Privacy Policy

01Who we are

faez.ai is the trading name of [Company legal name], trade licence [Trade licence number], registered at [Registered address]. We design and build websites, online stores and AI automation systems for businesses in the UAE, Saudi Arabia, Qatar, Kuwait, Bahrain and Oman.

For data you send us through this website, by email, by phone or on WhatsApp, we are the controller: we decide why and how it is used.

When we build or run a system for a client, such as a chatbot or a WhatsApp agent, the client controls its customers' data. We process that data only on the client's written instructions.

02What we collect

We collect only what we need to reply to you and to run a project.

• Contact details: your name, email address, phone or WhatsApp number, company name and role.
• Project details: the service you are interested in, your budget range, market and language, links to your current website and anything you write in a message.
• Call bookings: the date, time and time zone you choose and any notes you add.
• Messages: the content of emails, WhatsApp chats and our notes from calls.
• Client records: contracts, invoices, billing details and project files, if you become a client.
• Technical data: IP address, browser, device type, pages visited and the site that referred you, from server logs and, only if you agree, analytics cookies.

03How we use it

We do not sell your personal data and we do not use it to build advertising profiles.

Please never send us passwords or sensitive data such as health, bank or identity document details. When a project needs access, you invite us to your own accounts.

• To reply to your enquiry and prepare a quote.
• To schedule and hold calls.
• To deliver, support and invoice the work we agree.
• To keep our website secure, fix errors and learn which pages are useful.
• To send occasional updates, only if you ask for them. Every update has a way to stop them.
• To meet legal, tax and accounting duties and to protect our rights in a dispute.

04Legal bases

GCC data protection laws rely mainly on your consent, with exceptions for contracts, legal duties and similar cases. The GDPR lists specific legal bases. Depending on where you are, we rely on:

• Consent: for example when you send a form, ask for updates or accept analytics cookies. You can withdraw it at any time.
• Contract: when we need the data to prepare a quote you asked for or to deliver a project.
• Legal obligation: for tax, accounting and regulatory records.
• Legitimate interests, where the law allows: such as keeping our website secure and handling disputes. We weigh these against your rights first.

05AI and automation

We may use AI tools in our own work, for example to transcribe a call, summarise notes or draft documents. We use only business plans whose terms do not let the provider train its models on your data, and a person on our team checks every result.

We do not make decisions about you by automated means alone that have legal or similarly significant effects.

The chat shown on our homepage is an illustrative demonstration with a fictional business. It does not collect personal data.

AI agents we build for clients always tell people they are talking to an AI and offer a way to reach a person. Data those agents handle belongs to our client and is covered by the client's own privacy policy.

06Cookies and analytics

Our website does not use advertising cookies. It uses only what is strictly needed to work, such as small display preferences saved in your browser, which are not used to track you.

If we use analytics such as Google Analytics, we ask for your consent first where the law requires it, shorten IP addresses where the tool allows and keep analytics data for no longer than 14 months.

You can change your choice at any time and you can block or delete cookies in your browser settings. The website still works if you refuse analytics.

07Sharing and service providers

We share personal data only with providers that help us run the business, under contracts that require them to protect it and use it only on our instructions:

• Email, calendar and document tools.
• Website hosting and security services.
• Call booking and video meeting tools.
• WhatsApp, operated by Meta, when you message us there.
• Analytics, only if you consent.
• Accounting, invoicing and payment providers.
• Specialists who work on a project with us under a confidentiality agreement.

08Disclosure and transfers abroad

We may disclose data when the law, a court or a competent authority requires it, to protect our rights, or to a buyer if our business is transferred, who must respect this policy. A list of our main providers is available on request.

Some providers store data outside your country, for example in the European Union or the United States. When data leaves the UAE, Saudi Arabia, another GCC country or the European Economic Area, we use the protection the relevant law requires, such as transfer to a country recognised as adequate, standard contractual clauses (including the SDAIA clauses for data under Saudi law) or your explicit consent where that is the permitted route.

If a client project needs data to stay in a particular country, we agree the hosting location in writing before work starts.

09How long we keep data

When data is no longer needed, we delete it or make it anonymous.

• Enquiries that do not become projects: up to 24 months after our last contact, then deleted.
• Contracts, invoices and accounting records: as long as tax and commercial laws in the relevant country require, usually 5 to 10 years.
• Project files and access: handed over at the end of the project or care plan, after which we remove our access, unless you ask us to keep backups.
• Analytics data: no longer than 14 months.
• Server logs: up to 90 days, unless we need them to investigate a security incident.

10Security

We use reasonable technical and organisational measures, including encrypted connections, two factor sign in on our accounts, access limited to the people who need it, and invitations to client systems instead of shared passwords.

No system is perfectly secure. If a breach is likely to put your rights at risk, we will tell you and the relevant authority within the time the law sets.

11Your rights

Depending on where you live, UAE Federal Decree Law No. 45 of 2021, the Saudi Personal Data Protection Law, Qatar Law No. 13 of 2016, Bahrain Law No. 30 of 2018, Oman Royal Decree No. 6 of 2022 or the EU GDPR gives you rights over your personal data. In general you can ask us to:

• Tell you what data we hold about you and give you a copy.
• Correct data that is wrong or incomplete.
• Delete data we no longer need or hold without a valid basis.
• Restrict or stop certain uses, including all direct marketing.
• Send your data to you or to another provider in a common format, where this right applies.
• Withdraw your consent at any time, without affecting earlier use.

12Requests and complaints

To use any of these rights, email [Contact email: support@faez.ai]. We may ask you to confirm your identity. We reply within 30 days, or sooner if your local law requires it. There is no charge.

You can also complain to a data protection authority, such as the UAE Data Office, the Saudi Data and AI Authority (SDAIA), Qatar's National Cyber Security Agency, Bahrain's Personal Data Protection Authority, Oman's Ministry of Transport, Communications and Information Technology, or your supervisory authority in the EU.

Kuwait's CITRA Data Privacy Protection Regulation applies to licensed telecom and technology providers. We follow its principles of transparency, consent and purpose limitation for visitors from Kuwait.

13Children

Our website and services are meant for businesses and are not directed at anyone under 18. We do not knowingly collect children's data. If you believe a child has sent us personal data, tell us and we will delete it.

14Changes and contact

We will update this policy when our services, tools or the law change, and show the new date at the top. If a change is significant, we will tell clients by email.

Questions or requests: [Contact email: support@faez.ai]. By post: [Company legal name], [Registered address].