Privacy Policy

Last updated: Oct 09, 2025
1. Introduction & Purpose

Slaab AI ("we," "us," or "our") is a global provider of AI-automated business solutions designed to meet the operational needs of any industry and any scale of business. From startups to enterprises, our next-generation AI agents are built to optimize workflows, improve accuracy, and accelerate growth across all departments.

Our guiding philosophy is simple: "Whatever You Do, We Automate It." Our automation tools are smarter, faster, and scalable, tailored precisely to your business needs. Whether you're enhancing customer service, streamlining back-office operations, or automating decision-making, our AI systems are designed to plug into your existing infrastructure and deliver measurable results.

This Privacy Policy has been created both to comply with global data protection regulations (including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UAE Personal Data Protection Law (PDPL)), and to demonstrate our commitment to transparency and accountability. We recognize that privacy is a fundamental right and understand the importance of safeguarding your personal data in a trustworthy and responsible manner.

We adhere to the following core principles in our data practices:

  • Transparency: Clear, open communication about how your data is collected, used, and shared
  • Data Minimization: Only the data necessary for a specific purpose is collected and retained
  • Purpose Limitation: Data is processed solely for the purposes disclosed to you
  • Integrity & Confidentiality: Strong security protocols are in place to protect your data
  • User Rights: You have the right to access, rectify, and request deletion of your data

This policy applies to all individuals who interact with Slaab AI through our website ( www.slaab.ai ), forms, communication channels, or services; including existing clients and potential future clients. Whether you're engaging with us for a project discussion, requesting a proposal, or exploring how our automation tools can enhance your operations, this policy outlines how we protect your privacy every step of the way.

2. Definitions

To ensure clarity and full understanding of this Privacy Policy, the following terms are defined in accordance with applicable data protection laws:

  • "Personal Data" refers to any information relating to an identified or identifiable natural person. This may include names, contact details, identification numbers, online identifiers, and any other information specific to the identity of the individual.
  • "Processing" means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, alignment or combination, restriction, erasure, or destruction.
  • "Data Subject" is any individual whose personal data is collected, held, or processed by Slaab AI. This typically includes clients, prospective clients, and website visitors.
  • "Data Controller" means the natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of personal data. For the purposes of this Policy, Slaab AI is the Data Controller.
  • "Data Processor" refers to a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
  • "Third Party" means any person or organization other than the data subject, controller, processor, or persons who are authorized to process data under the direct authority of the controller or processor.
  • "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data.
  • "Supervisory Authority" refers to an independent public authority responsible for monitoring the application of data protection law, such as the Information Commissioner’s Office (ICO) in the UK, the Data Protection Authority in the EU, or equivalent bodies in other jurisdictions.
  • "Sensitive Personal Data" (also known as special category data) includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification, health data, or data concerning a natural person’s sex life or sexual orientation.
  • "Anonymization" is the process of removing personally identifiable information from data sets, so that individuals cannot be identified.
  • "Pseudonymization" means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information.
3. Scope & Applicability

This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by Slaab AI in the context of offering and delivering its services. The Policy covers data obtained from individuals through:

  • Visiting or using our website (www.slaab.ai)
  • Submitting inquiries, contact forms, or scheduling consultations
  • Engaging with our representatives during discovery, proposal, or contracting phases
  • Participating in any communication, email, or support interaction
  • Any other channel by which a client or prospective client discloses information to us voluntarily

This Policy applies regardless of the geographic location of the data subject or their device. Whether you are located in India, the European Union, the United Arab Emirates, the United States, or any other jurisdiction, we maintain the same high standards of data protection and regulatory alignment.

This Policy applies to:

  • Clients: Businesses or representatives of businesses who engage with us for consultation, project planning, or service implementation
  • Prospective Clients: Businesses or representatives exploring our services through the website, inquiry forms, or meetings
  • Website Visitors: Individuals browsing or interacting with our website
  • Legal or Regulatory Authorities: Reviewing our practices under applicable legal or certification standards (e.g., ISO)

This Privacy Policy does not apply to:

  • Third-party websites linked from our platform. We encourage users to review the privacy practices of any external site before providing any data.
  • Data received from third parties who act as independent controllers (e.g., referral partners)
  • Employees, contractors, or internal personnel, who are governed by internal data handling policies separate from this document

To ensure clarity and full understanding of this Privacy Policy, the following terms are defined in accordance with applicable data protection laws:

  • "Personal Data" refers to any information relating to an identified or identifiable natural person. This may include names, contact details, identification numbers, online identifiers, and any other information specific to the identity of the individual.
  • "Processing" means any operation or set of operations performed on personal data, whether or not by automated means. This includes collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure, dissemination, alignment or combination, restriction, erasure, or destruction.
  • "Data Subject" is any individual whose personal data is collected, held, or processed by Slaab AI. This typically includes clients, prospective clients, and website visitors.
  • "Data Controller" means the natural or legal person, public authority, agency, or other body which determines the purposes and means of the processing of personal data. For the purposes of this Policy, Slaab AI is the Data Controller.
  • "Data Processor" refers to a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller.
  • "Third Party" means any person or organization other than the data subject, controller, processor, or persons who are authorized to process data under the direct authority of the controller or processor.
  • "Consent" means any freely given, specific, informed, and unambiguous indication of the data subject’s wishes by which they signify agreement to the processing of their personal data.
  • "Supervisory Authority" refers to an independent public authority responsible for monitoring the application of data protection law, such as the Information Commissioner’s Office (ICO) in the UK, the Data Protection Authority in the EU, or equivalent bodies in other jurisdictions.
  • "Sensitive Personal Data" (also known as special category data) includes information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for identification, health data, or data concerning a natural person’s sex life or sexual orientation.
  • "Anonymization" is the process of removing personally identifiable information from data sets, so that individuals cannot be identified.
  • "Pseudonymization" means the processing of personal data in such a manner that the data can no longer be attributed to a specific data subject without the use of additional information.
4. Data Controller Details

The entity responsible for the collection, processing, and protection of your personal data under this Privacy Policy is:

SOL AI TECH FZ LLC
Trading as: Slaab AI
Dubai Headquarters Address:
14, 15, 16, FF, Akshardham Residency, Opp. RAF Camp, Ring Road, Vastral, Ahmedabad, Gujarat, 382418, India

India Headquarters Address:
Sheikh Mohammed Bin Zayed Rd - In5 Media - Dubai Production City - Dubai
Official Communication Email: support@slaab.ai

Slaab AI is the legal controller of all personal data processed in the course of delivering its services and operating its platform. We assume responsibility for ensuring that your data is handled securely, fairly, and in compliance with all applicable data protection regulations.

We do not currently appoint a dedicated Data Protection Officer (DPO); however, privacy and compliance matters are handled by an authorized officer within our leadership team. Any inquiries related to data privacy, access requests, deletions, rectifications, or supervisory authority engagement should be directed to the above email.

We encourage all data subjects to contact us first with any concerns regarding the handling of personal information before approaching a supervisory authority, as we are committed to resolving all matters efficiently and transparently.

5. Types of Data Collected

Slaab AI collects only the information necessary to respond to inquiries, engage in service discussions, and fulfill contractual obligations for custom AI automation services. The categories of personal data we collect include the following:

5.1 Data You Provide Directly

We collect data that you voluntarily submit to us via our website forms, email, phone, or during live consultations. This includes:

  • Contact Information: Name, email address, phone number, company name, job title
  • Project Details: Nature of the automation needed, industry, specific operational challenges, departmental context
  • Communication Records: Email threads, meeting notes, and chat transcripts during discovery and proposal stages
5.2 Data Collected Automatically

When you interact with our website or digital assets, we collect certain data automatically using analytics tools:

  • Device & Usage Data: IP address, browser type, device identifiers, operating system, referring URLs, time zone, and time spent on pages
  • Interaction Data: Pages visited, links clicked, scroll behavior, and form interactions

This data is primarily collected via Google Analytics to understand site performance and improve user experience. We do not use marketing or ad cookies.

5.3 Data Collected During Contracting

Once a client proceeds beyond consultation:

  • Business Identity Information: GST number, legal entity name, and registered address (if applicable)
  • Authorized Signatory Information: Full name, designation, contact info of the signing party for the client organization
  • Service-Related Input: Details, documents, and references required to execute the AI implementation project as per Scope of Work
5.4 Sensitive Personal Data

Slaab AI does not intentionally collect or process sensitive personal data (such as health data, religious beliefs, or biometric data) as part of its services. If such data is shared inadvertently, it will be handled securely and deleted unless expressly required for the performance of the contract with clear written consent.

5.5 Third-Party Data

We do not buy or rent data from third parties. If a client submits data belonging to a third party (e.g., employee workflow samples or customer flows), it is the client’s responsibility to ensure they have obtained valid consent from those individuals and to provide it upon request.

6. Methods of Data Collection

Slaab AI collects personal data through the following lawful and transparent methods:

6.1 Direct User Submission

We collect data when users:

  • Submit contact or inquiry forms on our website
  • Communicate with us via email or phone
  • Participate in scheduled consultations
  • Share documents or information voluntarily during discovery or onboarding phases

All such submissions are initiated by the user and are used strictly for the purposes disclosed at the time of collection.

6.2 Automated Technologies

When users browse or interact with our website, we use Google Analytics and related tools to collect data automatically. This includes:

  • Tracking of user interaction and device/browser metadata
  • Usage logs and behavior analytics to optimize our services
  • Session data for performance and error analysis

We do not use any form of automated profiling, third-party cookies, or behavioral targeting.

6.3 Engagement During Contract Execution

Once an agreement is in place, further data may be collected through:

  • Collaborative document exchanges (e.g., SOW, deliverables, project documentation)
  • Secure file-sharing platforms used to facilitate the onboarding and automation setup
  • Team-level communication during project delivery (e.g., via email, scheduled calls, feedback submissions)

All such data is stored securely, restricted to authorized personnel, and processed exclusively for project execution.

6.4 Offline Interactions

Occasionally, data may be collected through:

  • In-person meetings or client workshops
  • Printed or scanned documents shared during project alignment
  • Business cards or physical forms shared during exhibitions or formal briefings

Such information is digitized and treated with the same safeguards as digital submissions.

7. Legal Basis for Processing

Slaab AI processes personal data in compliance with applicable data protection laws, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UAE Personal Data Protection Law (PDPL). Our data processing activities are grounded in one or more of the following lawful bases:

7.1 Consent

Where required by law, we obtain your clear and unambiguous consent before collecting or processing your personal data. This applies particularly to optional communications such as promotional emails or newsletters. You may withdraw your consent at any time by contacting support@slaab.ai, and withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

7.2 Performance of a Contract

We process your personal data when it is necessary for the negotiation, execution, or performance of a contract with you or your organization. This includes collecting and using your information to provide consultation, develop project proposals, manage agreements, and deliver automation services as described in the Scope of Work.

7.3 Legitimate Interests

We may process your data when it is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your privacy rights. Examples include:

  • Improving website performance and user experience
  • Securing our systems against fraud or abuse
  • Managing client relationships and communication workflows
  • Internal auditing and compliance with ISO certification processes

In all cases, we perform legitimate interest assessments (LIAs) to ensure that our interests do not unfairly impact your rights.

7.4 Legal Obligation

We may be required to process or retain certain personal data to comply with applicable legal obligations. For example, we may retain invoicing data for tax compliance, respond to lawful data access requests, or maintain documentation for ISO or government audits.

7.5 Vital Interests

Although rare, we may process personal data where it is necessary to protect your vital interests or those of another natural person, particularly in the context of legal disputes or incidents impacting system integrity.

7.6 GDPR & PDPL

In compliance with the EU General Data Protection Regulation (GDPR) and the UAE Personal Data Protection Law (PDPL), Slaab AI ensures that all processing activities are based on at least one lawful basis, including consent, performance of a contract, compliance with legal obligations, protection of vital interests, performance of tasks in the public interest, or legitimate interests pursued by the Company. Where we rely on legitimate interests, we ensure such interests are balanced against your rights and freedoms.

8. Purpose of Data Processing

Slaab AI processes personal data strictly for specified, explicit, and legitimate purposes aligned with the expectations of our clients and site visitors. We do not use your personal information in ways that are incompatible with these purposes.

8.1 Communication & Consultation

We process your contact details and inquiry information to:

  • Respond to requests and inquiries made via our website or email
  • Schedule and conduct consultation calls
  • Understand your automation requirements
8.2 Proposal & Contract Fulfillment

We process relevant business and project information to:

  • Draft and share proposals tailored to your business use case
  • Prepare and execute contractual documentation such as Scope of Work and NDAs
  • Facilitate onboarding and project planning
8.3 Service Delivery & Performance

Once contracted, we process operational and contextual data to:

  • Design, implement, and optimize AI solutions according to agreed specifications
  • Track project progress and internal task execution
  • Collect client feedback and support post-delivery reviews
8.4 Analytics & Website Optimization

We collect interaction and usage data to:

  • Monitor website traffic, engagement patterns, and error logs
  • Analyze user experience and improve website layout or communication clarity
  • Assess performance of outreach or lead generation channels
8.5 Regulatory Compliance & Documentation

We retain and process data as necessary to:

  • Maintain audit trails and contractual records for ISO certifications
  • Comply with applicable tax, accounting, and data retention laws
  • Cooperate with lawful requests from supervisory or regulatory authorities
8.6 Promotional and Informational Communication

Where consent has been provided, we may use your contact details to:

  • Send you updates, newsletters, or announcements about our services
  • Share educational material or AI automation insights
  • Invite you to participate in user surveys or business events

You can opt-out of receiving such communications at any time using the unsubscribe link in our emails or by contacting support@slaab.ai .

9. Automated Decision-Making and Profiling

At Slaab AI, we do not engage in any form of automated decision-making or profiling that produces legal effects or similarly significant consequences for individuals as defined under GDPR Article 22, CCPA, or UAE PDPL.

9.1 No Automated Decisions with Legal or Material Impact

We do not use algorithms or automated processes to make decisions that:

  • Affect your legal rights
  • Have significant impacts on your employment, financial position, or service eligibility
  • Result in denial of access to our services based solely on automated processing

All strategic decisions regarding client engagement, proposal development, service scoping, and solution design are made by qualified human professionals after thorough review and consultation.

9.2 Limited Use of Automation for Internal Efficiency

Where automation is used (e.g., analytics dashboards, lead sorting, or task reminders), it is strictly to assist internal operations and does not result in any decisions that impact data subjects without human oversight.

9.3 Transparency and Control

If in the future we introduce any automated tools that might meet the threshold of profiling or automated decision-making under law, we will:

  • Clearly inform you of its existence and purpose
  • Offer meaningful information about the logic involved
  • Provide you with the right to request human intervention and contest the decision
9.4 Right to make the final decision

In accordance with GDPR Article 22 and the UAE PDPL, you have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal or similarly significant effects. Where automated processing is used, you may request human intervention, express your point of view, or contest the decision by contacting us at support@slaab.ai 

10. Data Sharing & Disclosure

Slaab AI is committed to protecting your personal data and does not engage in the sale or unauthorized disclosure of your information. However, under specific circumstances, we may share your data with carefully vetted third parties and authorities, strictly for the purposes outlined below and only where lawful.

10.1 Internal Access

Your personal data is accessible only to Slaab AI staff, contractors, and authorized personnel who require access to perform their duties. All internal access is role-based, subject to confidentiality agreements, and governed by strict access control policies.

10.2 External Service Providers (Processors)

We may engage third-party vendors to support our operations, such as:

  • Cloud storage providers
  • Analytics providers (e.g., Google Analytics)
  • Compliance or certification bodies (e.g., ISO audit partners)

These vendors are contractually bound to:

  • Process personal data only as instructed by us
  • Implement adequate security measures
  • Comply with applicable data protection laws

We ensure that all processors undergo rigorous due diligence and enter into Data Processing Agreements (DPAs) with us.

10.3 Legal and Regulatory Disclosures

We may disclose personal data where required to:

  • Comply with applicable laws, court orders, or legal processes
  • Respond to legitimate requests from regulatory authorities or law enforcement bodies
  • Fulfill obligations related to tax filings, financial audits, or certification audits
10.4 Business Transfers

In the event of a merger, acquisition, sale, or corporate restructuring, your data may be transferred to the new entity, subject to this same Privacy Policy or an equivalent level of protection. You will be notified of any such change in control that affects your data rights.

10.5 With Your Explicit Consent

In rare cases, we may share your data with external collaborators, advisors, or partners — but only after obtaining your clear, written consent and informing you of the purpose and scope of the data sharing.

10.6 International Data Transfers

Where data is transferred across borders (e.g., for cloud services or remote team operations), we ensure:

  • The destination country has adequate data protection laws, or
  • Standard Contractual Clauses (SCCs) or equivalent safeguards are in place
  • Transfers comply with GDPR Chapter V, CCPA restrictions, and UAE PDPL cross-border rules
10.7 Third Party Processing

For international data transfers, Slaab AI implements safeguards required under GDPR and PDPL. These may include Standard Contractual Clauses (SCCs), adequacy decisions, or explicit consent from the data subject. Under UAE PDPL, transfers outside the UAE will only occur where the destination country provides adequate protection, or with approval from the UAE Data Office when necessary.

We do not transfer data to jurisdictions that lack appropriate safeguards unless absolutely required by contract and accompanied by risk assessments and protective measures.

11. International Data Transfers & Safeguards

Slaab AI operates globally, and in certain cases, your personal data may be transferred to and processed in countries other than the one in which you reside. These transfers are conducted in strict compliance with applicable data protection regulations and with robust contractual and technical safeguards in place to ensure the security and confidentiality of your personal data.

11.1 Legal Frameworks for International Transfers

We ensure that all international data transfers are legally permissible under:

  • GDPR (General Data Protection Regulation, EU/EEA)
  • CCPA (California Consumer Privacy Act, U.S.)
  • PDPL (UAE Personal Data Protection Law)

We transfer data only when:

  • The destination country is officially recognized as providing an adequate level of protection; or
  • Appropriate safeguards, such as Standard Contractual Clauses (SCCs), are in place; or
  • You have explicitly consented to the transfer after being informed of potential risks.
11.2 Types of Transfers

Data may be transferred internationally in the following contexts:

  • Cloud Hosting & Infrastructure: When using global cloud service providers (e.g., AWS, Google Cloud)
  • Remote Team Collaboration: Internal access by authorized personnel working from different countries
  • Backup & Disaster Recovery: Secure, geo-redundant storage for business continuity
11.3 Safeguards Implemented

To protect your data during international transfers, we implement:

  • Encryption at rest and in transit
  • Access controls and multi-factor authentication for remote systems
  • Signed Data Processing Agreements (DPAs) with all processors
  • Transfer Impact Assessments (TIAs) where required

We regularly review and update these mechanisms to maintain full alignment with evolving legal standards and best practices.

11.4 Transfers to Countries Without Adequate Protection

If personal data must be transferred to a country not recognized as offering adequate protection, we will:

  • Obtain your explicit, informed consent prior to transfer; or
  • Rely on a valid derogation under applicable law (e.g., performance of a contract at your request)

In such cases, we will look through all the associated risks and apply all available safeguards to mitigate them.

12. Data Retention Policy

Slaab AI retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, regulatory, contractual, operational, or certification requirements. We follow a structured data retention schedule to ensure compliance with global data protection laws and to minimize unnecessary data storage.

12.1 General Retention Principles
  • Purpose Limitation: Data is retained only for the specific purpose it was collected for and not reused for unrelated objectives.
  • Data Minimization: We regularly review and delete data that is no longer necessary.
  • Compliance with Legal Requirements: Retention durations are aligned with applicable statutory and regulatory requirements.
12.2 Retention Periods by Data Category
12.3 Criteria for Determining Retention Duration

In deciding how long to retain personal data, we consider:

  • Legal and regulatory obligations
  • Contractual commitments
  • Business and operational requirements
  • Data type, sensitivity, and relevance
  • Industry best practices and certification standards (e.g., ISO 27001)
12.4 Data Disposal & Deletion

When retention periods expire, or data is no longer necessary, we ensure:

  • Secure deletion from active systems
  • Removal from backups within a defined purge cycle
  • Confirmation that third-party processors have also deleted the data
12.5 Data Retention Reviews

We conduct periodic audits of stored data to:

  • Identify outdated or redundant information
  • Validate justification for extended retention
  • Ensure compliance with current laws and risk mitigation standards
13. Data Security Measures

Slaab AI implements a robust, multi-layered data security framework to safeguard personal data against unauthorized access, alteration, disclosure, or destruction. Our practices adhere to leading international standards, including ISO/IEC 27001 and industry best practices.

13.1 Technical Safeguards
  • Encryption: All data is encrypted at rest and in transit using strong encryption protocols (e.g., AES-256, TLS 1.2+).
  • Access Control: Role-based access, enforced with strong authentication mechanisms including two-factor authentication (2FA) for administrative access.
  • Network Security: Firewalls, intrusion detection systems, and network segmentation protect data from external threats.
  • Secure Configuration: Systems are hardened and regularly patched against known vulnerabilities.
13.2 Organizational Measures
  • Confidentiality Agreements: All employees and contractors handling personal data are bound by signed confidentiality and data protection agreements.
  • Training & Awareness: Personnel receive regular training on data protection, cybersecurity hygiene, and secure handling practices.
  • Data Minimization & Anonymization: Only the minimum amount of data necessary is retained and pseudonymization/anonymization is applied where applicable.
13.3 Physical Security
  • Secure Facilities: Our primary systems are hosted in ISO-certified data centers with 24/7 surveillance, biometric access control, and environmental safeguards.
  • Device Security: Company-issued devices are protected with endpoint security solutions, encryption, and remote wipe capabilities.
13.4 Monitoring & Incident Response
  • Continuous Monitoring: We use automated tools to monitor system activity, detect anomalies, and prevent breaches.
  • Breach Notification Protocol: In the event of a data breach, we will notify affected data subjects and regulators within the legally mandated timeframes and take immediate corrective actions.
  • Vulnerability Testing: We perform periodic penetration testing, risk assessments, and security audits.
13.5 Third-Party Risk Management
  • Vendor Assessment: Third-party service providers undergo security and privacy due diligence.
  • Data Processing Agreements: All vendors processing data on our behalf must sign legally binding agreements ensuring data protection and confidentiality.
13.6 Business Continuity & Disaster Recovery
  • Backup Strategy: Encrypted backups are performed regularly and stored in geographically redundant locations.
  • Disaster Recovery Plan: We maintain and periodically test a disaster recovery plan to ensure service continuity in case of incidents.
13.7 Breach Measures

In the event of a data breach that may impact your rights or freedoms, Slaab AI will notify the relevant supervisory authority within 72 hours (GDPR requirement) and, where applicable, notify affected individuals without undue delay (UAE PDPL requirement).

14. Your Rights Under Applicable Laws

As a data subject, you have specific rights under applicable privacy regulations such as the GDPR (EU), CCPA (California), and UAE PDPL. Slaab AI respects and upholds these rights, and we are committed to making it easy for you to exercise them.

14.1 Right to Access

You have the right to request confirmation as to whether your personal data is being processed, and where that is the case, access to the personal data, including the purposes of processing, categories of data, and any third parties with whom it has been shared.

14.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data about you.

14.3 Right to Erasure ("Right to be Forgotten")

You may request the deletion of your personal data where:

  • The data is no longer necessary for the purpose for which it was collected;
  • You withdraw consent and no other legal basis exists;
  • You object to the processing and there are no overriding legitimate grounds;
  • The data has been unlawfully processed;
  • Erasure is required by law.
14.4 Right to Restriction of Processing

You can request a restriction on the processing of your data in specific circumstances, such as when contesting the accuracy of your data or when you object to processing but we need time to verify overriding legitimate grounds.

14.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller, where technically feasible.

14.6 Right to Object

You have the right to object to the processing of your personal data based on our legitimate interests or for direct marketing purposes.

14.7 Right to Withdraw Consent

Where processing is based on consent, you have the right to withdraw your consent at any time without affecting the lawfulness of prior processing. This action will require a withdrawal notice 30 days prior.

14.8 Right Not to be Subject to Automated Decision-Making

You have the right not to be subject to decisions based solely on automated processing that significantly affects you, unless such decisions are:

  • Necessary for entering into or performing a contract;
  • Authorized by law; or
  • Based on your explicit consent.
14.9 Non-Discrimination (CCPA-Specific)

We will not discriminate against you for exercising any of your CCPA rights, including by denying services, charging different prices, or providing a different level or quality of service.

To exercise any of the above rights, please contact us at: support@slaab.ai  We may require you to verify your identity before acting on your request.

15. Exercising Your Rights (Procedures)

Slaab AI has established clear, transparent procedures for individuals to exercise their data protection rights in accordance with applicable laws.

15.1 Submitting a Request

To exercise your rights under this Policy, you may submit a request via:

  • Email: support@slaab.ai
  • Subject Line: "Data Subject Request - [Your Full Name]"
  • Required Information: Please include your full name, contact email, nature of the request (e.g., access, erasure, rectification), and any reference to previous interactions with Slaab AI to help us verify your identity.
15.2 Verification Process

To protect your personal data, we must verify your identity before processing any request. Verification steps may include:

  • Confirming identifying details (e.g., email address or company name used in prior communications)
  • Requesting additional documentation if necessary (e.g., proof of authorization for a representative)
15.3 Response Timelines

We aim to acknowledge your request within 5 business days and respond in full within 30 calendar days. Where legally permitted, we may extend the response period by an additional 30 days depending on the complexity and number of requests. In such cases, you will be notified of the extension and the reason.

15.4 Fees

Requests are generally processed free of charge. However, we may charge a reasonable administrative fee if:

  • The request is manifestly unfounded or excessive
  • Repeated requests are submitted without valid justification

You will be informed of any fees in advance and given the opportunity to modify or withdraw your request.

15.5 Denial of Requests

We may deny a request if:

  • We cannot verify your identity
  • The request conflicts with legal, contractual, or regulatory obligations
  • The request is abusive or harassing in nature

If your request is denied, we will provide a clear explanation and inform you of your right to lodge a complaint with a supervisory authority.

15.6 Appeals and Supervisory Authority Contact

If you are dissatisfied with our response or decision, you may appeal in writing by replying to our email response and requesting a review.

You also have the right to contact the relevant supervisory authority in your jurisdiction:

  • EU: Your national Data Protection Authority (DPA)
  • India: Data Protection Board (DPB) under India DPDP Act
  • UAE: UAE Data Office
  • California: California Privacy Protection Agency (CPPA)

16. Cookies, Tracking Technologies, and Preferences Management

Slaab AI values your privacy and transparency when it comes to digital tracking technologies. This section explains how and why we use cookies and similar technologies, and how you can control them.

16.1 What Are Cookies?

Cookies are small text files placed on your device by a website or service provider. They help recognize your browser and capture and remember certain information to improve site experience, monitor activity, or analyze trends.

16.2 Types of Cookies Used

Slaab AI uses only essential and analytics cookies. We do not use tracking, profiling, or advertising cookies.

We primarily use Google Analytics to collect aggregated, non-personal data about site usage to improve our content and navigation structure.

16.3 Cookies Set by Third Parties

We do not permit third-party advertising cookies or trackers on our website. Google Analytics may set third-party cookies to measure performance but no personally identifiable information is shared with advertisers.

16.4 Managing Your Preferences

While we do not use non-essential cookies that require opt-in, users can still manage cookie behavior through:

  • Browser Settings: You can modify your browser to block cookies, alert you when cookies are sent, or delete stored cookies.
  • Opt-Out Tools: To disable Google Analytics tracking, you can install the Google Analytics Opt-Out Browser Add-on.
16.5 Do Not Track (DNT) Signals

Our website currently does not respond to "Do Not Track" signals from browsers due to the lack of a consistent industry standard. However, no personal data is used for behavioral targeting.

16.6 Cookie Duration and Expiry

Most cookies used by Slaab AI expire within 30 days unless required longer for analytics. Session cookies expire once you close your browser.

17. Children’s Privacy

Slaab AI does not knowingly collect or solicit personal data from children under the age of 18. Our website, services, and offerings are intended exclusively for use by individuals who are 18 years of age or older.

17.1 Age Verification and Exclusion

We do not offer services to or knowingly engage in commercial activities with individuals below the age of 18. If we learn that we have inadvertently collected personal data from a child under 18 without verifiable parental consent, we will:

  • Promptly delete the data from our records;
  • Disable any access or interaction capability if applicable; and
  • Take steps to prevent future occurrences.
17.2 Parental Controls and Consent

If you are a parent or guardian and believe that your child under the age of 18 may have provided us with personal data, please contact us immediately at support@slaab.ai so that we can take appropriate corrective actions.

17.3 Minors in Specific Jurisdictions

Certain jurisdictions may define the age of consent differently (e.g., under 13 in the U.S. for COPPA compliance or under 16 in some EU states). We align with the highest applicable threshold and act proactively to avoid the unintentional collection of children’s data.

18. Links to Third-Party Sites

Our website and communications may contain links to external websites, applications, or services that are not operated or controlled by Slaab AI. This Privacy Policy does not apply to any third-party services, and we are not responsible for the content, security, or privacy practices of those third-party entities.

18.1 Responsibility Disclaimer

When you follow a link to a third-party site:

  • You are subject to that site’s privacy policy and terms.
  • We encourage you to read the privacy policies of any external websites you visit.
  • We disclaim any responsibility for data handling practices or content accuracy on third-party platforms.
18.2 Embedded Content or Integrations

Occasionally, we may embed third-party tools (e.g., video players, maps, forms) or integrations to enhance user experience. These services may set cookies or collect usage data independently. In such cases:

  • The third-party provider is responsible for their data collection practices.
  • We take reasonable steps to only integrate providers with strong reputations for privacy compliance.
18.3 Third-Party Login or Redirects

We do not currently support third-party login functionality (e.g., "Login with Google") or automated redirects to client systems. If added in the future, we will update this policy accordingly and ensure compliance with relevant privacy frameworks.

19. Changes to This Privacy Policy

Slaab AI reserves the right to update, revise, or modify this Privacy Policy at any time to reflect changes in our business practices, legal or regulatory obligations, technological advancements, or service offerings. We are committed to ensuring that you are informed of how your personal data is handled.

19.1 Notification of Changes

When changes are made, we will:

  • Post the updated Privacy Policy on our website with a new "Effective Date."
  • Optionally notify users who have opted in via email of significant updates.

We recommend checking this page periodically to stay informed of how we protect your information.

19.2 Material Changes

If we make material changes that affect your rights or the way we use personal data:

  • We will provide prominent notice on our homepage or via direct communication, where appropriate.
  • Where legally required, we will obtain your explicit consent before applying the changes.
19.3 Version Control

We maintain a version history and log the date of each update to ensure transparency. Older versions of the Privacy Policy will be archived and made available upon request for audit and compliance purposes only.

20. Governing Law and Dispute Resolution

This Privacy Policy and any dispute arising out of or relating to it shall be governed by and interpreted in accordance with the laws of the Republic of India, without regard to its conflict of law principles.

20.1 Jurisdiction

All disputes, claims, or controversies arising out of or in connection with this Privacy Policy, including its interpretation, breach, or termination, shall be subject to the exclusive jurisdiction of the courts located in Ahmedabad, Gujarat, India.

20.2 Dispute Resolution Process

Before initiating legal proceedings, Slaab AI encourages affected parties to attempt an informal resolution by contacting our data protection contact at support@slaab.ai. We will use reasonable efforts to respond to concerns and resolve complaints amicably.

If no resolution is achieved within 30 days of notification, either party may escalate the matter to formal legal proceedings in accordance with the jurisdiction stated above.

20.3 Language

All proceedings, notices, and documentation shall be conducted in English. Any translations provided are for reference only and are not legally binding.

21. Contact Information

If you have any questions, concerns, or complaints regarding this Privacy Policy, our data handling practices, or your personal data, you may contact us using the details below:

Slaab AI
Operated by SOL AI TECH FZ LLC
Dubai Operational Headquarters Address:
14, 15, 16, FF, Akshardham Residency, Opp. RAF Camp, Ring Road, Vastral, Ahmedabad, Gujarat, 382418, India

India Operational Headquarters Address:
Sheikh Mohammed Bin Zayed Rd - In5 Media - Dubai Production City - Dubai
Email: support@slaab.ai
Website: www.slaab.ai

We strive to respond to all inquiries within seven (7) business days. Please clearly indicate the nature of your request (e.g., data access, correction, complaint) in the subject line of your message.

For data protection and privacy rights matters, including GDPR, CCPA, or UAE PDPL-related issues, please include your country of residence so we can tailor our response accordingly.