UAE Privacy Notice

Updated: July 15, 2025

Introduction and Scope of this Privacy Policy

At AIStocksPredict (referred to as “the Company,” “we,” “us,” or “our”), a UAE-incorporated entity with its principal place of business at Dubai Media City, Dubai, United Arab Emirates (“company”, “we”, “our”, or “us”), we take our responsibilities regarding the protection of your personal data seriously and are committed to handling your information in accordance with the applicable data protection laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data ("UAE PDPL").

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you access or use our online platform, digital services, or otherwise interact with us, including through our at https://squad-match.com (the “Site”) (referred to as "the Site", "the Website") mobile applications, and communication channels.

Applicability of this Privacy Policy

This Privacy Policy applies to all users (including registered and unregistered visitors) whose personal data is collected, stored, or otherwise processed by the Company in connection with the services we offer.

By using our platform or providing us with personal data — such as your name, contact details, account credentials, payment information, or any other information that can directly or indirectly identify you — you agree that we may process your data as outlined in this Policy and in accordance with UAE PDPL.

This Policy covers personal information collected:

On this Site, via forms, cookies, and other technologies
In email, text, or other electronic messages between you and the Site
Through any mobile or desktop apps we may offer in the future
When you interact with our advertisements on third-party sites that link to this Notice

Use of Anonymized and Aggregated Data

We may collect, generate, and use anonymized or aggregated data for analytical, research, reporting, or statistical purposes. This may include patterns of usage, performance metrics, and general behavioral data that has been stripped of any identifiers that could reasonably be used to identify a specific individual.

Providing Your Personal Data

Providing your personal data is generally voluntary. However, in some cases, certain information may be required in order for you to access or use specific features of our services — for example, to submit the quiz.

What Personal Data Do We Collect About You

"Personal Data" means any information relating to an identified or identifiable natural person, as defined under Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) of the United Arab Emirates. This includes data you provide directly to us or that is collected automatically when you use the Site, interact with our website or services, or contact our support team.

Category	Examples	Source
Identifiers	• First name • Last name • Email address	Survey form (“Start Your Investment Journey”)
Preferences & Profile Data	• Current investment approach • Biggest investment challenges • Interest level in AI tools • Importance of AI transparency • Preferred investment timeframes • Willingness-to-pay range	Survey questionnaire (“Current Investment Approach,” “Investment Challenges,” etc.)
Device & Usage Information	• IP address • Browser type and version • Operating system • Device identifiers • Pages visited and time spent	Essential cookies and server logs
Technical Cookie Data	• Session identifiers • Authentication tokens	Essential cookies only (no tracking or advertising cookies)
Aggregated & Anonymous Data	• Usage statistics (e.g., number of visits, feature usage)	Derived from raw usage data

We do not collect any payment information, location data beyond your IP address, or use your email for marketing purposes. We do not knowingly collect the following categories of information through our platform: biometric information, sensory data (e.g., audio or video recordings), background or criminal history, sensitive demographic attributes such as race or health-related information or other sensitive personal information.

We do not collect or process Sensitive Personal Data as defined by UAE law, such as:

Biometric identifiers (e.g., facial image, fingerprints)
National identifiers (e.g., Emirates ID, passport number)
Racial or ethnic origin, religious beliefs, or health data
Data relating to children or individuals under 18 years of age

We only collect the minimum personal data necessary to operate our Site efficiently, fulfill our contractual obligations, and comply with legal requirements under UAE data protection regulations.

How Is Personal Data Collected

Directly from You

Form Submissions: When you voluntarily enter your name, email address, demographic details, and quiz responses on our Site’s survey form.
Contact Requests: If you choose to submit questions or feedback.

Automatically from Your Device

Server Logs: We record your IP address, timestamps, and pages viewed to maintain Site performance and security.
Browser & Device Information: Your User-Agent string (browser type, version, and operating system) is captured automatically.

Cookies & Similar Technologies

Essential Cookies: We use only strictly necessary cookies (session identifiers, CSRF tokens) to preserve your form progress and protect against fraud.
No Advertising Cookies: We do not deploy third-party advertising or tracking cookies.

Third-Party Service Providers

Hosting Provider: Webflow collects and processes certain technical data (logs, cookies) under our direction to serve and secure the Site.
Email & Form Services: Our DR email/form vendors receive your name, email, and survey data strictly to store responses and send one-time follow-up messages.

We collect only what is necessary for product research, Site functionality, and security, and we retain personal data no longer than required for these purposes.

How We Use Your Personal Data

Product Research & Improvement

We analyze your demographic information, partner preferences, satisfaction ratings, and open-ended feedback to:

Identify user needs and preferences
Prioritize new features and enhancements
Refine our matching algorithms and user experience

Site Functionality & Performance

Essential cookies and technical data (session IDs, CSRF tokens, IP address, User-Agent, page timestamps) help us to:

Preserve your quiz progress and form state
Optimize load times and form flow
Diagnose and fix technical issues

Security & Abuse Prevention

Fraudulent activity (e.g., automated bot submissions)
Unauthorized access
Other malicious or abusive behavior

Administrative Communication

We may use your name and email address to:

Send a one-time follow-up if we need clarification on your responses
Reply to any privacy or support inquiries you submit

Legal & Compliance

We use your data to:

Comply with applicable laws and valid legal processes (e.g., subpoenas)
Enforce our Terms of Use and protect our rights or those of our users

We will never use your email address or any other personal data to send promotional or marketing communications unless you have explicitly opted in to receive such messages.

Legal Basis for Processing Your Personal Data

We respect your right to data privacy and are committed to processing your personal data lawfully, fairly, and transparently, as required by Federal Decree Law No. 45 of 2021 on the Protection of Personal Data ("PDPL").

We process your personal data only for legitimate purposes and based on one or more of the lawful bases outlined in the PDPL. The main lawful grounds under which we may process your data are described below.

1. Compliance with Legal Obligations

We may process your personal data when required to comply with a legal obligation under the laws of the United Arab Emirates, including to:

Comply with requests from competent regulatory authorities, including data localization or reporting obligations.
Conduct identity verification or fraud screening where mandated by law.
Respond to valid legal requests, such as subpoenas or government investigations.

2. Consent

Where required, we will ask for your explicit consent before processing your personal data for the following purposes:

Product Research & Improvement
Collecting and analyzing your quiz responses (including name, email address, age range, gender identity, relationship status and partner preferences) to understand potential user needs and refine the Squad-Match product and matching algorithm.
One-Time Administrative Follow-Up
Sending you a single email to clarify or expand on your survey responses (for example, if we need more detail to interpret your feedback).
Marketing Communications (if and when introduced)
Sending you promotional or newsletter content—only if you explicitly opt in to receive such communications via a clear checkbox or subscription form.

You may withdraw your consent at any time as outlined in our Privacy Policy.

Note on Data Minimization and Proportionality

All data processing activities are conducted in accordance with Article 5 of the PDPL, which mandates that data must be:

Collected for specified, clear, and legitimate purposes.
Adequate, relevant, and limited to what is necessary.
Retained only as long as necessary to fulfill the stated purpose.

Your Personal Data and Your Legal Rights

As a data subject, you have specific rights regarding your personal data processed by Us. These rights are described below:

Right to Be Informed

You have the right to be informed, in a clear and transparent manner, about how the Company collects, uses, shares, stores, and protects your personal data.

Right to Access Your Personal Data

You may request access to the personal data we hold about you. This includes the purposes of processing, the categories of data, and any third parties to whom the data has been disclosed. You have the right to request that we provide you a copy of your personal information that we hold, and you have the right to be informed of the source of your personal information; the purposes, legal basis, and methods for processing that information; the data controller’s identity; and the entities or categories of entities to whom your personal information may be transferred. You have the right to obtain a copy of personal information safeguards used for transfers outside your jurisdiction.

Right to Rectification

You may request that inaccurate or incomplete personal data be corrected or completed. You have a right to request that we correct inaccurate personal information.

Right to Restriction of Processing

You have the right to request the suspension or restriction of your personal data processing in certain cases, including:

When the accuracy of the data is contested.
When processing is unlawful and you oppose deletion.
When the data is no longer needed but is required by you for legal claims.
When you have exercised your right to object and verification of overriding grounds is pending.

We may still process your personal data if:

It is stored for archival purposes.
It is necessary to establish or defend legal claims.
It is required to protect the rights of others.
It is in the public interest.

Right to Data Portability

Where technically feasible, you have the right to receive your personal data in a structured, machine-readable format, and to have it transmitted to another data controller—provided the processing is based on your consent or a contract and carried out by automated means.

Right to Stop/Object to Processing

You have the right to object, at any given time and without any justification, in the following cases:

Processing of your Personal Data is for direct marketing purposes, including profiling related to direct marketing
Processing is carried out to conduct statistical surveys unless it is necessary to achieve public interest (under UAE Data Protection Law)
Processing is in violation of the data protection standards under article 5 of UAE Data Protection law (under UAE Data Protection Law)

Right Not to Be Subject to Automated Processing

You have the right not to be subject to decisions based solely on automated processing, including profiling, where such decisions produce legal effects or significantly impact you.

Note: Choosing to exercise this right may limit Company’s ability to offer personalized features or services tailored to your preferences.

Right to Erasure (Right to Be Forgotten)

You may request the deletion of your personal data in the following cases:

The data is no longer necessary for its original purpose.
You withdraw your consent and no other legal basis exists.
You object to the processing and there are no overriding legitimate grounds.
The data has been unlawfully processed.

We are not required to comply with your request to erase personal information:

If the request is related to the erasure of his/her Personal Data related to public health in private facilities.
If the request affects the investigation procedures and claiming and defending rights.
If the request contradicts other legislations to which the Controller is subject.
In any other cases determined by the Executive Regulation of this Decree by Law.

Right to Withdraw Consent

You may withdraw your consent to the processing of your personal data at any time. Once we receive your withdrawal request, we will stop processing the data for the purpose for which consent was originally given.

Right to Lodge a Complaint with Your Local Supervisory Authority

You have a right to lodge a complaint with your local supervisory authority (That is, the authority with jurisdiction over your place of habitual residence or place of work or the place of alleged infringement) if you have concerns about how we are processing your personal information.

Although you have a right to contact your supervisory authority at any time, we ask that you please attempt to resolve any issues with us before lodging a complaint.

You may have other rights depending upon the country you are in.

How to Exercise Your Rights

To exercise any of your rights under the PDPL, please contact us at hello@aistockspredict.com or by mail to Dubai Media City, Dubai, United Arab Emirates

How We Share Your Personal Data

The Company shares your personal data only where it is lawful, necessary, and proportionate in accordance with the UAE Federal Decree Law No. 45 of 2021 on the Protection of Personal Data (“PDPL”), and only for the purposes outlined in this Privacy Notice.

We may share your personal information as follows:

1. With Our Service Providers

We share your data with trusted third-party service providers who process personal data on our behalf under appropriate contractual and confidentiality agreements. These may include:

Hosting and cloud infrastructure providers (e.g., AWS);
Customer service and technical support providers;

These third parties are only permitted to process your data for the purpose of providing the contracted service and must implement appropriate security measures under Article 21 of the PDPL.

2. With Legal Authorities and Regulators

We may disclose personal data to government authorities, regulatory agencies, law enforcement bodies, courts, or other competent authorities:

When required to comply with applicable laws or legal obligations;
Upon receipt of valid legal requests such as subpoenas or regulatory orders;
In relation to fraud prevention, cybersecurity, or public health mandates;
To respond to national security, public safety, or law enforcement investigations.

Cross-Border Transfer and Sharing of Personal Data

Because our primary hosting and certain service providers are located in the United States, your personal data is transferred outside the UAE. We ensure such transfers comply with PDPL by:

Contractual Safeguards – Standard contractual clauses and a Data Processing Addendum with each provider, obligating them to equivalent levels of confidentiality and security.
Technical Measures – End-to-end encryption in transit (HTTPS/TLS), encrypted storage where supported, and strict access controls.
Purpose Limitation – Providers may process your data only to deliver services we have requested and may not use it for their own marketing or profiling.

In accordance with Article 23(1)(b) of the UAE Federal Decree Law No. 45 of 2021, we may transfer your personal data outside the UAE where you have provided us with your explicit consent to do so.

We obtain this explicit consent through your affirmative action—such as accepting cookies by clicking the button on our cookie banner after being presented with clear information about the nature and purpose of the data transfers – you may find it below in the Tracking Technologies and Cookies section of this Policy. Where such consent is required, we do not initiate any cookie-based tracking or data transfer before obtaining it.

By consenting to our use of cookies and similar technologies, you explicitly acknowledge and agree that your personal data may be transferred to countries outside the UAE, including but not limited to the United States, and other countries may store or process your personal data. including jurisdictions that may not provide an equivalent level of protection.

International Transfer on the Basis of Explicit Consent. The personal data you provide in the survey (e-mail address and questionnaire responses) will be stored and processed on servers located in the United States. Because the United States has not been deemed to offer an “adequate level of protection” by the UAE Data Office, we rely on your explicit consent under Article 23 PDPL for this transfer.

By clicking the “Submit” button beneath the survey form, you acknowledge that you have read this Privacy Policy and affirmatively consent to the transfer of your personal data to, and its subsequent processing in, the United States for the purposes set out herein. If you do not wish your data to leave the UAE, please do not press “Submit”. You may withdraw your consent at any time by contacting us at privacy@squad-match.com; such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.

Regardless of the destination country, we apply appropriate technical and organizational safeguards to ensure that your personal data is treated securely and in accordance with applicable data protection legislation, including:

Contractual guarantees with our service providers;
Requiring third-party recipients of data to implement strong data protection and security measures;
Restricting data transfers to only those jurisdictions and partners necessary for operational and legal purposes.

Your Rights Regarding Cross-Border Transfers

You have the right to:

Request information about where your personal data is being transferred;
Request a copy of the safeguards in place to protect your data;
Withdraw your consent for international transfers at any time, in which case we will cease such transfers where legally and technically feasible.

Tracking Technologies and Cookies

The Site may place and access certain cookies on your computer and/or any other electronic device used to access the Site. We use cookies to improve your experience using the Website and to improve the efficacy of our Services. Cookie and tracking technology are useful for gathering information such as browser type and operating system, tracking the number of visitors to the Site, and understanding how visitors use the Website.

We have carefully chosen these cookies and had taken steps to ensure that your privacy is protected and respected at all times. We use Cookies and similar tracking technologies to track the activity on Our Site and store certain information. Tracking technologies used are beacons, tags, and scripts to collect and track information and to improve and analyze Our Service.

The technologies We may use may include:

Cookies or Browser Cookies. A cookie is a small file placed on Your Device. You can instruct Your browser to refuse all Cookies or to indicate when a Cookie is being sent. However, if You do not accept Cookies, You may not be able to use some parts of our Service. Unless you have adjusted Your browser setting so that it will refuse Cookies, our Service may use Cookies.
Web Beacons. Certain sections of our Service and our emails may contain small electronic files known as web beacons (also referred to as clear gifs, pixel tags, and single-pixel gifs) that permit the Company, for example, to count users who have visited those pages or opened an email and for other related website statistics (for example, recording the popularity of a certain section and verifying system and server integrity).

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your personal computer or mobile device when You go offline, while Session Cookies are deleted as soon as You close Your web browser.

We may use both Session and Persistent Cookies, as well as both first- and third party cookies for the purposes set out below:

Strictly necessary Cookies.

Purpose: These are Cookies that are required for the operation of our website. They are necessary for the safety, security and integrity of the site.

Necessary / Essential Cookies

Type: Session Cookies

Purpose: These Cookies are essential to provide You with services available through the Website and to enable You to use some of its features. They help to authenticate users. Without these Cookies, the Services cannot be provided, and We only use these Cookies to provide You with those services.

Notice Acceptance Cookies

Type: Persistent Cookies

Purpose: These Cookies identify if users have accepted the use of cookies on the Website.

Functionality Cookies

Type: Persistent Cookies

Purpose: These Cookies allow us to remember choices You make when You use the Website, such as remembering your login details or language preference. The purpose of these Cookies is to provide You with a more personal experience and to avoid You having to re-enter your preferences every time You use the Website.

By accepting Our use of cookies, apart from necessary cookies, you consent to our use of cookies as described under Privacy Policy. You may at any time change or withdraw your cookie consent.

If You prefer to avoid the use of cookies on the Site, first You must disable the use of cookies in your browser and then delete the cookies saved in your browser associated with this website. You may use this option for preventing the use of cookies at any time.

If You do not accept Our cookies, You may experience some inconvenience in your use of the Site and some features may not function properly.

If You'd like to delete cookies or instruct your web browser to delete or refuse cookies, please visit the help pages of your web browser. Listed below are the links to the support documents on how to manage and delete cookies from the major web browsers. If you are using any other web browser, please visit your browser’s official support documents.

How Long We Retain Your Personal Data

We retain your Personal Data only for as long as is necessary to fulfill the specific purposes for which it was collected, or to comply with legal, regulatory, and contractual obligations.

The exact retention period depends on:

The nature of the data collected;
The reason we collected it;
Whether legal or regulatory retention requirements apply;
Whether the data is necessary to establish, exercise or defend legal rights;
Whether you have withdrawn your consent (in cases where processing is based on consent).

When your Personal Data is no longer required, it will be securely deleted or anonymized, unless further retention is required under applicable law (e.g., for tax, accounting, or anti-fraud purposes).

Accuracy of Your Personal Data

The Company takes all reasonable steps to ensure that Personal Data in its possession is accurate, complete, and up to date.

However, you also have a responsibility to:

Provide accurate and truthful information when interacting with our platform;
Notify us promptly of any changes to your Personal Data (such as a change in your email address or billing information).

Security and Protection of Your Personal Data

The Company implements appropriate technical and organizational measures to protect your Personal Data against unauthorized access, loss, destruction, misuse, alteration, or disclosure.

Our security safeguards include, but are not limited to:

Data minimization and access controls (role-based access, zero trust policies);
Pseudonymization and anonymization where appropriate;
Network security and monitoring (including firewalls, intrusion detection, DDoS protection);
Regular security audits and log management;
Physical access control at hosting data centers (provided by AWS or equivalent providers);
Backup and disaster recovery mechanisms to ensure data integrity and service availability.

We regularly review our security procedures and train our team on data protection best practices to maintain a high level of privacy and security across all our systems.

Data-Breach Notification Procedure

Personal Data Breach Response. In the unlikely event of a “Personal Data Breach” (as defined in Article 1 of Federal Decree-Law No. 45 of 2021), we will (i) notify the UAE Data Office without undue delay and, in any event, within 72 hours of becoming aware of the breach, and (ii) document the facts, impact and remediation measures taken, as required by Article 9 PDPL. Where the breach is likely to result in a high risk to your rights and freedoms, we will also inform you directly and without undue delay, describing (a) the nature of the breach, (b) its probable consequences, and (c) the measures we have taken to mitigate any adverse effects.

Data Protection Officer

Article 10 PDPL mandates the appointment of a Data Protection Officer only where processing:

(a) is likely to result in a high risk to the privacy or confidentiality of personal data, e.g., due to the adoption of new technologies;
(b) involves a systematic and comprehensive assessment of sensitive personal data (including profiling or automated decision-making); or
(c) entails large-scale processing of sensitive personal data.

Our current activities involve only limited, non-sensitive personal data (e-mail and survey answers) and do not fall into any of the high-risk categories above. We have therefore determined that appointing a DPO is not presently mandatory. We review this assessment at least annually and will designate a qualified DPO without delay should our processing expand to meet any of the triggers listed above.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Notice or our privacy practices, you can contact us at:

AIStocksPredict
Dubai Media City, Dubai, United Arab Emirates
hello@aistockspredict.com