Private API platform · Riyadh region

Your servers get the modules. We keep the plumbing.

Duck Deals ships ready web applications that run as instances on your own infrastructure — and keeps their logic, data and updates flowing through one private API connection.

Request an instance Read the API docs
PDPL-aligned Data stays in KSA 99.95% API SLA
Live connection map 4 instances online
POST/v1/modules/commerce/sync142 ms
38 modules published
1,240 connected instances
99.95% API availability, 90 days
61 ms median response, KSA edge
Module catalogue

Pick a module. Your instance has it by lunch.

Every module is a ready web application running on your server, kept alive by a private API connection to Duck Deals. You own the instance; we own the upgrades.

All 38 modules
Commerce dd/commerce · v4.3.1
Stable

Catalogue, cart, checkout and Mada/Apple Pay rails, with tax and invoice rules kept current from the platform.

42 endpoints 310 instances 890 SAR/mo
Billing & Subscriptions dd/billing · v2.8.0
Stable

Recurring plans, dunning, proration and ZATCA e-invoicing handled server-side so your instance never computes tax alone.

28 endpoints 224 instances 690 SAR/mo
HR Suite dd/hr · v3.1.4
Stable

Employees, leave, payroll exports and GOSI-ready records, localised for Saudi labour rules.

36 endpoints 148 instances 740 SAR/mo
Bookings dd/bookings · v1.9.2
Beta

Resources, slots, deposits and reminders — for clinics, studios and workshops running on their own domain.

21 endpoints 63 instances 520 SAR/mo
Logistics dd/logistics · v2.0.0
Stable

Carrier rates, label generation and tracking webhooks across the major KSA couriers behind one endpoint.

19 endpoints 97 instances 610 SAR/mo
Insights dd/insights · v0.7.0
In development

Cross-module reporting with cohorts and export to your warehouse. Owner-configurable dashboards land next.

12 endpoints sandbox only From 450 SAR/mo
Live status board

Nothing hidden. Every module, every version, in the open.

All systems operational · updated 40 s ago
ModuleVersionUptime, 30 daysp95Region
Commerce API 4.3.1 99.99% 58 ms Riyadh
Billing API 2.8.0 99.97% 71 ms Riyadh
HR Suite API 3.1.4 99.95% 64 ms Riyadh
Bookings API 1.9.2 99.71% 138 ms Jeddah
Webhook delivery core 99.98% 43 ms Multi
Incidents and maintenance windows are published to every connected instance panel automatically.
How it works

Your instance on your server, wired to ours

01

Deploy the instance

We install the module application on your server — your domain, your database, your branding. One command, no ops team required.

duck init --module commerce
02

Pair the private API key

The instance authenticates to Duck Deals over a scoped, rotating key. Traffic is mutual-TLS and never leaves the Kingdom.

dd_live_••••••••4f2a
03

We keep it current

Logic, pricing rules, integrations and new features arrive through the connection. Your client panel shows what changed and when.

commerce 4.2 → 4.3 · zero downtime
For the engineers

A boring, predictable REST API

Versioned endpoints, idempotency keys, signed webhooks, and an OpenAPI schema you can generate a client from. No surprises in production.

  • Scoped keys per instance and per module
  • Signed webhooks with replay protection
  • Sandbox instance on every plan
Open documentation
connect-module.sh copy
# pair an instance with the commerce module
curl -X POST https://api.duckdeals.sa/v1/instances/inst_9x2/modules \
  -H "Authorization: Bearer $DD_LIVE_KEY" \
  -H "Idempotency-Key: 8f1c-commerce-init" \
  -d '{"module":"commerce","channel":"stable"}'

{
  "instance": "inst_9x2",
  "module":   "commerce",
  "version":  "4.3.1",
  "status":   "connected",
  "webhook":  "https://souq.one/dd/hooks"
}
Pricing

One connection fee, per instance

Modules are licensed on top. Agencies get instance pooling and white-label panels.

Duckling 1,900 SAR / mo One instance, two modules, sandbox included.
  • 100k API calls / month
  • Client panel, single admin
  • Email support, next business day
Start here
MallardMost connected 4,900 SAR / mo Three instances, unlimited modules, priority channel.
  • 2M API calls / month
  • Role-based admin panel
  • Early access to beta modules
  • 99.95% SLA with credits
Request access
Flock · agency Custom Pooled instances, white-label panels, reseller margin.
  • Unmetered fair-use calls
  • Your brand on every panel
  • Named engineer, shared Slack
  • On-prem or private cloud
Talk to us
Trust

Built for Saudi compliance, not retrofitted for it

Primary and replica data both stay inside the Kingdom. Access is logged per key, per module, per instance — exportable whenever an auditor asks.

KSA data residency Riyadh primary, Jeddah replica.
PDPL aligned DPA and sub-processor list on request.
Per-key audit trail Every call attributable, 400-day retention.
mTLS + key rotation Automatic 90-day rotation, zero downtime.
FAQ

Questions we get on the first call

Something missing? Ask us directly.

Where does the module actually run?

On your server. The instance is a full web application with your domain, database and branding; only the shared logic and updates travel over the private API to Duck Deals.

What happens if the connection drops?

Instances cache the last known configuration and keep serving. Writes queue locally and reconcile with idempotency keys once the connection returns.

Can I white-label the panels for my clients?

On the agency plan, yes — logo, palette, domain and email templates are all owner-editable, and your clients never see the Duck Deals brand.

Who controls the landing page and panel content?

The owner. Sections, copy, images, icons, menu items and roles are all managed from the owner panel — no deploy needed to change a headline or reorder a menu.

Is my data leaving Saudi Arabia?

No. Primary storage sits in Riyadh with a Jeddah replica, and the sub-processor list is available in the DPA before you sign anything.

Request access

Tell us what your instance needs to do

We answer within one business day with a sandbox key and a scoped plan. No sales sequence, no discovery theatre.

hello@duckdeals.sa +966 11 000 0000 Riyadh, Saudi Arabia
Never shared. Sandbox key within one business day.