(a) We use Microsoft Azure for storing, processing, and maintaining the storage of data (both data in rest and data in motion) provided by you. Our servers are located in the UAE and all data is stored, processed, and maintained in the UAE.
(b) We use AES 256 Encryption Standards for both data in rest and data in motion and cannot read any information uploaded by you on the Platform but only in the form of aggregated reports or results generated by the Platform based on information and inputs by you.
(c) We implement reasonable organizational, physical, and technical security measures to help guard your data from loss, theft, misuse, unauthorized access, disclosure, alteration, and destruction. However, no physical or electronic security system is impenetrable.
(d) Your information may be transferred, stored, processed, and used by our service providers in one or more countries outside your originating country. In case of transfer of personal data to computers/ servers located outside of the UAE, the storage and processing of personal data shall be governed by the provisions of the UK or EU GDPR as may apply. Your consent to this privacy policy followed by your submission of such information represents your agreement to that transfer. The Company will take all steps reasonably necessary to ensure that your data and your users’ data are treated securely and in accordance with this privacy policy and no transfer of your personal data and that of your users will take place to an organization or a country unless there are adequate controls in place including the security of your and your users’ data and other personal information.
(e) Personal information is also maintained and is accessible by authorized employees as necessary for the purposes described in this privacy policy.
(f) We store the following information as follows:
• for as long as they are required for users to log in;
• if you have consented to the processing, at most until you revoke your consent;
• if we need the data for the execution of a contract, at most for as long as the contractual relationship with you exists;
• if we use the data based on a legitimate interest, at most for as long as your interest in deletion or anonymization does not outweigh the data;
• insofar as statutory storage obligations exist, until the end of the storage periods;
• your basic account information, including your name, phone number, and email address;
• location information for different lengths of time-based on how precise it is and which services you use.