Privacy policy

Interpretation and Definitions

Interpretation

Words with an initial capital letter have meanings defined under the following conditions. These definitions apply whether the terms appear in the singular or plural.

Definitions

For the purposes of this privacy policy:

• Account means a unique account created for you to access our service or parts of our service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where “control” means ownership of 50% or more of the shares, equity interest or other securities entitled to vote for election of directors or other managing authority.
• AI System means any software, model, or agent (including large language models we operate ourselves or access through a Sub-processor) that we use to process, analyze, generate, or act on data in connection with the service.
• Company (referred to as either “the company”, “We”, “Us” or “Our” in this policy) refers to Dravya Technologies Ltd, a company registered in the Dubai International Financial Centre (DIFC), Dubai, United Arab Emirates.
• Cookies are small files placed on your device by a website, containing details of your browsing history among other uses.
• Country refers to the United Arab Emirates.
• Device means any device that can access the service, such as a computer, a cellphone or a digital tablet.
• Model means the underlying AI or machine learning model, ours or a third party’s, that powers an AI System.
• Personal Data is any information that relates to an identified or identifiable individual.
• Service refers to the website and any AI-enabled features, agents, or tools made available through it.
• Service Provider / Sub-processor means any natural or legal person who processes data on behalf of the company, including providers of AI infrastructure, hosting, or Models, to facilitate, provide, or support the service.
• Training Data means data used to train, fine-tune, or evaluate a Model.
• Usage Data refers to data collected automatically, either generated by use of the service or from the service infrastructure itself, for example the duration of a page visit or the content of an interaction with an AI System.
• Website refers to Dravya, accessible from https://www.dravya.ai/.
• You means the individual accessing or using the service, or the company or other legal entity on whose behalf that individual is accessing or using the service, as applicable.

Personal Data We Collect

Personal Data You Provide

While using our service, we may ask you to provide certain personally identifiable information that can be used to contact or identify you, including:

• Email address
• First and last name
• Phone number
• Any information you submit through a form, chat, or AI-enabled feature on the service - for example a message you send to an agent, or a file you upload for it to process

Usage Data

Usage Data is collected automatically when using the service, including your device’s IP address, browser type and version, the pages you visit, the time and date of your visit, time spent on those pages, unique device identifiers, and other diagnostic data. When you interact with an AI System on the service, Usage Data also includes the inputs you provide and metadata about that interaction - timestamps, session identifiers, and system-generated outputs - for as long as needed for the purposes described in this policy.

How We Use AI to Process Your Data

Some parts of the service use AI Systems, including agentic tools, to process the information you provide. Specifically:

• AI Systems may process your Personal Data to respond to you, generate content, or carry out a task you requested.
• We do not permit third-party Model providers to use your Personal Data to train or fine-tune their foundation models, unless we have expressly disclosed this to you and obtained any consent required by applicable law.
• Where we use a third-party Model provider, your data is processed under that provider’s data processing terms, which we review before use.
• Where feasible, we review AI System outputs before they are relied on for a decision that affects you.

Automated Decision-Making

We do not use AI Systems to make decisions that produce legal effects concerning you, or that similarly significantly affect you, without human involvement. Where an AI System generates a recommendation, summary, or output as part of the service, we review it, where feasible, before it is acted on in a way that affects you. You may request human review of, or object to, any automated processing of your Personal Data by contacting us (see Contact Us).

Tracking Technologies and Cookies

We use cookies and similar tracking technologies - including beacons, tags, and scripts - to track activity on our service, store certain information, and improve and analyze the service.

• Cookies or Browser Cookies. A cookie is a small file placed on your device. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. If you do not accept cookies, some parts of our service may not work.
• Web Beacons. Small electronic files (also called clear gifs, pixel tags, or single-pixel gifs) that let us count visitors to a page or email, and verify system and server integrity.

We use both session cookies (deleted when you close your browser) and persistent cookies (remain until they expire or are deleted):

• Necessary / Essential Cookies - Session, administered by us. Required to provide the services you asked for and to authenticate users and prevent fraud.
• Cookies Policy / Notice Acceptance Cookies - Persistent, administered by us. Record whether you have accepted our use of cookies.
• Functionality Cookies - Persistent, administered by us. Remember choices you make, such as login details or language, so you don’t have to re-enter them.

Retention of Your Personal Data

We retain your Personal Data only for as long as necessary for the purposes set out in this policy, to comply with our legal obligations, resolve disputes, and enforce our agreements and policies. Usage Data is generally retained for a shorter period, except where it strengthens security, improves the service, or we are legally required to keep it longer.

Data you submit to an AI System - for example a message, document, or file - is retained only for as long as needed to provide the relevant feature, plus a limited period afterward for quality, safety, and abuse-prevention purposes, after which it is deleted or de-identified. Where a third-party Model provider processes that data on our behalf, it is retained under that provider’s own retention terms, which we require to be no less protective than this policy. We do not currently use your Personal Data to train third-party foundation Models (see How We Use AI to Process Your Data).

International Transfers and AI Sub-processors

Your information, including Personal Data, is processed at the company’s operating offices and wherever the parties involved in processing are located, which may be outside your state, province, country, or governmental jurisdiction. Your consent to this policy, followed by your submission of such information, represents your agreement to that transfer. We take reasonable steps to ensure your data is treated securely and that adequate controls are in place before any such transfer.

Where an AI System relies on a third-party Model or infrastructure provider, that provider acts as a Sub-processor and processes your data under a data processing agreement with us. This currently includes providers of the AI model(s) we use and our cloud hosting and infrastructure. A current list of our AI Sub-processors is available on request by contacting us (see Contact Us).

Your Rights

You have the right to access, correct, or delete the Personal Data we hold about you. You may exercise these rights at any time by signing in to your account, if you have one, and visiting account settings, or by contacting us directly.

Where our processing involves an AI System, you also have the right to:

• Object to your Personal Data being used to train or fine-tune a Model;
• Request human review of any output an AI System generated about you or in response to you; and
• Ask us which Sub-processors, including AI Sub-processors, have processed your data.

We may need to retain certain information where we have a legal obligation or lawful basis to do so.

Disclosure of Your Personal Data

Business Transactions

If the company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before your Personal Data is transferred and becomes subject to a different privacy policy.

Law Enforcement

Under certain circumstances, the company may be required to disclose your Personal Data if required to do so by law or in response to valid requests by public authorities, for example a court or government agency.

Other Legal Requirements

The company may disclose your Personal Data in the good faith belief that such action is necessary to comply with a legal obligation, protect and defend the rights or property of the company, prevent or investigate possible wrongdoing in connection with the service, protect the personal safety of users of the service or the public, or protect against legal liability.

Security of Your Personal Data

The security of your Personal Data is important to us, but no method of transmission over the internet or method of electronic storage is 100% secure. We use commercially acceptable means to protect your Personal Data, including requiring our AI Sub-processors to maintain security controls at least as protective as our own, but we cannot guarantee its absolute security.

Children’s Privacy

Our service does not address anyone under the age of 13. We do not knowingly collect personally identifiable information from anyone under the age of 13. If you are a parent or guardian and are aware that your child has provided us with Personal Data, please contact us. If we become aware that we have collected Personal Data from anyone under the age of 13 without verification of parental consent, we take steps to remove that information from our servers.

If we need to rely on consent as a legal basis for processing your information and your country requires consent from a parent, we may require your parent’s consent before we collect and use that information.

Links to Other Websites

Our service may contain links to other websites that are not operated by us. If you click a third-party link, you will be directed to that third party’s site. We strongly advise you to review the privacy policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

Changes to This Privacy Policy

We may update our privacy policy from time to time, including to reflect new AI features or Sub-processors. We will notify you of any changes by posting the new privacy policy on this page, and, for material changes, via email and/or a prominent notice on our service before the change takes effect. The “Last updated” date at the top of this policy will be updated accordingly. You are advised to review this privacy policy periodically.

Contact Us

If you have any questions about this privacy policy, including how AI Systems process your data, you can contact us at sales@dravya.ai.