Baseera Privacy Policy
This Privacy Policy outlines how Juhayna Food Industries manages, processes, and protects information within Baseera.
1. Who We Are
Baseera is an enterprise mobile application owned and operated by Juhayna Food Industries, delivering an AI-powered business insights platform that transforms enterprise data into actionable intelligence.
Baseera integrates with enterprise systems including ERP platforms, analytics engines, and cloud infrastructure. The application is published on Android and iOS platforms using controlled/private distribution mechanisms and is NOT available for public access.
By accessing or using Baseera, users acknowledge and agree to the practices described in this Privacy Policy and are obligated to comply with all applicable information security and data governance policies of the Company.
2. Access Restriction & Controlled Distribution
Baseera is strictly for authorized company users only.
- The application is published on official stores (Google Play & Apple App Store) using restricted/private access mode.
- The application is NOT visible to the public.
- Access is granted only through a specific secure download link.
- Only approved users within Juhayna can install and access the application.
Access is enforced through:
Unauthorized access, sharing, or external usage is strictly prohibited.
3. Information Security & Compliance Commitment
Baseera operates in alignment with:
- ISO/IEC 27001:2022.
- Internal Information Security Management System (ISMS).
- Enterprise data governance policies.
- Controls are aligned with Annex A including access control, cryptography, monitoring, and supplier management.
4. Information We Process
4.1 Identity & Access Data
- Corporate username, email, role, department.
- Authentication metadata via enterprise identity systems.
4.2 Enterprise Business Data
Baseera processes highly sensitive enterprise data including:
- Financial data.
- Operational and production data.
- Sales and customer analytics.
4.3 System & Usage Data
- Device identifiers.
- Access logs and session activity.
- Performance and error monitoring.
4.4 AI Processing Data
- User queries submitted to AI models.
- Contextual enterprise data used for analysis.
- AI-generated outputs and insights.
5. AI Governance & Risk Management
5.1 Model Risk Management
- AI models are validated prior to deployment
- Continuous monitoring for accuracy, bias, and drift
5.2 Hallucination Control
- AI outputs are probabilistic and may contain inaccuracies
- Outputs are grounded using enterprise data where applicable
- Users must validate outputs before decisions
5.3 Human Oversight
- AI is strictly for decision support
- Critical decisions require human verification
5.4 Auditability & Traceability
All activities are logged including:
Logs support audit, compliance, and investigation.
6. Data Security Controls
- Encryption in transit
- Encryption at rest
- RBAC and least privilege enforcement
- Continuous monitoring and logging (SIEM where applicable)
- Secure development and vulnerability management
7. Data Sharing & Third Parties
Data is not publicly shared or exposed.
Processing is limited to controlled enterprise environments and approved platforms such as:
- SAP systems
- Microsoft Azure cloud services
All third parties are governed by strict security and confidentiality agreements.
8. Data Retention & Classification
Data retention follows:
- Business requirements
- Legal obligations
- Internal data classification policies
All data is handled according to its classification level with strict protection controls.
9. User Responsibilities
Users must:
- Maintain confidentiality of credentials
- Not sharing or exposing business data
- Not distribute the application externally
- Comply with all IT department’s security policies
Violations will result in disciplinary and legal actions.
10. Incident Management
Security incidents are handled under formal ISMS procedures including detection, containment, remediation, and reporting.
11. Changes to This Policy
We reserve the right to update this policy. Updates will be communicated through official channels.