Legal
Privacy policy
Effective date: [to be set at launch]
1. Who we are
Mobiweb AI Mail is provided by Mobiweb AI Ltd, a company registered in the Dubai International Financial Centre (DIFC), United Arab Emirates, registration number [number], registered office [address] ("Mobiweb AI", "we"). Contact: privacy@mobiweb.ae.
[EU representative under Article 27 GDPR: name and address.] [UK representative under Article 27 UK GDPR: name and address.]
2. Our two roles
For business customers, we process the content of emails and text that users send to the service on the customer's behalf, as a processor. Our data processing agreement governs that processing.
For account, subscription and usage data, and for individual users on the Free plan, we act as controller. This policy mainly describes that processing.
3. What we collect
- Account data: Microsoft account object ID and tenant ID, name, email address, and whether you administer your organisation's subscription.
- Preferences: your personal writing preferences, your language, and your organisation's writing guidelines.
- Subscription data from the Microsoft commercial marketplace: plan, seats, status, term, purchaser and beneficiary identifiers and email addresses.
- Usage records: feature, mode, model, token counts, time, duration and outcome of each request.
- Email content you choose to process (the email you have open, your selection, your instructions and the AI's answer). This is processed only to produce the answer and is not stored.
- Technical logs: IP address, request path, time and status code, kept for up to [30] days for security and troubleshooting. Logs never contain email content.
4. Why we use it (legal bases)
- To provide the service and enforce plan limits: performance of our contract with you or your organisation.
- To secure the service and prevent abuse: our legitimate interest in operating a safe service.
- To meet tax, accounting and legal obligations: legal obligation.
We do not sell personal data, do not use it for advertising, and do not use email content to train AI models.
5. Who we share it with
Only the providers listed on our sub-processors page, under contracts that require them to protect it, and authorities where the law requires.
6. International transfers
AI processing and our servers are in the European Union. Mobiweb AI is established in the DIFC and our staff may access account data from the United Arab Emirates. For transfers of personal data from the EU/EEA and the UK we rely on the European Commission's standard contractual clauses and the UK International Data Transfer Addendum. [Confirm DIFC-specific transfer basis.]
7. How long we keep it
- Email content: not stored.
- Usage records: 13 months.
- Account data and preferences: while you use the service, then deleted within [90] days of account closure or on request.
- Seat assignments: removed 30 days after a subscription ends.
- Billing records required by law: for the period the law requires.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your personal data, object to or restrict its processing, and complain to a supervisory authority (in the EU, your local data protection authority; in the DIFC, the Commissioner of Data Protection). You can delete your own preferences and usage history from the add-in under Account, Delete my data. For anything else, write to privacy@mobiweb.ae. If your organisation provides your account, we may refer your request to them.
9. Automated processing
The service uses AI to generate text that you review before use. It makes no decisions about you that have legal or similarly significant effects.
10. Children
The service is for business use and is not directed at children under 16.
11. Changes
We will post changes here and, for material changes, tell subscription administrators in advance.