Privacy Policy

This policy applies to personal data relating to:

• Website visitors and users of our online services.
• Prospects, clients, suppliers, partners, event participants, and professional contacts.
• Individuals whose information is provided to us by a client in connection with our software, artificial intelligence, consultancy, portal, marketing, analytics, or related services.

Where we process personal data for a client under that client’s instructions, the client may be the controller of that data and we may act as a processor or service provider. In those cases, we process the data in accordance with our agreement with the client.

We may collect the following categories of personal data:

• Identity and contact data: name, company, role, email address, phone number, country, billing or business address, and communication preferences.
• Account and portal data: login credentials, user ID, workspace or organisation details, permissions, settings, uploaded files, instructions, messages, support requests, and activity logs.
• Client-provided business data: website URLs, campaign information, CRM records, lead data, analytics exports, content, documents, and other materials supplied so we can provide the requested services.
• Transaction and commercial data: proposals, quotations, invoices, payments, subscriptions, tax or billing details, and records of services provided.
• Technical data: IP address, device identifiers, browser type, operating system, referring pages, page views, session data, cookie identifiers, diagnostics, security logs, and similar usage data.
• Marketing and event data: newsletter sign-ups, campaign responses, event registration details, feedback, and preferences.

We do not intentionally collect special-category or sensitive personal data unless it is necessary for a specific service, you provide it voluntarily, or we are legally required to process it. Please do not upload sensitive personal data unless it is required for the agreed work.

We collect personal data directly from you, from your organisation, from clients who instruct us, through our websites and portal, through communications with us, through payment or business systems, and from publicly available or commercially available business sources where permitted by law.

We use personal data to:

• Provide, operate, secure, and improve our websites, portal, software, artificial intelligence, consultancy, marketing, analytics, and related services.
• Respond to enquiries, prepare proposals, onboard clients, manage accounts, and provide customer support.
• Process payments, issue invoices, maintain tax and accounting records, and manage contracts.
• Configure, test, monitor, and validate digital workflows, content, campaigns, automations, analytics, and integrations.
• Personalise communications and send service messages, updates, invitations, and marketing communications where permitted.
• Detect, prevent, and investigate fraud, abuse, security incidents, unauthorised access, and misuse of our services.
• Comply with legal, regulatory, tax, corporate, audit, dispute-resolution, and record-keeping obligations.
• Protect our rights, users, clients, systems, and business.

Depending on the context, we process personal data on one or more of the following bases:

• Performance of a contract or steps taken before entering into a contract.
• Our legitimate interests, including operating our business, improving our services, securing our systems, communicating with clients and prospects, and protecting legal rights.
• Consent, where we ask for it, such as for certain marketing communications or optional cookies.
• Compliance with legal or regulatory obligations.
• Establishment, exercise, or defence of legal claims.

We may use artificial intelligence, automation, analytics, and software tools to deliver services, analyse content, generate drafts, classify records, support workflows, monitor quality, and improve operational efficiency.

AI-generated outputs may be inaccurate, incomplete, or require human review. We use reasonable safeguards for client data, but you are responsible for ensuring that any information you provide to us is lawful, accurate, and appropriate for the intended processing. Unless expressly agreed in writing, we do not use confidential client data to train public foundation models.

Our websites and online services may use cookies, pixels, local storage, analytics tags, and similar technologies to operate the service, remember preferences, measure performance, understand traffic, secure accounts, and support marketing.

You can manage cookies through your browser settings and, where available, through our cookie banner or preference tool. Some essential cookies are required for the service to function.

We may share personal data with:

• Employees, contractors, consultants, and authorised representatives who need access to perform their work.
• Hosting, cloud, analytics, security, communications, CRM, payment, accounting, automation, AI, and other technology service providers.
• Professional advisers, auditors, insurers, banks, payment providers, and legal representatives.
• Clients, where the data relates to a client project or user account.
• Regulators, courts, government authorities, law enforcement, and other parties where required or permitted by law.
• A buyer, investor, successor, or adviser in connection with a merger, acquisition, financing, restructuring, or sale of all or part of our business.

We do not sell personal data in the ordinary meaning of that term.

We are based in the DIFC and may process, host, access, or transfer personal data in the United Arab Emirates and other countries where we, our clients, or our service providers operate. Where required, we use appropriate safeguards for international transfers, such as contractual protections, due diligence, access controls, and other lawful transfer mechanisms.

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including to provide services, manage client relationships, comply with legal, tax, corporate, accounting, audit, and regulatory obligations, resolve disputes, enforce agreements, and maintain security records.

Retention periods vary depending on the type of data, the service, contractual requirements, legal obligations, and operational needs. When personal data is no longer required, we delete, anonymise, or securely archive it.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, misuse, or destruction. These measures may include access controls, authentication, encryption or secure transmission where appropriate, logging, backups, vendor controls, and security monitoring.

No system is completely secure. If you believe your account or data has been compromised, contact us promptly at team@aisfy.ai.

Subject to applicable law and any lawful exceptions, you may have rights to:

• Request access to personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data.
• Object to or restrict certain processing.
• Withdraw consent where processing is based on consent.
• Request data portability where applicable.
• Object to certain direct marketing.
• Lodge a complaint with a competent data protection authority.

To exercise your rights, contact us at team@aisfy.ai. We may need to verify your identity before responding.

You can unsubscribe from marketing emails by using the unsubscribe link in the email or by contacting us. We may still send non-marketing service, security, legal, billing, or administrative messages.

Our websites and services may link to third-party websites, platforms, apps, payment providers, social networks, analytics providers, or integrations. Their privacy practices are governed by their own policies. We are not responsible for third-party privacy practices.

Our services are intended for business and professional use and are not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact us so we can take appropriate action.

We may update this Privacy Policy from time to time. The updated version will be posted on our website or otherwise made available, with a revised “Last updated” date. Material changes may be notified through appropriate channels.

AI Digidot Limited
Trading name: AI Digidot
Commercial licence: CL10599
Registered address: Unit IH-00-01-03-OF-05, Level 3, Innovation One, Dubai International Financial Centre, Dubai, United Arab Emirates
Email: team@aisfy.ai