Privacy Policy
AiGeeks Venture Studio (“AiGeeks”, “we”, “us”) respects your privacy. This notice explains what we collect, why, how we protect it, and your rights under UAE PDPL and applicable DIFC laws.
- Controller: AiGeeks FZ-LLC, DIFC, Dubai, UAE
- Email: info@aigeeks.ae
- If we process personal data for a client product, we usually act as Processor (see how)
Who are we & how to contact us?
What we collect
We collect the minimum needed for the purposes below:
- Contact data: Name, work email, phone/WhatsApp, company, role, LinkedIn/website.
- Application data: Answers to our fit quiz/forms, preferred model, timeline/budget notes, files you upload (e.g., brief/deck).
- Usage data: Pages viewed, device/browser, referral source, approximate location from IP, cookie IDs.
- Support data: Tickets, UAT notes, call recordings/meeting notes (where lawful and with notice).
- Billing data (clients): Invoice details, payment confirmations (no card storage on our systems).
- Integration credentials (clients): Tokens and keys are securely stored within your environment and used exclusively for your engagement.
Source
- Directly from you (forms, email, calls).
- From your colleagues/partners you introduce.
- From systems you connect (e.g., HubSpot, Xero) as configured.
- From analytics/cookie tools when you use our site.
Why we use your data (purposes & legal bases)
- Respond to enquiries / book consultations (consent or legitimate interests).
- Run our fit quiz / proposals / contracts (pre-contract/contract).
- Deliver studio services (Discover, Validate, Build, Scale) (contract).
- Security & compliance: access control, audit logs, incident response (legal obligation/legitimate interests).
- Improve our site/services via analytics and feedback (consent where required).
- Marketing updates (only with consent; you can opt out anytime).
Cookies & analytics
We use essential cookies for site operation and (if you consent) analytics/marketing cookies to understand traffic and improve content.
- Your choices: You can accept/reject non-essential cookies in the banner; you can also clear cookies in your browser.
- Cookie-banner microcopy (for your UI): "We use essential cookies and, with your consent, analytics cookies to improve this site. Manage choices."
Who we share data with (processors)
We use vetted service providers bound by contracts and confidentiality. Typical processors may include:
- Hosting / cloud: AWS UAE, Azure UAE, or your chosen provider
- Productivity: Google Workspace, Microsoft 365
- CRM & forms/meetings: HubSpot, Calendly, Typeform
- Collaboration/support: Slack, Notion, Linear/Jira, Freshdesk
- Accounting: Xero / Zoho Books
- Automation: n8n / Make (scoped tokens)
- Analytics: privacy-respecting web analytics (configured to minimise data)
We do not sell your personal data.
Where we store data & international transfers
We prefer UAE region hosting. If a processor stores/backs up data outside the UAE, we use appropriate safeguards (e.g., contractual clauses/adequacy). Client SoWs/DPAs can specify UAE-only residency.
Client work: Controller vs Processor
- For our website, marketing, contracting, and support, AiGeeks is Controller.
- When we process data inside a client's product or environment, you are Controller and AiGeeks is Processor. We'll sign a Data Processing Addendum (DPA) on request that covers instructions, confidentiality, sub-processors, security, and deletion/return at the end of the engagement.
Security
We apply reasonable technical and organizational measures: role-based access (RBAC), MFA, encrypted secrets/keys, least-privilege IAM, network isolation, audit logs, and release/change controls. We train our team on data handling and confidentiality.
How long we keep data
- Website/lead data: 24 months from last interaction or until you withdraw consent.
- Contract & project records: For the contract term plus the period required by law or to establish/defend legal claims.
- Access tokens/credentials: Only for the duration and scope of the engagement; revoked at off-boarding.
Your rights (PDPL / DIFC)
Subject to law, you can request:
- Access to your data
- Correction of inaccurate data
- Deletion of data we no longer need
- Restriction or objection to certain processing
- Portability (copy of data you provided)
- Withdraw consent for optional uses (e.g., marketing/analytics)
MAILTo exercise rights, email E. We may need to verify your identity. We respond within the timelines required by law.
Children
Our website and services are for business users. We don’t knowingly collect data from children.
Automated decision-making
We don’t make decisions with legal or similarly significant effects based solely on automated processing.
Third-party links
Our site may link to external sites with their own privacy policies. We’re not responsible for their practices.
Changes to this policy
We may update this notice from time to time. We’ll change the "Last updated" date above and, for material changes, provide a prominent notice (and email active clients).
