Privacy Policy UAE PDPL Compliant v1.0

Privacy Policy — Jaandaar.AI

Effective: 20 May 2026  ·  Governed by: UAE Federal Decree-Law No. 45 of 2021

1

Who we are

This website and all associated services are operated by Jaandaar.AI, a software and AI solutions company headquartered in the United Arab Emirates. References to "Jaandaar.AI", "we", "us", or "our" throughout this policy mean this entity.

For purposes of UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "UAE PDPL"), Jaandaar.AI acts as the data controller for personal data we collect directly. Where we deploy AI agents or software solutions on behalf of business clients, we may act as a data processor — addressed separately in Section 5.

2

Scope of this policy

This policy applies to personal data collected through: (a) our public website and marketing pages; (b) account registration and login flows; (c) direct interactions with our AI agent products; and (d) any communications you initiate with us.

It does not govern personal data processed by our clients using Jaandaar.AI's technology as a platform. If you are the end-user of a business that has deployed our AI agents, the privacy policy of that business governs your data — though we describe our processor role in Section 5.

3

Data we collect

CategoryExamplesHow collected
Identity & contactFull name, email address, company name, job titleContact form, account registration
Account credentialsEmail, hashed password, authentication tokensRegistration and login
Usage & technicalBrowser type, IP address, pages visited, session duration, device typeServer logs, analytics (if enabled)
CommunicationsContent of messages, support requests, enquiriesContact form, email correspondence
AI interaction dataPrompts, responses, session context within our agent productsDirect product use — see Section 5
Billing informationBilling address, invoice detailsProvided by you — payment card data processed by our gateway only; we do not store it (see Section 8)

We do not collect special categories of data (health, biometric, political, religious), and we do not knowingly collect personal data from individuals under 18 years of age.

4

How we use your data

PurposeLegal basis (UAE PDPL)
Responding to enquiries and providing requested servicesPerformance of contract / legitimate interests
Creating and managing user accountsPerformance of contract
Delivering and improving our AI productsPerformance of contract / legitimate interests
Sending transactional communications (account alerts, invoices)Performance of contract
Sending service updates or product news (opt-out available)Legitimate interests
Detecting and preventing fraud or abuseLegitimate interests / legal obligation
Complying with applicable law and regulatory requestsLegal obligation

We do not sell, rent, or trade your personal data to third parties for their own commercial purposes.

5

AI agent processing

Jaandaar.AI builds and deploys AI agent and automation solutions. This creates two distinct data processing relationships:

Our roleWhen it appliesWhat this means
Data controllerYou interact directly with Jaandaar.AI (our website, our platform, your own account)This policy applies in full. We determine the purpose and means of processing.
Data processorYou interact with an AI agent deployed by one of our business clientsWe process data on behalf of and under instructions from that client. Their privacy policy governs your rights. We maintain a Data Processing Agreement with all such clients.

In both cases, interaction data (prompts, responses, session context) is used solely to operate the relevant agent session. We do not use end-user interaction data to train shared or public AI models without explicit consent.

If you are interacting with an AI agent on a third-party platform powered by Jaandaar.AI and have a privacy concern, contact the business that deployed the agent in the first instance.

6

Legal bases for processing

Under the UAE PDPL, we process personal data on one or more of the following bases: performance of a contract to which you are party; compliance with a legal obligation; protection of vital interests; our legitimate interests where not overridden by your rights; or, where required, your explicit consent.

Where we rely on legitimate interests, those interests are: operating and securing our platform, responding to enquiries, and improving our services. You may object to processing on this basis at any time (see Section 10).

7

Third-party services

We use the following third-party providers. Each processes data under their own terms and is subject to their own privacy obligations.

ProviderPurposePolicy
Web3FormsContact form deliveryweb3forms.com/privacy
Google MapsEmbedded maps (if used)policies.google.com/privacy

We will update this table whenever we add material new providers. We do not permit third-party providers to use your data for their own marketing purposes.

8

Payments

Payment processing functionality is planned for a future release. When live, all card and financial transactions will be handled by a PCI-DSS compliant third-party payment gateway. Jaandaar.AI will not store, log, or have access to full payment card numbers. Billing address and invoice records will be retained for legal and accounting purposes.

This section will be updated with the payment processor name and link to their privacy policy before payment processing goes live.

9

Data retention

Data typeRetention period
Contact form submissions24 months from last correspondence, unless an ongoing relationship exists
Account dataDuration of account, plus 12 months after account closure
AI session / interaction logs90 days from session date, unless required for an active support matter
Technical & server logsRolling 90-day window
Billing & invoice records7 years, in accordance with UAE commercial law

At the end of the relevant retention period, data is securely deleted or anonymised. You may request earlier deletion subject to the conditions in Section 10.

10

Your rights

Under the UAE PDPL, and to the extent applicable, you have the following rights regarding your personal data:

Access

Request a copy of personal data we hold about you

Rectification

Correct inaccurate or incomplete data

Erasure

Request deletion, subject to legal retention obligations

Restriction

Ask us to limit how we process your data

Portability

Receive your data in a structured, machine-readable format

Objection

Object to processing based on legitimate interests

To exercise any of these rights, email privacy@jaandaar.ai. We will acknowledge within 5 business days and respond substantively within 30 days. We do not charge a fee for legitimate requests. We may ask you to verify your identity before acting.

11

Cross-border transfers

Our infrastructure and some third-party providers may process or store data outside the UAE. Where personal data is transferred internationally, we take steps to ensure an adequate level of protection is in place — through contractual safeguards, applicable data protection laws of the recipient country, or other legally recognised mechanisms under the UAE PDPL.

You may request details of the safeguards in place for any specific international transfer by contacting us at the address in Section 15.

12

Security

We implement technical and organisational measures appropriate to the risk level of our processing activities, including access controls, encryption of data in transit (TLS), and regular review of our security practices. No method of transmission over the internet is completely secure; we cannot guarantee absolute security but commit to notifying affected individuals and relevant authorities of any material breach in accordance with our legal obligations under the UAE PDPL.

13

Cookies & analytics

Our website may use cookies and similar technologies for essential site functionality (session management, authentication) and, where enabled, aggregated analytics to understand how visitors use the site. We do not use advertising, cross-site tracking, or third-party behavioural cookies. You may manage or disable cookies through your browser settings; disabling essential cookies may affect site functionality.

14

Changes to this policy

We may update this policy to reflect changes in our practices, technology, or applicable law. Material changes will be communicated by updating the effective date at the top of this page and, where appropriate, by direct notification to registered account holders. Continued use of our services after a posted update constitutes acceptance of the revised policy.

15

Contact & complaints

For any privacy-related questions, requests, or concerns, please contact privacy@jaandaar.ai.

If you are not satisfied with our response, you have the right to lodge a complaint with the UAE data protection authority or, where applicable, the supervisory authority in your country of residence.

Let’s Connect