, provided that SAAD ICT informs the Agency promptly of the claim and allows it to take part in the defence.

These terms are governed by the laws of the Federal Republic of Somalia. If a disagreement arises, the parties will first try in good faith to resolve it through direct discussion for at least 30 days after one party notifies the other in writing. If it is not resolved, it will be submitted to the competent courts of Mogadishu, Somalia, unless the parties agree on another method such as mediation or arbitration.

We may update these terms, for example to reflect changes to the Service or to the law. For material changes we will notify the Agency's administrators by email or in the Service at least 30 days before they take effect. Continuing to use the Service after the effective date means the Agency accepts the updated terms; if it does not, it may end the Subscription before that date. The effective date and version are shown at the top of this page.

• Notices to SAAD ICT must be sent to info@muyasir.com. We send notices to the email address of the Agency's administrators.
• The Agency may not transfer its Subscription without our written consent. We may transfer these terms as part of a reorganisation, merger or sale of the Service, and will inform the Agency.
• Neither party is responsible for delays or failures caused by events beyond its reasonable control, such as natural disasters, war, government action or wide-scale internet or power failures.
• If any part of these terms is found invalid, the rest continues to apply. Not enforcing a right does not waive it.
• These terms, the Privacy Policy and any written agreement or order form the whole agreement between the parties about the Service.

SAAD ICT, Mogadishu, Somalia. Email: info@muyasir.com. Website: muyasir.com.