Privacy Policy

1. Who we are

iChat AI ("iChat AI", "we", "us") is the trading brand of Nobody Knows Entertainment FZC LLC, a business automation and AI services provider registered in the United Arab Emirates.

Legal entity: Nobody Knows Entertainment FZC LLC
Trade licence number: 262542053888
Registered address: CWS-1V-904477, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates
Contact for privacy matters: info@ichatai.ae
WhatsApp: +971 52 349 2787

This policy explains how we collect, use, store and protect personal data when you use our website (ichatai.ae), interact with our AI assistant, submit a form, or contact us through any channel.

We process personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and applicable UAE regulations.

2. Our two roles

It is important to understand the two different capacities in which we handle personal data:

As a Data Controller — when you visit our website, chat with our assistant, or contact us as a prospective or current client. We decide why and how your data is processed. This policy governs that relationship.

As a Data Processor — when we build and operate automation systems for our clients, and their customers' data flows through those systems. In those cases, our client is the Data Controller and determines the purposes of processing. We act only on their documented instructions, under a separate Data Processing Agreement. If you are a customer of one of our clients, please refer to that company's own privacy policy.

3. What personal data we collect

Data you give us directly:

• Name, email address, phone number and WhatsApp number
• Company name and business details
• The content of your messages to us (chat, WhatsApp, email, contact forms)
• Booking or appointment details, where you schedule a meeting with us
• Any other information you choose to share in a conversation

Data collected automatically:

• IP address, browser type, device type and operating system
• Pages visited, time on site and referring source
• Cookie identifiers (see Section 10)

Data we do NOT collect: We do not intentionally collect sensitive personal data (health data, biometric data, religious or political beliefs, or data revealing racial or ethnic origin). Please do not share such information with us or with our AI assistant.

4. How our AI assistant works — important disclosure

Our website features an AI assistant ("Nobody"). We want to be explicit about how it operates:

• You are talking to an automated system, not a person. The assistant identifies itself as an AI. It is not a human agent.
• Your messages are processed by a third-party AI model (currently OpenAI) to generate responses. This means the content of your conversation is transmitted outside the UAE (see Section 7).
• Conversation history is stored in our database so we can improve the service and respond to follow-up enquiries.
• We do not use your conversations to train AI models. Our AI provider processes your messages solely to generate a response for you.
• You can always reach a human. At any point you may ask to speak with a person, and your request will be escalated to our team. You can also contact us directly at info@ichatai.ae.
• No consequential automated decisions. Our assistant provides information, answers questions and schedules meetings. It does not make decisions that produce legal effects or similarly significant consequences for you. Should this change, you have the right to request human review of any automated decision affecting you.

5. Why we process your data and on what legal basis

Under the PDPL, our primary legal basis is your consent, which you provide when you voluntarily submit a form, start a conversation with our assistant, or contact us. Consent is freely given and you may withdraw it at any time.

Where we process data to fulfil a contract with you or to comply with a legal obligation, we rely on the corresponding exceptions permitted under the PDPL.

6. Who we share your data with

We do not sell your personal data. We share it only with service providers necessary to operate our business:

We may also disclose personal data where required by UAE law, court order, or a lawful request from a competent authority.

7. International data transfers

Our infrastructure and service providers are located outside the United Arab Emirates. This means your personal data is transferred to, and processed in, other countries.

Specifically, your personal data may be stored or processed in:

• France — our website and email systems
• Indonesia — our automation and database systems
• The United States — our AI assistant provider, WhatsApp messaging and calendar services

When we transfer personal data outside the UAE, we do so in accordance with the PDPL's requirements for cross-border transfers, and we ensure that appropriate contractual safeguards are in place with each provider.

By using our AI assistant, you acknowledge that the content of your conversation is transmitted internationally for processing.

8. How long we keep your data

We delete or anonymise personal data once it is no longer needed for the purpose for which it was collected, unless a longer retention period is required by law.

9. Your rights

Under the PDPL, you have the right to:

• Access — obtain confirmation of whether we process your data, and a copy of it
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we process your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing, including automated processing and profiling
• Withdraw consent — at any time, without affecting the lawfulness of prior processing
• Human review — request that a person reviews any automated decision affecting you

How to exercise these rights: email info@ichatai.ae with your request. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

Right to complain: if you believe we have not handled your data lawfully, you may lodge a complaint with the UAE Data Office.

10. Cookies

We use cookies and similar technologies to make our website function and to understand how it is used.

• Essential cookies — required for the website and chat assistant to work. These cannot be disabled.
• Analytics cookies — help us understand visitor behaviour in aggregate. These are only set with your consent.

You can manage or delete cookies through your browser settings. Disabling essential cookies may prevent parts of the site from working.

11. Data security

We implement technical and organisational measures appropriate to the risk, including encrypted connections (HTTPS/TLS), access controls, credential management, and regular review of who can access personal data.

No system is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the UAE Data Office and affected individuals without undue delay, as required by the PDPL.

12. Children

Our services are directed at businesses and are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

13. Changes to this policy

We may update this policy to reflect changes in our services or in applicable law. The "Last updated" date at the top indicates when it was last revised. Material changes will be communicated on this page.

14. Contact

iChat AI — a trading brand of Nobody Knows Entertainment FZC LLC Email: info@ichatai.ae WhatsApp: +971 52 349 2787 Address: CWS-1V-904477, 26th Floor, Amber Gem Tower, Ajman, United Arab Emirates

iChat AI is the trading brand of Nobody Knows Entertainment FZC LLC, trade licence 262542053888, registered in the United Arab Emirates.