Privacy notice: United Arab Emirates

1. Who this covers

People in the UAE whose personal data a UAE business processes through the service, and account holders in the UAE. Businesses in the DIFC and ADGM free zones have their own data protection laws, which this notice does not cover.

The law: UAE Government: data protection laws.

2. Who is responsible

• For the people a business calls or chats with, that business (the workspace) decides why and how the data is used. We process it on its instructions, under our Data Processing Agreement. Under the law the workspace is the controller and we are its processor.
• For the accounts of people who sign up with us, we are the controller.

3. Why we may use the data

• Account data is processed to run the service, bill for it, keep accounts secure and answer requests.
• People a workspace contacts: the workspace needs a basis the law allows, and must follow the UAE's telemarketing rules. For UAE numbers the service keeps consent records and do-not-call screening evidence.
• Every call an agent makes or answers opens with a spoken statement that it is an automated AI assistant, and that the call may be recorded if recording is on. No workspace setting removes it.
• We do not sell personal data, use it for advertising, or train models on calls or chats.

4. Your rights

• The law gives people rights to information about how their data is processed, to a copy of it, to correction and erasure, to restriction, and to object to processing, including processing used for direct marketing and decisions made solely by automated means.

If a business called or messaged you through Dialora AI, ask that business first: it decides what happens to your data, and the workspace has the tools to find, export and erase it. If you do not know which business it was, write to privacy@aicall.vitrano.in with the number that contacted you and the date, and we will pass your request on. If you hold an account with us, write to the same address.

5. Data leaving your country

• Our servers are in Ahmedabad, India, so using the service moves data to India. Services a workspace connects with its own account, such as Twilio, Deepgram, ElevenLabs or a hosted AI model, are mostly in the United States.
• The law allows transfers to countries with adequate protection, and otherwise only in the cases it lists, such as a contract that binds the recipient to its standards or the person's express consent.

Where each service is: sub-processor list. Terms for businesses: Data Processing Agreement.

6. If there is a breach

• We tell the workspace without undue delay after we become aware of a breach of its data.
• The controller must tell the UAE Data Office of a breach that affects the privacy, confidentiality or security of personal data, and the people affected in the cases the law sets.

7. Complaints

• Write to us, or to the business that contacted you, first. You can also complain to the UAE Data Office.

8. Still open