Effective Date: August 23, 2025
Last Updated: August 23, 2025

Almahbara AI Solutions ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and disclose personal data when you visit our website (https://almahbara.ai) or use our AI-powered subscription services.

By accessing or using our services, you agree to the terms of this Privacy Policy.

• Account Data: Name, email address, phone number, company information, billing address
• Payment Information: Payment processing via Paddle (Merchant of Record); we do not store card details. Customers may see ‘PADDLE’* on their bank statement
• Subscription Data: Plan type, subscription status, usage history, billing records

• Usage Data: IP address, browser type, device information, visit duration, pages accessed
• Performance Analytics: Site interaction patterns, feature usage, error logs
• Cookies & Tracking: See Section 6 for detailed information

• Interaction Logs: User prompts, AI responses, conversation context (for service improvement)
• Content Preferences: Topics of interest, content consumption patterns
• Customization Settings: User preferences for AI behavior and content delivery

• Providing access to our AI-powered news and content platform
• Processing subscription payments and managing billing
• Personalizing content recommendations and AI responses
• Maintaining platform security and preventing abuse

• Customer support and communication
• Service improvement and feature development
• Legal compliance and regulatory obligations
• Marketing communications (with your consent)

• Training and improving our AI models (using anonymized data only)
• Contextual conversation memory within your session
• Content quality assessment and safety filtering

We process your data based on:

• Contract Performance: To provide paid subscription services
• Legitimate Interests: Platform security, service improvement, fraud prevention
• Consent: Marketing communications, optional analytics
• Legal Compliance: Tax obligations, regulatory requirements

  Data Type Retention Period Reason     Account Information Duration of subscription + 7 years Legal/tax obligations   Payment Records 10 years after transaction Financial compliance   AI Conversation Logs 90 days Service improvement   Usage Analytics 25 months Performance optimization   Marketing Data Until consent withdrawn Communication preferences     

• Payment processing via Paddle (Merchant of Record); we do not store card details. Customers may see ‘PADDLE’* on their bank statement
• We do not store credit card numbers, security codes, or banking details
• Payment data is encrypted using industry-standard protocols
• Subscription billing is automated through secure APIs

• We retain billing addresses and transaction records for tax compliance
• Invoices and receipts are stored for accounting purposes
• Refund requests are processed according to our Terms of Service

• Authentication: Secure login and session management
• Security: CSRF protection and fraud prevention
• Functionality: User preferences and settings

• Google Analytics: Site usage patterns and performance metrics
• Conversion Tracking: Subscription effectiveness (Meta Pixel, if applicable)
• Heatmaps: User interaction analysis (Hotjar, if applicable)

Cookie Management: You can control cookies through your browser settings or our preference center.

• Hosting & Infrastructure:
  Our services are hosted on secure servers managed either directly by us or through trusted data center providers. All hosting environments comply with international security and privacy standards (ISO 27001, SOC 2, GDPR, UAE Data Protection Law)
• Payment Processing: Payment processing via Paddle (Merchant of Record); we do not store card details. Customers may see ‘PADDLE’ on their bank statement
• Analytics: Google Analytics for usage insights
• Email: Professional email services for communications
• Support: Customer service platforms (with data encryption)

We may disclose information when required by law, court order, or to protect our rights and users' safety.

• Use conversation context to improve user experience within your session
• Analyze aggregated, anonymized usage patterns to enhance AI performance
• Apply safety filters to prevent harmful or inappropriate content

• Use your personal conversations to train public AI models
• Share individual user prompts with third-party AI providers
• Retain conversation history beyond 90 days without explicit consent

Our AI systems may use large language models from providers like OpenAI or Anthropic, but your personal data is not shared with these providers for training purposes.

• Primary servers located in UAE/Middle East
• Some services may process data in EU/US (with adequate safeguards)
• All transfers comply with GDPR and international data protection standards

• Standard Contractual Clauses (SCCs) with all processors
• Regular security audits and compliance reviews
• Data encryption in transit and at rest

• Encryption: AES-256 for data at rest, TLS 1.3 for data in transit
• Access Controls: Multi-factor authentication and role-based permissions
• Infrastructure: SOC 2 certified cloud providers
• Monitoring: 24/7 security monitoring and threat detection

• Regular employee privacy training
• Data breach response procedures
• Annual security audits and penetration testing

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request removal of your data ("Right to be Forgotten")
• Portability: Receive your data in machine-readable format

• Restriction: Limit processing of your data
• Objection: Opt-out of legitimate interest processing
• Automated Decisions: Contest AI-driven decisions

• Know: Categories of personal information collected
• Delete: Request deletion of personal information
• Opt-Out: Refuse sale of personal information (we don't sell data)
• Non-Discrimination: Equal service regardless of privacy choices

To exercise rights: Email  info@almahbara.ai with proof of identity.

• Cancel subscription anytime through your account dashboard
• Access to paid features continues until end of billing period
• Personal data deletion available upon request after cancellation

• Account data retained for 30 days (for reactivation)
• Billing records kept for legal compliance (7 years)
• AI conversation logs deleted within 90 days
• Complete data deletion available on request

• Our services are not intended for children under 13
• We do not knowingly collect data from children without parental consent
• Parents can request deletion of their child's data by contacting us
• Age verification may be implemented for sensitive content

• Data minimization: We collect only necessary information
• Purpose limitation: Data used only for stated purposes
• Storage limitation: Automatic deletion based on retention schedules
• Transparency: Clear consent mechanisms and opt-out options

In case of a data breach affecting your personal information:

• Immediate Response: Contain and assess the breach within 24 hours
• Authority Notification: Report to relevant data protection authorities within 72 hours
• User Notification: Inform affected users without undue delay if high risk
• Remediation: Provide guidance on protective measures

• Our platform may contain links to external websites or services
• We are not responsible for third-party privacy practices
• Review privacy policies of linked sites before providing personal information
• Integration partners must meet our data protection standards

• Major updates will be announced 30 days in advance
• Minor clarifications take effect immediately
• Email notifications for significant changes
• Continued use constitutes acceptance of updates

• All policy versions archived and accessible
• Change log available upon request
• Effective dates clearly marked

• Compliance with UAE Data Protection Law
• Adherence to regional cybersecurity requirements

• Full GDPR compliance for EU users
• Data Protection Officer available for EU inquiries

• CCPA compliance for California residents
• Sector-specific regulations as applicable

Almahbara AI Solutions
Sharjah Publishing City Free Zone
United Arab Emirates
📧 General: info@almahbara.ai

🌐 Website: www.almahbara.ai/privacy
📞 Phone: +9647702750260

• Privacy inquiries: 5 business days
• Data subject requests: 30 days (may extend to 60 days for complex requests)
• Breach notifications: Immediate assessment, formal response within 72 hours

This Privacy Policy is designed to evolve with our growing business and changing legal requirements. As we expand our services and partnerships, we may update this policy to:

• Reflect new features or service offerings
• Comply with emerging regulations in our operating regions
• Incorporate feedback from users and privacy advocates
• Adopt industry best practices as they develop

Current Status: This comprehensive policy includes provisions for services currently in development to ensure transparency from day one.

Update Philosophy: We believe in proactive privacy protection rather than reactive compliance, which is why some terms may apply to future services not yet launched.

Thank you for trusting Almahbara AI Solutions with your data. We are committed to maintaining the highest standards of privacy protection while delivering innovative AI-powered services.

Last Review: August 2025
Next Scheduled Review: February 2026

This Privacy Policy is governed by UAE law and complies with international data protection standards including GDPR and CCPA. This policy is subject to updates as our business grows and regulatory requirements evolve.