1. INTRODUCTION

This Privacy Policy explains how LaunchFoundry.ai ("we," "us," or the "Company") collects, uses, and protects your personal data. This Policy is compliant with DIFC Data Protection Law No. 5 of 2020 ("DIFC DP Law").

2. LEGAL BASIS FOR PROCESSING

We process personal data only when we have a lawful basis:

• Consent: You have explicitly agreed to the processing.
• Contractual Necessity: Required to fulfill our service terms with you.
• Legal Obligation: Required by DIFC or UAE law.
• Legitimate Interests: Necessary for business operations (e.g., security, analytics) without overriding your rights.

3. DATA WE COLLECT

3.1 Information You Provide:

• Account Data: Name, email, password, company details.
• Transaction Data: Billing address, payment history (we do not store raw card details).
• Content: Projects, configurations, and inputs you create on the Platform.

3.2 Information Collected Automatically:

• Technical Data: IP address, device type, browser version.
• Usage Data: Click patterns, feature usage, timestamps.
• Cookies: Session tokens and analytics identifiers.

3.3 Special Category Data:

• We do not intentionally collect sensitive data (race, biometrics, health, religion). Please do not upload such data to the Platform.

4. HOW WE USE YOUR DATA

We use your data to:

• Deliver Services: Create accounts, process payments, and run the Platform.
• Security: Prevent fraud and enforce our Terms of Service.
• AI & Automation: Use inputs to generate outputs via our AI systems. When AI is used, we ensure transparency and human oversight options.
• Marketing: Send updates and offers (only with your consent).
• Improvement: Analyze anonymized usage to upgrade our technology.

5. DATA RETENTION

We retain data only as long as necessary:

Data is securely deleted or anonymized upon request, subject to legal retention obligations.

6. DATA SHARING

We do not sell your data. We share data only with:

• Service Providers: Cloud hosting (e.g., AWS/Azure), payment processors, and analytics tools under strict data processing agreements.
• Legal Authorities: If required by DIFC law or court order.
• Business Transfers: In the event of a merger or acquisition.

7. INTERNATIONAL TRANSFERS

We may transfer data outside the DIFC to jurisdictions deemed adequate (e.g., UK, EU) or where appropriate safeguards are in place. We have notified the DIFC Commissioner of these transfers as required.

8. SECURITY

We use industry-standard security measures, including encryption (SSL/TLS), access controls, and regular vulnerability assessments. While we work hard to protect your data, no system is 100% immune to external threats. You are responsible for keeping your credentials confidential.

9. COOKIES

We use cookies to secure and improve the Platform.

• Essential: Required for login and security.
• Non-Essential: Analytics and marketing (used only with your consent).

You can manage cookie preferences via your browser settings.

10. YOUR RIGHTS

Under DIFC Law, you have the right to:

• Access: Request a copy of your data.
• Rectify: Correct inaccurate data.
• Erase: Request deletion ("Right to be Forgotten").
• Restrict: Pause processing during disputes.
• Object: Opt-out of legitimate interest processing.
• Portability: Request data in a transferrable format.
• Withdraw Consent: Stop marketing or optional processing.
• Human Review: Request human intervention on significant AI-driven decisions.

11. EXERCISING YOUR RIGHTS

To exercise any of the rights above, simply contact us.

Email: dpo@launchfoundry.ai
Subject Line: Data Subject Request

Process:

• We will acknowledge receipt within 5 business days.
• We will verify your identity to prevent unauthorized access.
• We aim to resolve requests within 30 days.

12. MARKETING

You can opt-out of marketing emails at any time by clicking the "Unsubscribe" link in the footer of our emails or by contacting dpo@launchfoundry.ai. Transactional emails (invoices, password resets) cannot be opted out of.

13. CHANGES TO POLICY

We may update this policy. Material changes will be notified via email or a platform notice. Continued use implies acceptance.

14. CONTACT & COMPLAINTS

For all privacy inquiries, contact:

dpo@launchfoundry.ai

If you believe your rights have been violated, you may lodge a complaint with the DIFC Commissioner of Data Protection (commissioner@difc.ae).