Privacy Policy

01Who we are

M.A.D.S AI provides AI receptionists, conversational AI and business automation services to companies. This policy explains how we handle personal data when you visit our website, enquire about our services or use a M.A.D.S AI assistant deployed for a client.

02Data we collect

• Contact details you submit, such as name, company, email address and phone number.
• Message content and conversation transcripts from our website chat and other channels.
• Technical data such as IP address, browser type, device type, referring page and pages viewed.
• Commercial records including subscriptions, invoices and support correspondence.
• Onboarding material provided by clients, such as FAQs, pricing and service documentation.

03How we use data

• To respond to enquiries and provide quotations.
• To deliver, operate, support and improve implementation services and subscriptions.
• To train and refine client assistants using approved business knowledge.
• To send service communications, and marketing messages where you have opted in.
• To manage billing, prevent fraud and meet legal or accounting obligations.

04Legal basis

We process personal data on the basis of performance of a contract, our legitimate interest in operating and improving our services, compliance with legal obligations, and consent where consent is required — for example for marketing messages or non-essential cookies. Consent can be withdrawn at any time.

05AI conversations

Conversations with a M.A.D.S AI assistant may be stored so that answers can be reviewed for accuracy, escalated to human staff and improved over time. Where an assistant is deployed for a client, that client is the controller of the customer data captured in those conversations and M.A.D.S AI acts as a processor on their instructions.

Please do not enter payment card details, passwords, government identifiers or sensitive health information into a chat conversation.

06Cookies and analytics

Our website uses essential cookies required for the site to function, and may use analytics cookies to understand how pages perform. Analytics data is used in aggregate. You can block or delete cookies in your browser settings; essential cookies are needed for core features such as the chat widget.

07Third-party integrations

To deliver our services we rely on third-party providers, including AI model providers, cloud hosting, messaging platforms such as WhatsApp Business and Meta, calendar providers, CRM platforms, email delivery services and payment processors.

These providers process data only to the extent needed to deliver their function, under contractual confidentiality and security obligations. Data may be processed outside the UAE; where that happens we use providers offering appropriate safeguards.

08Data sharing

We do not sell personal data. We share it only with the service providers described above, with a client whose assistant captured the data, with professional advisers where necessary, and with authorities where disclosure is required by law.

09Retention

Enquiry data is retained for up to 24 months from the last interaction unless you ask us to delete it sooner. Conversation transcripts are retained for up to 12 months unless a client instructs a different period. Contractual, invoicing and tax records are retained for the period required by UAE law. When data is no longer needed, it is deleted or anonymised.

10Security

We apply access controls on a least-privilege basis, encryption in transit, credential management for integrations, monitored infrastructure and regular review of who can access client environments. No system is completely secure, so we also maintain procedures for detecting and responding to incidents, and will notify affected parties where notification is required.

11Your rights

To exercise any of these rights, contact us through the channels listed on our Contact page. We respond within 30 days and may ask for information to verify your identity.

• Request access to the personal data we hold about you.
• Ask us to correct inaccurate or incomplete data.
• Request deletion of your data where we have no ongoing lawful basis to retain it.
• Object to or request restriction of certain processing.
• Withdraw consent for marketing communications at any time.
• Request a copy of your data in a portable format.

12Children

Our services are intended for businesses. We do not knowingly collect personal data from children. If you believe a child has provided data through one of our channels, contact us and we will delete it.

13Changes and governing law

We may update this policy to reflect changes in our services or the law, and will publish the revised version on this page with a new date. This policy is governed by the laws of the United Arab Emirates.