Privacy Policy | StartupOS

1. Introduction

StartupOS (“we”, “us”, “our”) operates the platform available at startupos.ae(“the Platform”). We are committed to protecting your privacy and complying with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL), and applicable international data protection regulations including GDPR.

This Privacy Policy explains how we collect, use, store, disclose, and protect your personal data when you use our Platform.

2. Data We Collect

2.1 Personal Data You Provide

Full name, email address, phone number, and UAE Pass information
Passport copies, visa copies, Emirates ID details
Company information: trade license, MOA, shareholder details
Payment information (processed via PCI-DSS compliant Stripe; we do not store full card details)
Communications with us (emails, chat messages with Zaki AI, support tickets)

2.2 Data Collected Automatically

IP address, browser type, device information
Usage data: pages visited, features used, time spent on Platform
Cookies and similar technologies (see our Cookie Policy)

3. How We Use Your Data

To provide and maintain the Platform and its features
To verify your identity and onboard your company
To match you with vetted service providers and facilitate escrow payments
To track compliance deadlines and send you reminders
To provide AI-powered assistance through Zaki
To communicate with you about your account, updates, and announcements
To improve our services and develop new features
To comply with legal and regulatory obligations

4. Legal Basis for Processing (PDPL Compliance)

Under the UAE PDPL, we process your personal data based on:

Your consent (explicitly given during registration)
Performance of a contract (providing the services you requested)
Legal obligation (compliance with UAE regulations)
Legitimate interests (platform security, fraud prevention)

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

Service providers you explicitly engage through the Platform (PRO agents, lawyers, accountants) — only information relevant to the services requested
Payment processor (Stripe) for transaction processing
Government authorities when required by law or regulation
Cloud hosting providers with servers located in the UAE

6. Data Storage and Security

Your data is stored on UAE-based infrastructure. We implement appropriate technical and organizational measures including:

Encryption in transit (TLS) and at rest
Access controls and authentication
Regular security assessments
Staff training on data protection
Incident response procedures

7. Data Retention

We retain your personal data for as long as your account is active, and for a reasonable period thereafter to comply with legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your data subject to legal retention requirements.

8. Your Rights Under PDPL

Right to be informed about how your data is used
Right to access your personal data
Right to rectify inaccurate or incomplete data
Right to erase your personal data (subject to legal exceptions)
Right to restrict processing
Right to data portability
Right to object to processing
Right to withdraw consent at any time

To exercise any of these rights, contact us at privacy@startupos.ae.

9. Cross-Border Data Transfers

Your sensitive business documents and personal data are stored on UAE-based infrastructure and do not leave the region, except where explicitly required for service delivery (e.g., payment processing) and in compliance with PDPL cross-border transfer requirements.

10. Children’s Privacy

The Platform is not intended for individuals under 18. We do not knowingly collect data from minors.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice on the Platform.

12. Contact Us

If you have questions about this Privacy Policy or your data, contact our Data Protection Officer at privacy@startupos.ae.