Skip to main content

DubaiBox Ai Automation

+971 58 258 5138

Privacy Policy

Who We Are

DubaiBox.ai is based in Business Bay, Dubai, UAE.

Contact:
Email: hi@dubaibox.ai
Phone: +971 58 258 5138
Address: Empire Heights A, Office 1607, Business Bay, Dubai, UAE

For any privacy-related query or to exercise your data rights, contact us using the details above.

Two Roles We Play: Controller vs. Processor

It’s important to understand that DubaiBox.ai acts in two different capacities, depending on whose data is involved:

  • As a Data Controller — for data collected directly from you, the visitor or prospective client, through our website, contact forms, or sales conversations.
  • As a Data Processor — for data collected on behalf of our clients (Dubai businesses) when our AI Receptionist, AI Appointment Setter, or WhatsApp Automation interacts with their customers, callers, or website visitors. In this case, our client remains the Data Controller, and we process data strictly under their instructions and our service agreement with them.

If you are a customer of one of our clients and have questions about how your data was handled during a call or WhatsApp conversation, please contact that business directly — they control that data. We can assist them in responding to your request.

What Personal Data We Collect

a) When you visit our website

  • IP address, browser type, device information, and pages visited (via standard analytics/cookies)
  • Information you submit through contact or “Get Started” forms (name, email, phone number, company name, and details about your enquiry)

b) When you contact us directly (phone, WhatsApp, email)

  • Your name, phone number, email address, company details, and the content of your message or call

c) When we deliver services on behalf of our clients (as Processor)

Depending on which service a client has engaged us for, this may include:

  • Call recordings and transcripts of conversations between an AI Receptionist/Appointment Setter and a caller
  • WhatsApp message content, phone numbers, and conversation history
  • Booking details (appointment time, service requested, calendar data)
  • Data synced to/from the client’s CRM (name, contact details, enquiry history)

Why We Collect and Process Data

We process personal data for the following purposes:

  • To respond to enquiries and provide requested information about our services
  • To operate and improve our AI voice and WhatsApp automation platform
  • To deliver contracted services to our clients (e.g., answering calls, booking appointments, sending WhatsApp replies) on their behalf
  • To maintain call/chat recordings and transcripts for quality assurance, dispute resolution, and legal compliance
  • To detect and prevent misuse, fraud, or security incidents
  • To comply with UAE legal and regulatory obligations, including telemarketing rules under Cabinet Resolutions No. 56 and 57 of 2024

Legal Basis for Processing

Under the PDPL, we rely on one or more of the following legal bases:

  • Consent — for example, the recording notice given at the start of every AI-handled call, or opt-in consent for WhatsApp marketing messages
  • Contractual necessity — to deliver the services our clients have engaged us for
  • Legal obligation — to comply with UAE telemarketing, consumer protection, and data protection laws
  • Legitimate interest — to maintain platform security, prevent fraud, and improve service quality

Call Recording & Consent

All calls handled by our AI Receptionist, Appointment Setter, or Outbound Calling services begin with a spoken notice disclosing:

  • The identity of the business being called/calling
  • The purpose of the call
  • That the call is being recorded

Recording without consent is a criminal offence under UAE Cybercrimes Law, and we take this obligation seriously across every deployment.

Data Sharing & Third Parties

We do not sell personal data. We may share data with:

  • Our clients — the Dubai business that engaged our services, since data collected during a call or chat belongs to their customer relationship
  • Sub-processors and infrastructure providers who help us deliver the service, such as:
    • Cloud hosting and telephony providers (UAE or approved-region data centres)
    • Meta (for WhatsApp Business Platform messaging)
    • CRM and calendar platforms our clients use (e.g., HubSpot, Zoho, Salesforce, Bitrix24, Pipedrive, Google Calendar, Outlook) — only where a client has connected their own account
  • Regulators or law enforcement, where legally required (e.g., TDRA, UAE courts)

Any third party we share data with is bound by confidentiality and data protection obligations consistent with this policy.

Data Storage & International Transfers

Call recordings, transcripts, and contact records are stored in the UAE or in regions approved under the PDPL framework. Where any part of our processing pipeline (speech-to-text, AI model inference, text-to-speech, or storage) involves an approved region outside the UAE, we ensure appropriate safeguards are in place consistent with PDPL cross-border transfer requirements.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy, including:

  • Call recordings and transcripts: retained per the retention period agreed with our client, or as required by law
  • Website enquiry data: retained for as long as needed to respond to and follow up on your enquiry, or until you request deletion
  • WhatsApp conversation history: retained per the client’s configured retention settings

Clients may configure specific retention periods for their own account data in line with their internal policies and legal obligations.

Your Rights Under the PDPL

Subject to applicable exceptions, you have the right to:

  • Request confirmation of whether we hold personal data about you
  • Request a copy of your personal data
  • Request correction of inaccurate data
  • Request erasure of your personal data
  • Object to or restrict certain processing
  • Withdraw consent at any time (e.g., opt out of WhatsApp marketing messages by replying “STOP”)

To exercise any of these rights, contact us at hi@dubaibox.ai. If your data was collected through one of our clients’ AI agents (a call or WhatsApp chat with a business using our platform), please also contact that business directly, as they are the Data Controller for that relationship.

Cookies

Our website uses cookies to:

  • Understand how visitors use our site (analytics)
  • Remember basic preferences
  • Support core website functionality (e.g., contact forms)

You can control or disable cookies through your browser settings. Disabling cookies may affect some website functionality.

Free Zone Clients (DIFC / ADGM)

Businesses operating within the DIFC or ADGM are subject to those free zones’ own data protection regimes (DIFC Data Protection Law, ADGM Data Protection Regulations). Where we provide services to clients based in these free zones, we accommodate their applicable regulatory requirements under a separate data processing agreement.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last updated” date at the top of this page will indicate the most recent revision.

Contact Us

For any questions about this Privacy Policy or how your data is handled:

DubaiBox.ai
Empire Heights A, Office 1607, Business Bay, Dubai, UAE
Email: hi@dubaibox.ai
Phone: +971 58 258 5138

Note: This policy is general information and does not constitute legal advice. DubaiBox.ai recommends confirming compliance with a qualified UAE data protection lawyer before publishing.