Skip to content

Privacy

Draft privacy topics for Egypt, UAE and Saudi Arabia. Awaiting legal review.

Egypt

Draft — to be reviewed by a lawyer before launch

Version: 0.1-draft · Date:

  1. 1.Controller identity and contact

    [Text to be supplied after legal review]

  2. 2.Data categories and purposes

    Product records include account and session details, chats, files, outputs, Memory, usage, payments, audit events, email messages and share links.

    [Text to be supplied after legal review]

  3. 3.Legal bases and consent

    [Text to be supplied after legal review]

  4. 4.AI processing and processor categories

    Processor categories include AI models, hosting and database, payments, search and email.

    [Text to be supplied after legal review]

  5. 5.Payment processing

    [Text to be supplied after legal review]

  6. 6.Provisional retention defaults

    These PRD defaults require lawyer confirmation: account data lasts for the account lifetime; deleted accounts and content are purged after 30 days. Sessions last until revoked or 30 days absolute. Chats and Memory remain until deleted; files and outputs follow their owner. Usage detail lasts 24 months, then is aggregated. Payment retention awaits legal review (placeholder: 7 years). Audit logs stay online for 24 months, then are archived. Sent or expired email messages last 90 days; content-free logs last 30 days. Share links last until revoked or expired.

    [Text to be supplied after legal review]

  7. 7.Deletion and retained records

    The product specifies immediate soft deletion and purge on day 30. Payment and audit records are retained separately; usage references are removed and aggregates kept.

    [Text to be supplied after legal review]

  8. 8.Access, correction, deletion, portability and objection

    The product includes account export and deletion controls. Export download links have a configured lifetime, default 7 days.

    [Text to be supplied after legal review]

  9. 9.Shared content and Memory controls

    Share links expose only selected content and exports, can expire and be revoked, and show owners a view count. Memory can be viewed, edited, deleted or disabled; deletion applies from the next turn. Staff cannot read user content; enterprise reports contain metadata only.

    [Text to be supplied after legal review]

  10. 10.Marketing preferences

    Marketing requires opt-in and can be withdrawn in Settings or through unsubscribe.

    [Text to be supplied after legal review]

  11. 11.Cross-border transfers and storage location

    [Text to be supplied after legal review]

  12. 12.Security measures

    [Text to be supplied after legal review]

  13. 13.Breach notification

    [Text to be supplied after legal review]

  14. 14.Children

    [Text to be supplied after legal review]

  15. 15.Regulator and complaints

    [Text to be supplied after legal review]

  16. 16.Market personal-data law

    [Text to be supplied after legal review]

UAE

Draft — to be reviewed by a lawyer before launch

Version: 0.1-draft · Date:

  1. 1.Controller identity and contact

    [Text to be supplied after legal review]

  2. 2.Data categories and purposes

    Product records include account and session details, chats, files, outputs, Memory, usage, payments, audit events, email messages and share links.

    [Text to be supplied after legal review]

  3. 3.Legal bases and consent

    [Text to be supplied after legal review]

  4. 4.AI processing and processor categories

    Processor categories include AI models, hosting and database, payments, search and email.

    [Text to be supplied after legal review]

  5. 5.Payment processing

    [Text to be supplied after legal review]

  6. 6.Provisional retention defaults

    These PRD defaults require lawyer confirmation: account data lasts for the account lifetime; deleted accounts and content are purged after 30 days. Sessions last until revoked or 30 days absolute. Chats and Memory remain until deleted; files and outputs follow their owner. Usage detail lasts 24 months, then is aggregated. Payment retention awaits legal review (placeholder: 7 years). Audit logs stay online for 24 months, then are archived. Sent or expired email messages last 90 days; content-free logs last 30 days. Share links last until revoked or expired.

    [Text to be supplied after legal review]

  7. 7.Deletion and retained records

    The product specifies immediate soft deletion and purge on day 30. Payment and audit records are retained separately; usage references are removed and aggregates kept.

    [Text to be supplied after legal review]

  8. 8.Access, correction, deletion, portability and objection

    The product includes account export and deletion controls. Export download links have a configured lifetime, default 7 days.

    [Text to be supplied after legal review]

  9. 9.Shared content and Memory controls

    Share links expose only selected content and exports, can expire and be revoked, and show owners a view count. Memory can be viewed, edited, deleted or disabled; deletion applies from the next turn. Staff cannot read user content; enterprise reports contain metadata only.

    [Text to be supplied after legal review]

  10. 10.Marketing preferences

    Marketing requires opt-in and can be withdrawn in Settings or through unsubscribe.

    [Text to be supplied after legal review]

  11. 11.Cross-border transfers and storage location

    [Text to be supplied after legal review]

  12. 12.Security measures

    [Text to be supplied after legal review]

  13. 13.Breach notification

    [Text to be supplied after legal review]

  14. 14.Children

    [Text to be supplied after legal review]

  15. 15.Regulator and complaints

    [Text to be supplied after legal review]

  16. 16.Market personal-data law

    [Text to be supplied after legal review]

Saudi Arabia

Draft — to be reviewed by a lawyer before launch

Version: 0.1-draft · Date:

  1. 1.Controller identity and contact

    [Text to be supplied after legal review]

  2. 2.Data categories and purposes

    Product records include account and session details, chats, files, outputs, Memory, usage, payments, audit events, email messages and share links.

    [Text to be supplied after legal review]

  3. 3.Legal bases and consent

    [Text to be supplied after legal review]

  4. 4.AI processing and processor categories

    Processor categories include AI models, hosting and database, payments, search and email.

    [Text to be supplied after legal review]

  5. 5.Payment processing

    [Text to be supplied after legal review]

  6. 6.Provisional retention defaults

    These PRD defaults require lawyer confirmation: account data lasts for the account lifetime; deleted accounts and content are purged after 30 days. Sessions last until revoked or 30 days absolute. Chats and Memory remain until deleted; files and outputs follow their owner. Usage detail lasts 24 months, then is aggregated. Payment retention awaits legal review (placeholder: 7 years). Audit logs stay online for 24 months, then are archived. Sent or expired email messages last 90 days; content-free logs last 30 days. Share links last until revoked or expired.

    [Text to be supplied after legal review]

  7. 7.Deletion and retained records

    The product specifies immediate soft deletion and purge on day 30. Payment and audit records are retained separately; usage references are removed and aggregates kept.

    [Text to be supplied after legal review]

  8. 8.Access, correction, deletion, portability and objection

    The product includes account export and deletion controls. Export download links have a configured lifetime, default 7 days.

    [Text to be supplied after legal review]

  9. 9.Shared content and Memory controls

    Share links expose only selected content and exports, can expire and be revoked, and show owners a view count. Memory can be viewed, edited, deleted or disabled; deletion applies from the next turn. Staff cannot read user content; enterprise reports contain metadata only.

    [Text to be supplied after legal review]

  10. 10.Marketing preferences

    Marketing requires opt-in and can be withdrawn in Settings or through unsubscribe.

    [Text to be supplied after legal review]

  11. 11.Cross-border transfers and storage location

    [Text to be supplied after legal review]

  12. 12.Security measures

    [Text to be supplied after legal review]

  13. 13.Breach notification

    [Text to be supplied after legal review]

  14. 14.Children

    [Text to be supplied after legal review]

  15. 15.Regulator and complaints

    [Text to be supplied after legal review]

  16. 16.Market personal-data law

    [Text to be supplied after legal review]