1. Information We Collect

A. Information Provided Directly

• Contact and Inquiries: Name, business email address, phone number, company name, and details provided when booking calls or submitting project briefs.
• Project Data: Business logic, brand guidelines, or operational workflow details shared with us for software execution.

B. Automatically Collected Data

Technical data including IP address, browser type, operating system, device metrics, and interaction analytics collected via website cookies.

2. How We Use Your Data

We use the information collected to:

• Deliver, configure, and maintain custom web applications and AI workflow integrations.
• Communicate project updates, invoices, and support responses.
• Optimize website performance, design usability, and analytics.

3. Enterprise AI Data Governance and Privacy Guarantee

• Zero Public Model Training: When configuring custom AI models, RAG systems, or API workflows, Al Masar utilizes enterprise privacy standards. Your proprietary data, confidential documents, and customer inputs processed via third-party AI APIs (for example OpenAI and Anthropic) are configured to prevent inclusion in public base-model training datasets.
• Input and Output Ownership: You retain complete ownership over all input data submitted to your custom AI applications and all output data generated by your custom workflows.

4. Data Sharing and Third-Party Infrastructure

We do not sell, rent, or trade your personal or business data. Data is shared with external platforms only as strictly necessary to host and power your application, including:

• Cloud Hosting and Storage: Vercel, Netlify, Supabase.
• AI and API Providers: OpenAI, Anthropic, or specialized vector database providers.
• Communication and Analytics: Email transaction services (for example Resend) and analytics platforms.

All third-party services are evaluated to ensure compliance with modern data processing and confidentiality standards.

5. Compliance with UAE Data Protection Law (PDPL)

Our data processing practices align with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). You possess the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete information.
• Right to Erasure: Request deletion of your personal data from our active databases.
• Right to Withdraw Consent: Revoke data processing permissions at any time.

To exercise any of these rights, contact our privacy team at contact@getalmasar.com.

6. Cookies and Tracking

We use functional and performance cookies to enhance navigation and site performance. You can control or disable cookie settings directly within your web browser preferences.

7. Updates to This Policy

We reserve the right to modify this Privacy Policy at any time. Any revisions are reflected with an updated Last Updated date at the top of this document.

8. Data Deletion Request

If you want Al Masar to delete your personal data, you can submit a deletion request at any time.

To process your request quickly and securely, please follow these steps:

1. Send an email to contact@getalmasar.com with the subject line: Data Deletion Request.
2. Include your full name, phone number, and the email address used when contacting or working with Al Masar.
3. Briefly describe what data you want deleted (for example: contact form data, consultation records, or project communication history).
4. Wait for identity verification instructions. We may request limited details to confirm ownership before deleting data.
5. After verification, we process eligible deletion requests within a reasonable timeframe in line with legal and operational obligations.

If certain records must be retained for legal, security, or contractual reasons, we will inform you clearly.

9. Contact Us

For privacy-related queries or data access requests:

• Email: contact@getalmasar.com