Privacy Policy — Mazza AI

This Privacy Notice for Mazza AI ("we," "us," or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you visit our website at mazzaai.com, use our AI voice agent platform, or engage with us in other related ways. If you have questions or concerns, please contact us at admin@mazzaai.com.

This notice is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data. The UAE Data Office is the supervisory authority for all data protection matters relating to our Services.

Summary of Key Points

Personal data collected

Names, phone numbers, emails, and usage data depending on how you interact with our Services.

Sensitive data

We do not process sensitive personal information.

Third-party data

We may collect limited data from public databases and marketing partners to maintain accurate records.

How we use it

To provide and improve our Services, communicate with you, prevent fraud, and comply with law.

Data security

Organizational and technical safeguards are in place, though no transmission is 100% guaranteed secure.

Your rights

Under UAE PDPL, you have the right to access, correct, restrict, or request deletion of your personal data.

What Information Do We Collect?

In short

We collect personal information that you provide to us.

Personal Information Provided by You

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us. The personal information we collect may include:

NamesPhone numbersEmail addressesJob titlesUsernamesPasswordsContact preferencesContact or authentication dataBilling addresses

Sensitive Information

We do not process sensitive information.

Information Automatically Collected

In short

Some information - such as your IP address and/or browser and device characteristics - is collected automatically when you visit our Services.

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.

Like many businesses, we also collect information through cookies and similar technologies. The information we collect includes:

Log and Usage Data.

Service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services, recorded in log files.

Device Data.

Information about your computer, phone, tablet, or other device you use to access the Services.

Location Data.

Information about your device's location, which can be either precise or imprecise.

Voice Interaction Data.

Caller names and phone numbers collected during AI-handled calls on behalf of our business clients, used solely for booking and appointment management purposes.

Booking and Appointment Data.

Appointment details including requested services, preferred dates and times, and booking confirmations generated through our AI voice agent and synced to client calendars and CRM systems.

WhatsApp Communication Data.

Phone numbers and message interaction data associated with automated WhatsApp messages sent on behalf of business clients, including promotional messages and appointment confirmations.

Google API

Our use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How Do We Process Your Information?

In short

We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent.

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

To facilitate account creation and authentication.

We may process your information so you can create and log in to your account, as well as keep your account in working order.

To deliver and facilitate delivery of services to the user.

We may process your information to provide you with the requested service.

To respond to user inquiries/offer support to users.

We may process your information to respond to your inquiries and solve any potential issues you might have with the requested service.

To send administrative information to you.

We may process your information to send you details about our products and services, changes to our terms and policies, and other similar information.

To request feedback.

We may process your information when necessary to request feedback and to contact you about your use of our Services.

To send you marketing and promotional communications.

We may process the personal information you send to us for our marketing purposes, if this is in accordance with your marketing preferences. You can opt out of our marketing emails at any time.

To protect our Services.

We may process your information as part of our efforts to keep our Services safe and secure, including fraud monitoring and prevention.

To evaluate and improve our Services, products, marketing, and your experience.

We may process your information when we believe it is necessary to identify usage trends, determine the effectiveness of our promotional campaigns, and to evaluate and improve our Services, products, marketing, and your experience.

To identify usage trends.

We may process information about how you use our Services to better understand how they are being used so we can improve them.

To determine the effectiveness of our marketing and promotional campaigns.

We may process your information to better understand how to provide marketing and promotional campaigns that are most relevant to you.

To comply with our legal obligations.

We may process your information to comply with our legal obligations, respond to legal requests, and exercise, establish, or defend our legal rights.

Information Processed on Behalf of Our Clients

In short

When we handle automated communication for a business, we act as a data processor on that business's behalf - not as an independent data controller over caller information.

Mazza AI is an AI-powered platform that provides 24/7 automated call answering, appointment booking, and client communication services for businesses in the UAE. The platform handles inbound phone calls on behalf of business clients, schedules appointments, sends automated WhatsApp confirmations, and syncs booking data with business calendars and CRM systems.

When we provide these automated communication services on behalf of a business, we act solely as a data processor - handling information strictly under the instruction of the business client, who remains the data controller.

In this capacity, we collect and process the following on behalf of our clients:

Caller identity.

Names and phone numbers collected during automated communication, used solely to fulfill the appointment booking or inquiry made during that interaction.

Booking and appointment details.

Requested services, preferred dates and times, and booking confirmations generated through our platform and synced to the client's calendar or CRM system.

WhatsApp communication data.

Phone numbers and message interaction data associated with automated WhatsApp messages sent on behalf of business clients, including appointment confirmations and follow-ups.

This data is processed solely to complete the service requested during the interaction. It is not used by Mazza AI for any independent purpose, including model training, analytics, or marketing. We do not record calls or retain call transcripts.

Our clients' responsibility: Business clients are solely responsible for ensuring their customers are appropriately informed when automated communication is used on their behalf. Caller data processed on behalf of clients is retained for a maximum of 90 days, unless a longer period is required by the client or applicable law.

When and With Whom Do We Share Your Personal Information?

In short

We share your information only with third-party service providers who help us deliver our service. We do not sell, rent, or share your personal information for any other purpose.

We share your information with third-party service providers who perform services on our behalf, solely to enable us to deliver the Mazza AI platform. Access to your data is limited to what is strictly necessary for each provider to carry out their role. We do not sell, rent, or trade your personal information to any third party, and we do not permit our service providers to use your data for their own purposes, including AI model training, advertising, or any other use unrelated to providing our service.

The categories of providers we work with include:

AI Infrastructure Providers

To enable intelligent voice synthesis and deliver real-time voice automation and complex decision-making for your business.

Cloud Hosting & Database Providers

To securely store and manage platform data.

Communication Tools

To facilitate WhatsApp messaging and telephony services.

Authentication & Account Services

To manage secure sign-in and user account functionality.

Analytics

To understand how our platform is used so we can improve it.

We may also disclose your personal information in the following limited circumstances:

Legal obligations.

Where we are required by applicable law, court order, or government authority to disclose information.

Business transfers.

In connection with a merger, acquisition, or sale of assets, your information may be transferred to the successor entity, subject to the same privacy commitments described in this notice.

Cookies & Tracking Technologies

In short

We only use essential cookies necessary for the platform to function. No advertising or analytics cookies.

Our platform uses essential cookies to provide secure authentication and session management. These cookies are set automatically by our infrastructure providers to keep you signed in, protect your account, and ensure requests are routed correctly. They are strictly necessary for the operation of the service and cannot be disabled without preventing the platform from working.

We do not use advertising, tracking, or analytics cookies, and we do not permit third parties to place cookies on our Services for those purposes.

How Long Do We Keep Your Information?

In short

We keep your information for as long as necessary to fulfill the purposes outlined in this Privacy Notice unless otherwise required by law.

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). No purpose in this notice will require us to keep your personal information for longer than the period of time in which users have an account with us.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information, or, if this is not possible (for example, because your personal information has been stored in backup archives), then we will securely store your personal information and isolate it from any further processing until deletion is possible.

Voice interaction and caller data collected through our AI voice agent platform is retained for a maximum of 90 days unless a longer retention period is required by the business client or applicable law.

Security

In short

We aim to protect your personal information through a system of organizational and technical security measures.

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information.

Do We Collect Information from Minors?

In short

We do not knowingly collect data from or market to children under 18 years of age.

We do not knowingly collect, solicit data from, or market to children under 18 years of age, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 18 or that you are the parent or guardian of such a minor and consent to such minor dependent's use of the Services. If we learn that personal information from users less than 18 years of age has been collected, we will take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 18, please contact us at admin@mazzaai.com.

What Are Your Privacy Rights?

In short

Under UAE Federal Decree-Law No. 45 of 2021, you have the right to access, correct, and request deletion of your personal information.

As a user of our Services, you have the following rights under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL):

The right to request access to and obtain a copy of your personal information.
The right to request rectification of inaccurate or incomplete personal information.
The right to request erasure of your personal information.
The right to restrict the processing of your personal information.
The right to data portability.

You may also object to the processing of your personal information in certain circumstances. To make any such request, contact us using the details in section 11. We will respond within 30 days of receipt.

We only process your personal data to the extent necessary to deliver our Services. We do not collect more than we need, and we do not use your data for any purpose beyond what is described in this notice.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can log in to your account settings and update your user account or contact us using the information provided. Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

If you have questions or comments about your privacy rights, you may email us at admin@mazzaai.com.

Do We Make Updates to This Notice?

In short

Yes, we will update this notice as necessary to stay compliant with relevant laws.

We may update this Privacy Notice from time to time. The updated version will be indicated by an updated "Revised" date at the top of this Privacy Notice. If we make material changes to this Privacy Notice, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

How Can You Contact Us About This Notice?

If you have questions or comments about this notice, you may email us or contact us by post:

Mazza AI

Dubai, United Arab Emirates

admin@mazzaai.com

Send a message

How Can You Review, Update, or Delete the Data We Collect from You?

You have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

To request to review, update, or delete your personal information, please contact us at admin@mazzaai.com.