This policy explains how we collect, use and protect personal data. We process personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), the EU General Data Protection Regulation (GDPR) where it applies to our customers in the EU, and other applicable laws.
1. Data we collect
Account and contact data: name, business name, email, phone number, billing address.
Order and payment records: order details, amounts, currency, transaction references and the last four digits of your card. Full card details are handled only by our acquiring bank's payment gateway. We never receive or store them.
Chatbot content: the website text, FAQs and documents you give us to train your Chatbot.
Chatbot conversations: messages between your Chatbot and your website visitors, and lead details they submit.
Technical data: IP address, browser type, device data, log files and cookies (see our Cookie Policy).
Support records: emails and messages you send us.
2. How we use it
| Purpose | Legal basis |
|---|---|
| Create your account and deliver the Chatbot and Credits | Performance of our contract with you |
| Process payments, prevent fraud and run sanctions checks | Legal obligation and legitimate interest |
| Provide customer support and handle complaints and refunds | Contract and legal obligation |
| Keep accounting and VAT records | Legal obligation |
| Secure and improve the platform | Legitimate interest |
| Send marketing emails | Your consent, which you can withdraw at any time |
We do not use your content or your visitors' conversations to train AI models for other customers.
3. Chatbot visitor data
For the personal data your website visitors share with your Chatbot, you are the controller and we act as your processor. We process it only on your instructions to run your Chatbot. You must tell your visitors that they are using an AI chatbot and how their data is used, and have a lawful basis for collecting it. A Data Processing Agreement is available on request at privacy@jcloudbot.com.
4. Sharing your data
We do not sell, share, rent or lease personal data or card details to third parties. We share data only with service providers who help us run the service, under contracts requiring them to protect it:
our acquiring bank and payment gateway: [ACQUIRER NAME];
cloud hosting: [HOSTING PROVIDER];
AI model providers: [AI PROVIDERS];
email and customer support tools: [EMAIL AND SUPPORT PROVIDERS].
We may also disclose data where UAE law or a competent authority requires it.
5. International transfers
Some of our providers process data outside the UAE, in [TRANSFER COUNTRIES]. We transfer data only where the PDPL allows it, for example to countries with adequate protection or under contractual safeguards.
6. Retention
| Data | How long we keep it |
|---|---|
| Account data | While your account is open, plus [ACCOUNT RETENTION MONTHS] months |
| Chatbot conversations | [CONVERSATION RETENTION DAYS] days, unless you delete them sooner |
| Order, invoice and VAT records | As long as UAE tax and commercial law requires (at least 5 years) |
| Support emails | [SUPPORT RETENTION YEARS] years |
7. Security
We use encryption in transit (TLS) and at rest, access controls, and monitoring to protect your data. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security. If a data breach affects your personal data, we will notify you and the relevant authority as the law requires.
8. Your rights
Under the PDPL and, where it applies, the GDPR, you may ask to access, correct, delete or restrict the processing of your personal data, object to processing, or receive a copy of your data. You can also withdraw consent to marketing at any time. Email privacy@jcloudbot.com and we will respond within the time the law allows. You may also complain to the UAE Data Office or, if you are in the EU, your local data-protection authority. Our EU representative is [EU REPRESENTATIVE].
9. Minors
Our services are not for anyone under 18, and we do not knowingly collect their data.
10. Third-party websites
Our website may link to other websites. We are not responsible for their privacy practices. Please read their privacy policies.
11. Changes
We may update this policy from time to time. Changes take effect on the date they are posted, and we will email you about material changes. Please check this page regularly.