Privacy Policy

1. Introduction

PA (the "Platform", "we", "us", "our") is operated by Meydan Free Zone, Meydan Grandstand – 6th Floor, Al Meydan Rd, Nad Al Sheba, Nad Al Shiba First, Dubai, United Arab Emirates. This Privacy Policy explains what personal data we collect through the Platform (paai.ae and its associated subdomains), why we collect it, and how it is used, stored, and protected.

This Policy applies to registered company owners and their authorised users who access the Platform, and to individuals whose data is processed as a result of a company's use of the Platform (for example, callers, email senders, and WhatsApp contacts).

2. Information We Collect

• Registration data: company name, owner name, business email, mobile number, trade licence number, and business address.
• Account credentials: your password, stored as a salted cryptographic hash — never in plain text.
• Connected mailbox and calendar data (Google/Microsoft): when you connect a Gmail or Outlook account, we access email messages relevant to your business communications to classify them and, where you review and approve, draft AI-generated replies; calendar events, to schedule, confirm, and manage meetings on your behalf; and basic profile information (name, email address).
• Voice call data: call recordings and transcripts when our AI voice assistant handles a call for your business.
• WhatsApp messages: message content and metadata for conversations routed through your connected WhatsApp Business number.
• Knowledge base documents: files you upload for the AI assistant to reference when answering questions.
• Usage and technical data: IP address, browser/device information, and access timestamps, collected automatically for security and diagnostic purposes.

3. How We Use Your Information

We do not sell your personal data, and we do not use your email, calendar, or WhatsApp content to serve advertising.

• To provide and operate the voice, email, WhatsApp, and calendar features of the Platform.
• To classify inbound communications and draft AI-generated responses for your review and approval.
• To schedule and manage meetings on your behalf.
• To answer questions using your knowledge base content.
• To maintain, secure, and improve the Platform.
• To communicate with you about your account and provide customer support.
• To comply with applicable legal obligations.

4. Google and Microsoft User Data

PA's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail read access is used to classify certain incoming emails and draft replies for your review — nothing is sent without your approval. Gmail send access is used only to send a reply after you have approved it. Calendar access is used to create, update, and read calendar events in order to schedule meetings on your behalf.

Access is limited to the features described in this Policy. Email and calendar content is not used to train general-purpose AI models, is not shared with third parties for their own marketing purposes, and is not read by our staff except where necessary to investigate a support request you raise, or to maintain the security and proper functioning of the Platform.

You can disconnect your Google or Microsoft account at any time from the Integrations page, which revokes our access to it.

5. How We Share Your Information

We never sell personal data to third parties. We share personal data only in the following circumstances:

• With service providers necessary to deliver the Platform, each bound by confidentiality and data-processing obligations — Google LLC / Microsoft Corporation (for the email and calendar features you connect), Meta Platforms, Inc. and our WhatsApp Business Solution Provider (for WhatsApp messaging features), voice/speech-processing and AI language-model providers (to power the voice assistant, drafting, and knowledge base answering), and our email-delivery infrastructure (for transactional/system email).
• Where required by UAE law or a valid legal process.
• In connection with a merger, acquisition, or sale of assets, subject to the same protections described in this Policy.

6. Data Retention

Account data is retained for as long as your subscription is active, plus a reasonable period afterward for legal, accounting, and backup purposes.

Call recordings and transcripts, email content, and WhatsApp messages are retained for as long as needed to provide the service and to comply with applicable legal obligations, or until you request deletion.

Knowledge base documents are retained until you delete them or your account is closed.

7. Data Security

We protect personal data using encryption in transit (TLS/HTTPS) for all Platform traffic, salted-hash password storage, access controls that restrict internal access to personal data on a need-to-know basis, and hosting on access-controlled infrastructure. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under UAE data protection law, you may request access to, correction of, or deletion of your personal data, and may object to or request restriction of certain processing. To exercise these rights, contact us at privacy@meydanfz.ae.

9. International Data Transfers

Some of our service providers (for example, Google, Microsoft, and Meta) process data outside the United Arab Emirates. Where this occurs, we require appropriate contractual safeguards from those providers.

10. Cookies and Similar Technologies

We use a small number of strictly necessary cookies and local-storage entries to keep you signed in and remember your display preferences (for example, light/dark theme). We do not use third-party advertising or tracking cookies.

11. Children's Privacy

The Platform is intended for business use by adults and is not directed at children. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page.

13. Contact Us

Meydan Free Zone — Meydan Grandstand, 6th Floor, Al Meydan Rd, Nad Al Sheba, Nad Al Shiba First, Dubai, United Arab Emirates.

Email: privacy@meydanfz.ae