Privacy Policy
Ainoteq ("we", "us") is an independent AI governance and regulatory applicability practice serving regulated enterprises across the GCC. This policy explains what personal information we collect through ainoteq.com and how we use it. It covers this website only; personal data processed inside a client engagement is governed by that engagement's agreement and its data processing terms.
What we collect
Enquiries. When you use the contact form or email us, we receive your name, email address, organisation and message.
The applicability diagnostic. If you complete the diagnostic at /applies-to-you, we record the answers you give about your entity type, jurisdictions, licences, sector and AI use cases, together with the result generated. Where you ask for the result by email, we record that email address and associate it with the session. The diagnostic asks only for organisational characteristics. Please do not enter names, personal data, client data or confidential information into it.
Register queries. Searches and filters run against the GCC AI Obligation Register are logged in aggregate — the query terms, the filters applied, the results returned and a truncated IP address — so that we can see which instruments people are looking for and where our coverage is thin. These logs are not used to build a profile of you and are not linked to your identity unless you have separately given it to us.
Technical logs. Standard web server logs: truncated IP address, user agent, page requested and timestamp. Retained for security and diagnostics.
Maya, the site assistant. Conversations with Maya are processed to generate a reply and retained in a short-lived log for quality and abuse prevention. Maya answers about Ainoteq only. Do not share personal, client or confidential information with her.
We do not run advertising cookies or third-party marketing trackers.
How we use it
To respond to your enquiry and discuss a potential engagement; to generate and, if you ask, send you a diagnostic result; to improve the register's coverage and the diagnostic's accuracy; to keep the site secure and available; and to meet our own legal and record-keeping obligations. We do not sell, rent or share your personal information with third parties for marketing.
Processors
We use a small number of service providers to host the site, deliver email and provide the language model that powers Maya. They act on our instructions under contract and may process data outside your country. Where a client engagement requires in-region or in-country processing, that is agreed in the engagement and applies to engagement data.
Retention
Enquiry correspondence is kept for as long as needed to respond and to maintain a reasonable record of our business discussions. Diagnostic submissions are kept for 24 months. Aggregate register query logs are kept for 24 months. Technical and assistant logs are kept for 90 days.
Your rights
You may ask us at any time to access, correct, delete or export the personal information you have shared with us, to object to or restrict our use of it, or to withdraw consent where we rely on it. Write to hello@fnoai.com and we will respond within 30 days. If you are not satisfied, you may complain to the data protection authority in your jurisdiction — in the UAE, the UAE Data Office; in the DIFC, the Commissioner of Data Protection.
Changes
We will post any change to this policy on this page and update the date above.
Contact
Questions about this policy can be sent to hello@fnoai.com.