Privacy Policy

Effective date: 5 August 2026  ·  Last updated: 5 August 2026

Gulfinder FZC (“Gulfinder”, “we”, “us”) operates the website gulfinder.ai and the business development platform available through it (“gulfinder.ai” or the “Platform”). This policy explains what information we collect, why we collect it, and what rights you have.

1. Information we collect

Information you give us

• Name and email address, provided when you request a sign-in link or order a report
• Business information you enter during a report request: your industry, target market, product or service description, budget range and similar commercial details
• Messages you send to our AI advisor and chat interface
• Files you upload for analysis (PDF documents and images)

Information collected automatically

• IP address, browser type and device information
• Pages visited, features used, and timestamps
• Technical logs generated for security and rate limiting

Information we do not collect

• We do not collect or store payment card details. All payments are processed by a PCI DSS Level 1 certified payment provider, and card data never reaches our servers.
• We do not store passwords. Authentication is passwordless.
• We do not collect special category data such as health, biometric, religious or political information. Please do not submit such information.

2. Why we process your information

Purpose	Legal basis
Generating and delivering the reports you order	Performance of a contract
Operating your account and saving your conversations	Performance of a contract
Processing payments and subscriptions	Performance of a contract
Matching you with a human expert for your report	Performance of a contract
Sending service emails such as reports, sign-in links and receipts	Performance of a contract
Preventing fraud, abuse and unauthorized access	Legitimate interests
Improving report quality and platform reliability	Legitimate interests
Marketing emails	Your consent, withdrawable at any time

3. Automated processing and artificial intelligence

Reports are generated using artificial intelligence combined with live market research and, where applicable, review by a human subject-matter expert.

4. Who we share information with

We share information only with service providers who process it on our behalf in order to deliver the Platform. These are engaged under contract and may only use the information for the purpose we specify.

Category of recipient	Purpose	Location
Artificial intelligence and research providers	Generating report content and powering the advisory chat	Outside the UAE
Payment processor	Processing payments and subscriptions	Outside the UAE
Email delivery provider	Sending reports, sign-in links and receipts	Outside the UAE
Document generation provider	Producing the final report file	Outside the UAE
Business data provider	Company contact information for supplier and distributor reports	Outside the UAE
Hosting provider	Hosting the Platform and its data	Outside the UAE
Independent subject-matter experts	Report review and optional consultation	Various

A current list of the specific providers we engage is available on request by writing to info@gulfinder.ai.

We do not sell your personal information, and we do not share it for third-party advertising.

We may disclose information where required by applicable law, court order or lawful request from a competent authority.

5. International transfers

Some of the providers described above are located outside the United Arab Emirates. Where information is transferred internationally, we rely on the provider’s contractual data protection commitments and, where applicable, standard contractual clauses.

6. How long we keep information

Data	Retention period
Account information	For as long as your account is active
Reports and order records	3 years, for support and record-keeping
Chat conversations	Until you delete them, or until account closure
Payment records	5 years, as required by UAE tax and accounting rules
Security and access logs	12 months
Uploaded files	Processed and deleted after report generation

On account closure we delete or anonymize your data within 30 days, except where a longer legal retention period applies.

7. How we protect information

• All traffic is encrypted in transit using TLS
• Session tokens are stored hashed, never in plaintext
• No API credentials are exposed to the browser
• Payments and entitlements are verified server-side
• Rate limiting is applied to all public endpoints
• Authentication is passwordless, using time-limited sign-in links
• Two-factor authentication is enforced on all administrative accounts
• Activity is audit-logged, and backups are stored off-server
• Access to production systems is restricted to authorized personnel

No system can guarantee absolute security. If a breach affects your personal information, we will notify you and the relevant authority as required by applicable law.

8. Your rights

You may:

• Access the information we hold about you
• Correct inaccurate information
• Delete your account and associated data
• Export your data in a portable format
• Object to processing based on legitimate interests
• Withdraw consent for marketing at any time

To exercise any right, email info@gulfinder.ai. We respond within 30 days.

9. Cookies and local storage

We use browser local storage for essential functions only: keeping you signed in, storing your language preference, and caching your conversations. We do not use analytics or advertising cookies, and we do not track you across other websites.

10. Children

The Platform is intended for business use by adults. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.

11. Changes to this policy

We will post any changes on this page and update the date above. Material changes will be notified by email to registered users.

12. Contact

Gulfinder FZC
Business Centre, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Email: info@gulfinder.ai
Web: gulfinder.ai