Last updated: June 2026
This Privacy Policy explains how Solid Automai Solutions – FZCO, trading as AutomAI (“AutomAI”, “we”, “us”, “our”), collects, uses, stores, and protects your personal data when you visit automai.io or engage with our services.
We are committed to handling personal data responsibly, transparently, and in compliance with applicable law — including the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) and, where applicable, the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).
Please read this policy carefully. If you have questions, contact us at info@automai.io.
1. Who We Are
The data controller responsible for your personal data is:
Solid Automai Solutions – FZCO (trading as AutomAI)
IFZA Business Park, Unit 79964-001, Building A1
Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
Email: info@automai.io
Website: automai.io
As the data controller, we determine the purposes and means of processing your personal data. Where we engage third-party service providers to process data on our behalf, they act as data processors and are contractually bound to handle your data securely and only as instructed by us.
2. Scope of This Policy
This policy applies to:
- Visitors to our website at automai.io;
- People who contact us through our website contact form, email, or booking tools;
- Prospects and leads we connect with via LinkedIn or other professional channels;
- Existing and former clients whose personal data we hold in connection with service delivery;
- Subscribers to our email newsletters or marketing communications.
It does not apply to the practices of third-party websites linked from our site, including LinkedIn or YouTube. We encourage you to review their privacy policies separately.
CloudQonnect (cloudqonnect.com) is a SaaS platform developed and operated by AutomAI. If you use CloudQonnect, its own Terms of Service and Privacy Policy apply in addition to this policy.
3. What Personal Data We Collect
We collect only the data that is necessary for the stated purpose (data minimisation). Here is what we collect, depending on how you interact with us:
3.1 Data You Provide Directly
Contact form & enquiries
When you fill in our contact form or book a discovery call:
• First name and last name
• Email address
• Phone number (optional)
• Company name and/or website
• Your message or enquiry
Client onboarding & service delivery
When you become a client, we may additionally collect:
• Billing name and address
• VAT or tax identification number (where applicable)
• Login credentials or access details for platforms we work on together (stored securely and used only for delivery purposes)
• Business information, project briefs, brand assets, and other materials you share with us
Email marketing & newsletter sign-ups
If you subscribe to our newsletter or content updates:
• Email address
• First name (optional, for personalisation)
3.2 Data Collected Automatically
When you visit automai.io, certain technical data is collected automatically by our hosting provider (SiteGround) and analytics tools:
• IP address (anonymised where possible)
• Browser type and version
• Operating system
• Referring URL and pages visited
• Time and date of visit
• Approximate geographic location (country/city level)
This data is used solely to maintain website security and performance, and to understand visitor behaviour in aggregate. It does not identify you personally unless combined with other information.
3.3 Cookies & Tracking Technologies
Our website uses cookies and similar technologies. See Section 8 (Cookies) for full details. You can manage your cookie preferences through our cookie consent tool or your browser settings.
3.4 Data from Third-Party Platforms
If you interact with us on LinkedIn (e.g. respond to an outreach message, comment on a post, or connect with us), LinkedIn may share certain profile data with us, consistent with your LinkedIn privacy settings. We process such data only for the purpose of managing our professional relationship with you.
Our website embeds YouTube videos (Google LLC). When you interact with embedded videos, YouTube may set its own cookies and collect data in line with Google’s Privacy Policy (policies.google.com/privacy).
4. How We Use Your Personal Data
We use your personal data for the following purposes:
• Responding to enquiries and booking requests received via our website or other channels;
• Managing discovery calls, consultations, and the sales process;
• Delivering the services you have contracted us for, including automation builds, creative work, and consultancy;
• Sending transactional communications related to your project (updates, invoices, deliverables);
• Sending marketing communications about our services, case studies, and insights — only where you have given consent or where we have a legitimate interest as a B2B service provider, with an easy option to unsubscribe at any time;
• Improving our website and understanding how visitors use it, using anonymised or aggregated analytics data;
• Complying with legal and regulatory obligations, including tax, accounting, and applicable data protection law.
We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects.
5. Legal Basis for Processing
Under both the UAE PDPL and GDPR, we must have a lawful basis for processing your personal data. The bases we rely on are:
• Performance of a contract: processing necessary to deliver a service you have engaged us for, or to take steps at your request before entering into a contract (e.g. preparing a proposal);
• Legitimate interests: processing necessary for our legitimate business interests, such as responding to enquiries, managing client relationships, sending B2B marketing communications to business contacts, and improving our website — provided these interests are not overridden by your rights and interests;
• Consent: where you have clearly and freely agreed to processing, such as signing up for our newsletter. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Legal obligation: processing required to comply with a legal or regulatory requirement, such as keeping financial records.
Where we rely on legitimate interests, you have the right to object to that processing at any time (see Section 9).
6. How Long We Keep Your Data
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Our standard retention periods are:
• Website enquiries & leads (non-client): up to 24 months from last interaction, unless you ask us to delete your data sooner;
• Client data (project files, communications, deliverables): 5 years from the end of the engagement, in line with standard commercial and tax record-keeping requirements;
• Financial and billing records: 7 years, as required by UAE tax and accounting regulations;
• Email marketing subscribers: until you unsubscribe or request deletion;
• Website analytics data: anonymised or aggregated; not subject to individual retention limits.
At the end of the applicable retention period, we securely delete or anonymise your personal data. You may request early deletion at any time (see Section 9).
7. Who We Share Your Data With
We do not sell or rent your personal data. We may share it only in the following circumstances:
7.1 Trusted Service Providers (Data Processors)
We engage the following categories of third-party service providers who process personal data on our behalf, under data processing agreements and only as instructed:
• CRM & marketing automation: GoHighLevel / CloudQonnect (used for contact management, booking, email, and workflow automation);
• Website hosting: SiteGround (website infrastructure and security);
• Analytics: Google Analytics (anonymised website usage data);
• Video content: YouTube / Google LLC (embedded video players);
• Email delivery: any transactional email provider used for sending communications;
• Payment processing: invoicing and payment platforms used for billing (details provided at point of transaction);
• Automation & AI tools: third-party platforms used during service delivery (disclosed to clients in service agreements where relevant).
7.2 Sub-contractors
We work with a small team of specialist sub-contractors (e.g. automation engineers) who may need access to client data in order to deliver work. They are bound by confidentiality obligations equivalent to our own.
7.3 Legal Requirements
We may disclose personal data to authorities or third parties when required by law, court order, or to protect our legal rights.
7.4 Business Transfers
In the event of a merger, acquisition, or sale of business assets, personal data may be transferred to the relevant party as part of that transaction. We will notify affected individuals in advance where required by law.
8. Cookies
Cookies are small text files stored on your device when you visit a website. We use cookies to make our website function properly, to understand how it is used, and where applicable to support our marketing.
8.1 Types of Cookies We Use
Strictly necessary cookies
Required for the website to function. These cannot be disabled. They include session cookies and security tokens.
Analytics cookies
We use Google Analytics to understand how visitors use our site (pages visited, time spent, traffic sources). This data is anonymised and aggregated. Analytics cookies are only set with your consent.
Third-party / embedded content cookies
YouTube (Google LLC) may set cookies when you interact with embedded videos, regardless of your cookie settings on our site. We recommend reviewing Google’s cookie policy at policies.google.com/technologies/cookies.
8.2 Managing Cookies
You can manage your cookie preferences at any time:
• Via our cookie consent banner when you first visit the site;
• Through your browser settings (note: disabling all cookies may affect website functionality).
9. Your Rights
Under the UAE PDPL and GDPR (where applicable), you have the following rights in relation to your personal data. We will respond to all requests within 30 days. We may ask you to verify your identity before processing your request.
• Right to access: request a copy of the personal data we hold about you, and information about how we use it;
• Right to rectification: request correction of inaccurate or incomplete data;
• Right to erasure (‘right to be forgotten’): request deletion of your data when it is no longer necessary for the purpose it was collected, subject to legal retention obligations;
• Right to restriction of processing: request that we limit how we process your data in certain circumstances (e.g. while a dispute is resolved);
• Right to data portability: receive a copy of data you have provided to us in a structured, machine-readable format, where technically feasible;
• Right to object: object to processing based on legitimate interests (including direct marketing) — we will stop unless we can demonstrate compelling legitimate grounds;
• Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior processing;
• Right to lodge a complaint: if you believe we have mishandled your data, you may complain to the UAE Data Office (for UAE PDPL) or your national data protection authority (for GDPR, if you are in the EU/EEA).
To exercise any of these rights, contact us at info@automai.io. We will respond within 30 days and will not charge a fee for reasonable requests.
10. International Data Transfers
AutomAI is registered in the UAE and operates with team members and clients across the EU, including Spain. As a result, personal data may be transferred between jurisdictions.
When transferring personal data from the EU/EEA to the UAE or other countries not recognised as providing adequate data protection by the European Commission, we ensure appropriate safeguards are in place, including:
• Standard Contractual Clauses (SCCs) approved by the European Commission (for GDPR-covered transfers);
• Compliance with UAE PDPL transfer rules, including ensuring the recipient country provides adequate protection or that appropriate contractual safeguards apply.
Our third-party service providers (including GoHighLevel and Google) may also transfer data internationally. Where they do so, they are required to comply with applicable data protection law and to have appropriate safeguards in place.
11. Data Security
We take the security of your personal data seriously and implement appropriate technical and organisational measures, including:
• HTTPS encryption for all data transmitted via our website;
• Industry-standard security protocols on our CRM platform (GoHighLevel / CloudQonnect);
• Access controls limiting who within our team can access personal data;
• Confidentiality obligations for all sub-contractors and service providers;
• Regular review of our security practices.
No method of data transmission or storage over the internet is completely secure. While we do our best to protect your data, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority and, where required, affected individuals without undue delay and no later than 72 hours of becoming aware of the breach (where GDPR applies).
12. Children’s Privacy
Our website and services are intended for business professionals and organisations. They are not directed at children under the age of 16. We do not knowingly collect or process personal data from children. If you become aware that a child has submitted personal data to us, please contact us at info@automai.io and we will delete it promptly.
13. Links to Other Websites
Our website contains links to external websites, including LinkedIn and YouTube. This Privacy Policy applies only to automai.io. Once you leave our site, we are not responsible for the privacy practices of other websites and encourage you to read their privacy policies before sharing any personal data with them.
CloudQonnect (cloudqonnect.com) is AutomAI’s own platform and is subject to its own Privacy Policy, which governs data processed within that platform.
14. Marketing Communications
We may send you marketing communications about our services, insights, and updates. For contacts in a B2B context, we may do this on the basis of legitimate interest where we believe the content is relevant to your professional role. For all other recipients, we will only send marketing emails where you have given explicit consent.
Every marketing email we send includes an unsubscribe link. You can opt out at any time by clicking that link or by emailing info@automai.io. Opting out of marketing communications does not affect transactional or service-related messages.
15. Automated Decision-Making & Profiling
We do not make decisions about you solely based on automated processing that produce legal or similarly significant effects. Any use of AI tools within our service delivery involves human oversight and does not replace human judgement in decisions that materially affect you.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable law. When we make material changes, we will update the date at the top of this page and, where appropriate, notify active clients directly.
The most current version of this policy is always available at automai.io/privacy-policy. We encourage you to review it periodically. Continued use of our website after changes have been posted constitutes your acceptance of the updated policy.
17. Contact Us & Supervisory Authorities
For any questions, requests, or complaints regarding this Privacy Policy or the way we handle your personal data, please contact us first:
AutomAI — Solid Automai Solutions – FZCO
IFZA Business Park, Unit 79964-001, Building A1
Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
Email: info@automai.io
Website: automai.io
We aim to resolve all privacy-related concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the relevant supervisory authority:
• UAE: UAE Data Office (uaedataoffice.gov.ae)
• European Union: your national Data Protection Authority (DPA) — a list is available at edpb.europa.eu