Privacy Policy

This Policy explains how MindBridge (“MindBridge”, “we”, “us”) collects, uses, shares and protects personal data when you visit our website, contact us, or use our AI assistant services. We handle personal data in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and other applicable laws.

1. Who is responsible for your data. For website visitors, prospects and our own Clients, we decide how and why data is used (we are the “controller”). When a Client uses our assistants to talk to their own customers, the Client decides why that data is used and we process it on the Client's behalf and instructions (we are the “processor”). If you are a Client's customer and want to exercise your rights, please contact that business first; we will help them respond.

2. Data we collect.

• Contact and business details you give us: name, work email, phone number, company name, job title and message content.
• Conversation data: messages, names or profile details shown by the messaging platform, phone number or account identifier, timestamps, and information a person chooses to share in a chat.
• Usage and technical data: device and browser type, IP address, pages viewed, approximate location, and cookies or similar technologies.
• Account and billing data for Clients: business contact details and payment records. We do not store full card details on our own systems.

We do not ask for sensitive personal data such as health, religion, biometric or government ID numbers, and ask that you do not share it with the assistant.

3. Why we use data and our lawful basis.

• To provide, operate and support the Services: performance of a contract or steps before one.
• To respond to enquiries and arrange demos: your request and our legitimate business interests.
• To keep the Services secure, prevent abuse and fix errors: legitimate interests and legal obligations.
• To improve quality and reliability: legitimate interests, using aggregated or de-identified data where practical.
• To send marketing about our services: your consent, which you can withdraw at any time.
• To meet legal, tax and regulatory duties.

We do not sell personal data, and we do not use Client conversation data to advertise to individuals.

4. AI and automated responses. Our assistants use artificial intelligence to generate replies. People are told when they are speaking with an AI assistant. We do not use the assistant to make decisions that have legal or similarly significant effects on an individual without human involvement. You may ask the relevant business to review any outcome you disagree with.

5. Who we share data with. We share data only as needed with: (a) service providers that supply hosting, database, messaging, analytics, communications, AI processing and payment services, under contracts requiring confidentiality and appropriate security; (b) the Client whose assistant you spoke with; (c) professional advisers; (d) authorities where the law requires; and (e) a successor in a merger or sale of the business, with notice to you. We do not disclose the names of individual vendors in this Policy, but will provide categories and, where required by law, further details on request.

6. International transfers. Some providers process data outside the UAE. Where we transfer personal data abroad, we do so only where the destination offers adequate protection under UAE law or where safeguards such as contractual clauses, your consent, or another lawful ground apply.

7. Retention. We keep personal data only as long as needed for the purposes above or as the law requires. Typical periods: enquiries and demo requests up to 12 months after last contact; Client conversation data for the subscription term plus up to 90 days unless the Client asks for earlier deletion; billing records for the period required by UAE law. After that we delete or de-identify the data.

8. Security. We use access controls, encryption in transit and at rest where appropriate, restricted staff access and regular reviews. No system is completely secure, but if a breach poses a risk to individuals we will notify the UAE Data Office, affected Clients and individuals as the law requires.

9. Your rights. Subject to law, you may ask us to: confirm and give you access to your personal data; correct inaccurate data; delete it; restrict or object to processing; receive it in a portable format; stop direct marketing; withdraw consent; and object to decisions based solely on automated processing. Email hello@mindbridge.agency with your request; we may need to verify your identity and will reply within a reasonable period, normally 30 days. You may also complain to the UAE Data Office.

10. Cookies and analytics. Our website uses essential cookies and, with your consent where required, analytics and marketing cookies. You can manage cookies in your browser or through our cookie banner.

11. Marketing messages. We only send marketing emails or messages to people who have agreed or where the law allows. Every message includes a simple way to opt out, and we honour opt-outs promptly. Reply STOP or use the unsubscribe link at any time.

12. Children. Our Services are for businesses and are not directed at anyone under 18. We do not knowingly collect children's data; contact us if you believe we have.

13. Third-party links. Our website may link to other sites. We are not responsible for their privacy practices.

14. Changes. We will post changes here and update the date above; for material changes we will notify Clients by email.

15. Contact. MindBridge · hello@mindbridge.agency · https://www.mindbridge.agency