Privacy Policy

Effective: 2026-05-06  |  Last updated: 2026-05-06

1. Who We Are

UAE AI House is a technology platform operated by Khurram Badar in the United Arab Emirates.

Data Controller: Khurram Badar, Founder
Contact: hello@uaeaihouse.com
WhatsApp: +971 55 6239111

2. What Data We Collect

2.1 Website Visitors

• Analytics data: Page views, referral source, device type, browser — collected via Vercel Analytics (no cookies, privacy-focused)
• Contact form submissions: Name, email, company name, phone number (when you voluntarily submit a form)
• Chat interactions: Messages you send to our AI assistant (if available on this site)

2.2 Registered Users / Clients

• Account information: Name, email, phone, organisation
• Usage data: Feature usage patterns to improve service quality
• Business data you provide: Any data you submit or connect for service delivery

2.3 What We Do NOT Collect

• We do not use tracking cookies (Vercel Analytics is cookieless)
• We do not collect payment card details directly (processed via Stripe if applicable)
• We do not collect Emirates ID, passport numbers, or government identification

3. How We Use Your Data

• Service delivery: To provide the services you've requested
• Communication: To respond to enquiries and provide support
• Improvement: To improve our products and website (aggregated, non-personal)
• Legal obligations: To comply with UAE law and regulations

We do not use your data for:

• Advertising or ad targeting
• Selling to third parties
• Training AI models on your proprietary data
• Profiling for purposes unrelated to our services

4. Legal Basis for Processing

Under UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law), we process data on the following bases:

• Consent: When you submit a form, create an account, or initiate a chat
• Contractual necessity: When processing is required to deliver services
• Legitimate interest: For website analytics and service improvement
• Legal obligation: When required by UAE law

5. Data Storage and Security

• Hosting: Hosted on Vercel (cloud infrastructure) and/or Supabase
• Encryption: All data transmitted via HTTPS (TLS 1.2+). HSTS enforced.
• Access control: Data is accessible only to authorised personnel
• Security headers: Content-Security-Policy, X-Frame-Options (DENY), X-Content-Type-Options, Referrer-Policy, Permissions-Policy
• API security: Rate limiting, origin checks, and input validation on all endpoints

6. Data Sharing

We share data only with:

• Anthropic (Claude API): If AI chat is used, messages are processed via Anthropic's API. See: anthropic.com/privacy
• Vercel: Website hosting and analytics
• Supabase: Database hosting (if applicable)
• Resend: Transactional email delivery

We do not sell, rent, or trade personal data to any third party.

7. Data Retention

• Contact form submissions: Retained for 24 months, then deleted unless a relationship exists
• Chat logs: Retained for 90 days for service improvement, then deleted
• Account data: Retained for the duration of service plus 12 months, then securely deleted
• Analytics: Aggregated analytics retained indefinitely (no personal data)

8. Your Rights

Under UAE PDPL, you have the right to:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal obligations)
• Restriction: Request we limit how we use your data
• Data portability: Receive your data in a structured format
• Withdraw consent: Withdraw consent at any time
• Complaint: Lodge a complaint with the UAE Data Office

To exercise any right, email hello@uaeaihouse.com with subject line "Data Request". We will respond within 14 business days.

9. International Data Transfers

Some of our service providers operate infrastructure outside the UAE. Where data is transferred internationally, we ensure adequate safeguards are in place as required by UAE PDPL Article 22.

10. Children's Data

We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, contact us immediately for deletion.

11. AI-Specific Disclosures

• AI-generated responses are clearly presented as AI output, not professional advice
• We do not use client data to train foundational AI models
• AI features process data solely to deliver the requested service

12. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be posted on this page with an updated effective date.

13. Contact

Khurram Badar — Data Controller
Email: hello@uaeaihouse.com
WhatsApp: +971 55 6239111