Privacy policy

4AI Digital Marketing FZ-LLC (“4AI”, “we”) operates 4ai.ae from Dubai, United Arab Emirates, and is the controller of the personal data described on this page. Requests and questions go to hello@4ai.ae.

Enquiries. When you send a brief through the contact form we keep what you type — name, email, phone and company if given, budget range, timeline, the services you ticked and your message — together with the page you sent it from, the referring URL, any campaign parameters in that URL (utm_*, gclid, fbclid) and your browser’s user-agent string. Those last items tell us which campaign a lead came from; they are not used to build a profile of you.

Newsletter. Your email address and the language you signed up in.

Client portal. The email address you sign in with, the name, company and language you set, and the records the studio keeps for your account: projects and their files, project requests and quotes, support tickets and their messages, the email addresses you invite through the referral programme, your points ledger, and any rewards you redeem — including a shipping address where merchandise has to be sent.

Technical. Our hosting provider records standard server logs (IP address, time, URL, user-agent) for security and diagnostics. The site sets one cookie to remember your language, and the portal sets the cookies needed to keep you signed in. Your light/dark choice is stored in your browser only. There are no analytics or advertising trackers; fonts are served from our own domain.

Enquiries: to answer you and prepare a proposal — the steps you ask for before any contract exists.

Client portal: to deliver the work you commissioned and run your account — performance of our contract with you.

Newsletter: your consent, which you withdraw at any time with the link in any email or by writing to us.

Server logs, rate limits and anti-spam fields: our legitimate interest in keeping the service secure and free of abuse.

Referral addresses: used only to match a later sign-up to the person who invited them, and shown back to the referrer in masked form.

Supabase — database, sign-in and file storage, on servers in the Asia-Pacific South (Mumbai) region.

Vercel — hosting and delivery through its global network, including the server logs above.

The email service that delivers portal sign-in links and studio notifications.

Where you invoice or pay us, your bank and ours. We do not share data with advertising networks, and we do not sell it.

Our database is hosted in India. Pages are served from Vercel’s network worldwide, which may include servers in the EU, the US and elsewhere. Where data leaves the UAE or the European Economic Area we rely on our processors’ standard contractual safeguards and on the fact that you asked us to provide the service.

Enquiries: 24 months from our last exchange, unless they become a client relationship.

Newsletter: until you unsubscribe.

Client portal records: for the duration of our work together and five years after the last invoice, which is what UAE commercial record-keeping requires.

Server logs: 30 days. Backups roll off within 30 days of a deletion.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) — and, if you are in the EU or UK, the GDPR — you can ask to see the data we hold about you, have it corrected or deleted, restrict or object to how we use it, receive a copy in a portable format, and withdraw any consent you gave.

Write to hello@4ai.ae. We answer within 30 days and may ask you to confirm your identity first. If you are not satisfied, you can complain to the UAE Data Office or to your local supervisory authority.

The site and the portal are for businesses. We do not knowingly collect data from anyone under 18.

We update this page when the way the site works changes, and show the date of the current version at the top.