Aurum AI Labs
Privacy Policy
Last updated
1. Information We Collect
Aurum AI Labs Ltd (DIFC licence CL11943; IH-00-01-03-OF-05, Floor 3, IH-00-01-CP-05, Dubai International Financial Centre, Dubai, UAE) is the controller of the personal data described in this policy. Contact us at privacy@aurumailabs.com. We collect: what you send through our website’s contact form (your name, work email, company, role, team size and message), where the fields marked required are needed for us to reply; account details when you use Aurum Flux™, an Ops Pack, Aurum Flo™ or Aurum Catalyst™; the marketing data you process through our platform; your messages to our team; and website analytics data, only if you accept analytics cookies.
2. How We Use Your Information
We use your information to reply to your enquiry, to provide, support and secure our services, and to calculate your Aurum Score™ where you use it, keeping each client’s data separate. Our lawful bases are: performing our contract with you; our legitimate interests in answering enquiries, running and securing our services, and understanding website use in aggregate; your consent, for analytics cookies and marketing emails; and complying with the law. We use contact-form details to follow up on your enquiry. We send other marketing emails only with your consent, and you can opt out at any time.
3. AI and Machine Learning
Our services use AI systems — AI models working inside our workflows — to process the data you give them, including any personal data it contains, to produce analyses, recommendations and drafts. They work only for purposes you or we set; they do not set purposes of their own. Every output is designed for human review: nothing is sent or acted on without your approval, and we make no automated decisions about you that have legal or similarly significant effects. We do not use your data to train AI models. The models are provided by third-party AI model providers, who process the data on our behalf to return results.
4. Data Security
We protect your data with encryption in transit and at rest and strict access controls, and we review our security measures regularly.
5. Your Rights
You have the right to access, correct, delete and port your personal data, to restrict or object to how we use it, and to withdraw your consent at any time (this does not affect processing already done with your consent). To exercise these rights, contact us at privacy@aurumailabs.com. You can also complain to the DIFC Commissioner of Data Protection (commissioner@dp.difc.ae) or, in the EU or UK, to your local supervisory authority.
6. Who We Share Data With
Only with service providers that help us run our website and services, under contracts that require them to protect it: website and application hosting, databases, email delivery, website analytics (only with your consent) and AI model providers. We also share data where the law requires it. We do not sell personal data.
7. International Transfers
Our service providers store and process data outside the DIFC, including in Singapore, Australia and the United States. We transfer personal data only with the safeguards the DIFC Data Protection Law requires, such as standard contractual clauses in our providers’ data processing terms. Ask for a copy at privacy@aurumailabs.com.
8. How Long We Keep Data
Only as long as we need it for the purpose we collected it for: enquiries while we are in contact with you about them, account data while your account is open and for a reasonable period after it closes, and client data for the period our agreement with the client sets, unless the law requires us to keep it longer. You can ask us to delete it sooner.
9. Cookies and Analytics
Our website uses essential cookies to work, and analytics cookies only if you accept them. Google Analytics does not load until you do. You can change your choice at any time; see our Cookie Policy.
10. Website Visitors and Our Clients’ Data
This policy covers personal data we control: website visitors, enquiries and our clients’ account users. When clients use our services to process their own customers’ data, we act as their processor under our Data Processing Agreement, and the client’s own privacy notice applies.