Privacy Policy

Effective Date: September 2026

1. Introduction

Almasar Aldaayim for Artificial Intelligence and Communication Technologies JSC (“Amadat AI,” “Company,” “we,” “our,” or “us”) respects your privacy and is committed to protecting your information.

This Privacy Policy explains how we collect, use, store, disclose, and safeguard information when you:

• Visit Amadat websites (including amadat.ai)
• Access Amadat AI platforms, API endpoints, dataset annotation engines, or hosted portals
• Create accounts or configure workspace tenant environments
• Access dashboards, enterprise interfaces, or custom analytics consoles
• Submit service inquiries, onboarding documentation, or intake forms
• Use our software, automation tools, AI features, model orchestration pipelines, or infrastructure services
• Interact with our support teams, engineering staff, or communications

By accessing or using our services, you agree to the practices described in this Privacy Policy.

2. Scope of This Policy

This Privacy Policy applies to:

• amadat.ai and associated subdomains
• Amadat AI-hosted application environments and API gateways
• Data management engines, annotation tools, and dataset orchestration systems
• Enterprise onboarding and workspace dashboards
• Landing pages and hosted customer portals
• Automation workflows, micro-agent pipelines, and AI-assisted models
• Direct communication and technical support channels
• Related software, SDKs, and edge services operated by Amadat AI

Authorized sub-users, team members, and client administrators operating within Amadat AI-hosted workspace infrastructure operate under shared tenant policies. Information submitted through Amadat AI-hosted platforms may be accessible to:

• The designated account owner or primary tenant administrator
• Authorized sub-users, developers, or workspace managers
• Amadat AI system administrators and infrastructure engineers
• Customer support and security personnel
• Compliance or operational teams where necessary

Access is strictly granted for operational, security, fraud prevention, service delivery, and platform administration purposes.

3. Information We Collect

A. Information You Provide Directly

We may collect information you provide when you:

• Create accounts or establish enterprise workspace environments
• Subscribe to software tiers, API plans, or managed infrastructure services
• Submit service requests, onboarding questionnaires, or scope assessments
• Fill out web forms or schedule technical demonstrations
• Upload documents, training datasets, or code specifications
• Customize platform settings, models, or workflow triggers
• Contact customer support or engage with our technical team
• Communicate with us through the platform or official email channels

This may include:

Personal Information

• Full name
• Email address
• Phone number
• Mailing or corporate address
• Account login credentials and multi-factor authentication details
• Professional profile details and role titles

Business Information

• Business or enterprise legal name
• Doing Business As (DBA) name
• Business physical address and registered locations
• Primary website domain and technical infrastructure details
• Industry classification and operational domain
• Enterprise AI deployment requirements and technical specifications
• Business contact details for billing and administrative leads

Sensitive Business & Technical Information

Where applicable:

• Commercial registration or tax identification details
• Authorized account ownership and verification documents
• Identity documents of legal representatives (when required for enterprise contracts)
• Billing details, banking identifiers, or wire payment metadata
• Technical configuration files, API access keys, and security credentials

Uploaded Content & Datasets

Users and enterprise tenants may upload:

• Dataset assets (images, annotations, structured text, menu records, schema ontologies)
• Proprietary code, prompts, workflow scripts, and ComfyUI/Ollama pipeline parameters
• Enterprise files, contracts, invoices, and operational reports
• System logs, technical support tickets, and visual attachments
• Custom models, weight configurations, and metadata files

Users are solely responsible for ensuring that all uploaded content and datasets comply with applicable laws, data protection regulations, and do not infringe upon any third-party intellectual property or privacy rights.

B. Information Collected Automatically

When you interact with our websites, APIs, or hosted platforms, we automatically log and collect:

• IP address and network routing information
• Browser type, version, and device language
• Operating system, hardware platform, and display specifications
• Session identifiers and access tokens
• Account login activity, timestamped user actions, and audit logs
• Dashboard navigation, feature usage metrics, and API request rates
• Referral URLs, exit pages, and page load durations
• Technical telemetry, error logs, and performance diagnostic logs
• Security monitoring data, firewalls events, and intrusion detection alerts

We collect device and network information to:

• Maintain system security and service integrity
• Prevent unauthorized access, credential stuffing, and platform abuse
• Authenticate user sessions and validate API request authorizations
• Monitor throughput, latency, and system stability

C. Cookies & Tracking Technologies

We utilize essential cookies, web tokens, and local storage technologies to:

• Maintain active user login sessions
• Authenticate user identities and validate access rights across API endpoints
• Remember user visual preferences, theme choices, and workspace configurations
• Analyze system traffic, API consumption, and user interaction patterns
• Support real-time security monitoring and session validation
• Detect fraudulent activities or abnormal API request spikes

Third-party infrastructure providers, cloud hosting vendors, or security monitoring tools integrated into our stack may also utilize session tokens or performance cookies. You can control or restrict cookie settings via your web browser preferences, though disabling essential cookies may degrade or restrict platform functionality.

4. How We Use Information

We use collected information for the following purposes:

Service Delivery

• Operating and maintaining our websites, hosted portals, and API gateways
• Managing dataset annotation pipelines, schema engines, and workspace accounts
• Provisioning cloud or edge compute instances, model execution, and storage services
• Managing enterprise domain routing, DNS services, and SSL certifications
• Delivering automated agent features and model execution capabilities
• Processing service subscriptions, enterprise contracts, and user licensing

Operations & Technical Support

• Providing technical support, bug fixing, and infrastructure maintenance
• Sending critical system notifications, security advisories, and uptime updates
• Processing enterprise invoices, billing cycles, and payment confirmations
• Responding to user inquiries, feature requests, and support tickets
• Troubleshooting network connectivity, latency, or API integration issues

Security, Risk & Compliance

• Fraud prevention and identity verification
• Security monitoring, vulnerability scanning, and intrusion defense
• Abuse detection, rate limiting, and access privilege enforcement
• Fulfilling statutory legal, tax, and regulatory compliance obligations
• Enforcing our Terms of Service, Statement of Work agreements, and Acceptable Use Policies
• Protecting the integrity, confidentiality, and availability of our infrastructure

Platform Improvement

• Analyzing platform usage trends, system workloads, and user workflows
• Developing new software features, dataset annotation tools, and API options
• Optimizing UI/UX components, dashboard response speeds, and navigation layouts
• Conducting internal load testing, stress tests, and system performance evaluations

AI & Automation Features

Amadat AI uses submitted inputs and system telemetry to:

• Execute user-requested AI models, computer vision tasks, and dataset processing
• Support micro-agent orchestration, automated labeling, and schema mapping
• Generate suggested contents, structured JSON outputs, and automated reports

AI Output Notice: AI-generated outputs are probabilistic in nature, may occasionally contain inaccuracies or hallucinated logic, and require independent human review. Users remain solely responsible for reviewing, validating, and approving all AI-assisted outputs, code, and communications prior to production deployment.

Marketing & Communications

We may use business contact information to:

• Send technical updates, platform release notes, and version announcements
• Deliver service onboarding guides, technical documentation, and best-practice papers
• Inform users of new features, expansion modules, or infrastructure options

Users may opt out of promotional or non-essential email communications at any time by following the unsubscribe instructions included in those messages or by contacting us directly.

Aggregated & Anonymous Data

We may compile, create, and use aggregated, anonymized, or de-identified data sets for:

• Platform performance benchmarking and research
• System architecture optimization and internal metrics
• Industry reports and operational insights

Aggregated and de-identified data cannot reasonably be used to identify any individual user or company.

5. How We Share Information

We do not sell, rent, or trade personal or proprietary customer data to third parties.

We may share information under the following limited circumstances:

Service Providers & Sub-processors

We share necessary operational data with trusted third-party service providers who assist us in operating our platform, including:

• Cloud infrastructure and web hosting vendors
• Database, object storage, and edge compute providers
• API routing, load balancing, and security firewall services
• Email delivery and transactional notification services
• Technical analytics, log monitoring, and error-tracking tools
• Domain registrars and SSL certificate authorities
• Payment gateways and financial processing partners

All service providers are bound by strict contractual confidentiality, data protection agreements, and are prohibited from using your data for any purpose other than providing services to Amadat AI.

Internal Access & Authorized Workspace Users

Content and data uploaded to workspace environments or hosted systems may be accessible to:

• Account owners, designated team members, and authorized sub-users
• Amadat AI system administrators, database engineers, and support engineers
• Security personnel and legal compliance officers

Access is restricted based on the principle of least privilege and utilized strictly for legitimate operational purposes.

Professional Advisors

We may share relevant account or transaction details with professional advisors acting as processors or joint controllers, including:

• Legal counsel and attorneys
• Certified public accountants and financial auditors
• Insurance underwriters and risk management consultants
• Regulatory compliance specialists

Legal & Security Requirements

We may disclose information if required to do so by law, court order, or governmental authority, or when we reasonably believe in good faith that disclosure is necessary to:

• Comply with a legal obligation, subpoena, or law enforcement request
• Investigate, prevent, or address suspected fraud, security breaches, or technical vulnerabilities
• Enforce our Terms of Service, enterprise contracts, or copyright policies
• Protect the legal rights, safety, property, or security of Amadat AI, our users, or the public

Corporate Transactions

In the event of a potential or actual merger, acquisition, corporate reorganization, asset sale, joint venture, or financing transaction, user and customer information may be assessed or transferred as part of standard business assets under strict non-disclosure obligations.

6. SMS & Mobile Information

Mobile phone numbers (such as 091 440 4444) and SMS opt-in details provided to Amadat AI:

• Are used strictly for permitted transactional communications, system alerts, multi-factor authentication (MFA) codes, or requested technical notifications
• Are never sold, rented, or shared with third parties for marketing or advertising purposes
• Are safeguarded under the technical and administrative protections set forth in this Privacy Policy

Standard mobile carrier message and data rates may apply. Users may opt out of non-critical SMS communications by contacting info@amadat.ai.

7. Data Retention

We retain personal and business information only for as long as necessary to:

• Fulfill the operational purposes for which it was collected
• Deliver uninterrupted access to our services, APIs, and workspace portals
• Comply with applicable statutory, tax, legal, and accounting retention requirements
• Resolve disputes, enforce legal agreements, and maintain enterprise audit trails
• Prevent fraud, secure our network, and maintain system integrity

Retention periods vary based on the nature of the data, active contract status, regulatory requirements, and security needs. Upon contract termination or verified deletion request, customer datasets and account records are securely purged, overwritten, or anonymized in accordance with industry data sanitization practices, subject to mandatory legal or security log retention overrides.

8. Data Security

Amadat AI implements robust administrative, technical, and physical security measures designed to safeguard your information against unauthorized access, destruction, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data in transit across public networks
• Advanced encryption standards (AES-256) for stored data at rest
• Granular Role-Based Access Control (RBAC) and mandatory multi-factor authentication (MFA) for administrative staff
• Continuous network monitoring, intrusion detection, and isolated database micro-segmentation

While we employ rigorous security controls, no electronic transmission over the Internet or storage architecture can be guaranteed to be 100% secure. You are responsible for:

• Maintaining the confidentiality of your account usernames, passwords, and API keys
• Restricting unauthorized physical and digital access to your local devices and access tokens
• Implementing sound security practices within your organization

9. User Rights & Choices

Depending on your geographic location and applicable local or international privacy laws, you may have the following rights regarding your personal data:

• Right of Access: Request confirmation of whether we process your data and obtain a copy of your personal information.
• Right to Rectification: Request correction of inaccurate, incomplete, or outdated personal information.
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data where certain legal grounds apply.
• Right to Restrict or Object: Request that we restrict or cease specific processing activities, including direct marketing.
• Right to Data Portability: Request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Withdraw Consent: Revoke previously granted consent for processing operations without affecting the lawfulness of processing conducted prior to withdrawal.

To exercise any of these rights, submit a verifiable request to info@amadat.ai. Certain data may be retained as permitted or required by law for security, audit, or compliance reasons.

10. California Privacy Rights (CCPA/CPRA)

This section applies strictly to California residents pursuant to the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA).

California consumers have the right to:

• Know what categories and specific pieces of personal information we collect, use, and disclose
• Request deletion of their personal information, subject to statutory exceptions
• Correct inaccurate personal information maintained by us
• Opt-out of the “sale” or “sharing” of personal information (Amadat AI does not sell personal information)
• Limit the use and disclosure of sensitive personal information
• Receive non-discriminatory treatment for exercising any of their CCPA/CPRA rights

To submit a verifiable consumer request, contact us via email at info@amadat.ai or by phone at 091 440 4444. Only you or an authorized agent registered with the California Secretary of State may submit a request regarding your personal information. Your request must provide sufficient detail to allow us to verify your identity and properly evaluate your request.

11. Categories of Personal Information Collected (CCPA Disclosure)

Note: “Shared” refers strictly to necessary operational disclosures made to infrastructure providers, cloud hosting, payment processors, analytics tools, and authorized account sub-users. Amadat AI does NOT sell personal information.

12. Third-Party Services & Links

Our websites, platforms, and API tools may integrate with or link to external third-party software, cloud services, or platforms, such as:

• Third-party payment gateways and billing platforms
• Domain registrars and DNS management utilities
• Cloud storage and hosting providers
• External AI services or repository integrations

Amadat AI is not responsible for the privacy practices, technical security, or content of third-party websites or external services. We encourage users to review the privacy statements of every third-party service they interact with.

13. Children’s Privacy

Our services, software, and platforms are designed exclusively for business and professional enterprise use. They are not directed to individuals under 18 years of age (or under 13 in relevant legal jurisdictions). We do not knowingly collect or solicit personal information from children. If we discover that a child has provided us with personal information, we will take immediate steps to delete such data from our servers.

14. International Users & Data Transfers

Amadat AI operates and maintains digital infrastructure serving international clients. If you access our services from outside the jurisdiction where our servers or cloud nodes are hosted, your information may be transferred across international borders.

By utilizing our services, you consent to the transfer, storage, and processing of your information in jurisdictions that may have different data protection rules than your home country. Where required, Amadat AI implements approved legal mechanisms—such as Standard Contractual Clauses (SCCs) or localized edge infrastructure—to protect cross-border data transfers.

15. Policy Updates

We reserve the right to modify or update this Privacy Policy periodically to reflect changes in our legal obligations, service offerings, technological stack, or data handling practices.

When updates are made, we will revise the “Effective Date” at the top of this document. For significant material changes, we may provide additional notification, such as a banner on our platform or an email notice to registered workspace account owners. Your continued use of our websites, APIs, or services after any updates take effect constitutes your acceptance of the revised Privacy Policy.

16. Contact Information

If you have questions, concerns, complaints, or wish to exercise your privacy rights under this policy, please reach out to our team:

Amadat AI

• Legal entity: Almasar Aldaayim for Artificial Intelligence and Communication Technologies JSC
• Website: amadat.ai
• Email: info@amadat.ai
• Phone: 091 440 4444