Privacy Policy

1. Introduction

This Privacy Policy (“Policy”) describes how OptiLayer FZ-LLC (“OptiLayer”, “Company”, “we”, “us”, or “our”) collects, processes, uses, stores, discloses, and protects personal information when you access or use our products and services, including:

• OptiLayer Online — our online platform and associated digital services.
• OptiLayer AI — our artificial intelligence-powered platform, tools, applications, and related services.

Together, these products are referred to as the “Services”.

We are committed to protecting your privacy and handling personal information responsibly and transparently.

By accessing or using our Services, you acknowledge that you have read and understood this Policy.

2. Data Controller

The entity responsible for processing personal information under this Policy is:

For privacy-related inquiries, requests, or complaints, please contact us using the contact details above.

3. Personal Information We Collect

Depending on how you interact with our Services, we may collect the following categories of information.

3.1. Information You Provide Directly

This may include:

• Full name;
• Email address;
• Phone number;
• Company name and professional details;
• Account registration information;
• Login credentials and authentication information;
• Billing and transaction information;
• Communications with our support team;
• Feedback, survey responses, and other information you voluntarily provide.

3.2. Account and Usage Information

When you use our Services, we may automatically collect:

• Account identifiers;
• IP address;
• Browser type and version;
• Operating system and device information;
• Language and regional settings;
• Login dates and timestamps;
• Pages, features, and tools accessed;
• Interaction history;
• Session information;
• Diagnostic data, crash reports, and technical logs.

3.3. AI-Related Information

When using OptiLayer AI, we may process information that you submit to or generate through AI-powered features, including:

• Text prompts and instructions;
• Uploaded files and documents;
• Images and other supported content;
• Questions and requests submitted to AI systems;
• AI-generated responses and outputs;
• Conversation history, where enabled;
• Feedback and ratings concerning AI-generated results.

Please do not submit sensitive personal information, confidential business information, or third-party personal data unless such processing is necessary, authorized, and supported by the applicable Service.

3.4. Payment Information

If paid Services are available, payments may be processed by third-party payment service providers.

We may receive transaction-related information such as:

• Payment status;
• Transaction identifiers;
• Subscription information;
• Billing address;
• Payment method type;
• Invoice and purchase history.

We generally do not store complete payment card numbers or security codes on our own servers.

3.5. Cookies and Similar Technologies

We may use cookies, pixels, local storage, and similar technologies to:

• Maintain account sessions;
• Remember user preferences;
• Improve website functionality;
• Analyze traffic and performance;
• Detect suspicious activity;
• Enhance security.

Where required by applicable law, we will obtain consent before using non-essential cookies or similar technologies.

4. How We Use Personal Information

We may process personal information for the following purposes:

• To provide, operate, and maintain OptiLayer Online and OptiLayer AI.
• To create and manage user accounts.
• To authenticate users and protect account access.
• To process user requests and AI-generated operations.
• To provide customer support and respond to inquiries.
• To manage subscriptions, billing, and payments.
• To improve the functionality, reliability, and performance of our Services.
• To monitor usage, identify technical issues, and conduct analytics.
• To detect, investigate, and prevent fraud, abuse, and security incidents.
• To comply with applicable legal obligations.
• To enforce our agreements and protect our legal rights.
• To communicate important service updates, security notices, and administrative information.
• To send marketing communications where permitted by law and, where required, with your consent.

5. Legal Basis for Processing

Where required by applicable data protection legislation, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we process personal information on one or more of the following legal bases:

• Consent: Where you have provided valid consent for a specific processing activity.
• Contractual necessity: Where processing is necessary to provide Services you have requested or to perform a contract with you.
• Legal obligations: Where processing is required to comply with applicable laws and regulations.
• Legitimate interests: Where processing is necessary for legitimate business interests, provided those interests do not override your applicable privacy rights.
• Other lawful grounds: Where permitted under applicable data protection legislation.

You may withdraw consent where processing is based on consent. Such withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

6. Artificial Intelligence and Automated Processing

OptiLayer AI incorporates artificial intelligence and machine learning technologies to provide automated functionality.

6.1. Processing of AI Inputs

When you submit prompts, files, or other content through OptiLayer AI, such information may be processed by our systems and, where applicable, third-party AI infrastructure providers to generate responses and perform requested operations.

6.2. Third-Party AI Providers

To deliver AI functionality, we may use third-party infrastructure, cloud hosting, AI models, APIs, and related technology providers.

Such providers may process submitted information solely as necessary to provide their contracted services, subject to applicable contractual and data protection requirements.

The specific providers may change as our technical infrastructure evolves.

6.3. AI Training and Model Improvement

We do not represent that all AI inputs or outputs are automatically excluded from model training.

Where third-party AI providers are involved, their processing and model-training practices may be governed by their respective terms and privacy policies.

We will apply appropriate contractual and technical safeguards consistent with applicable law and our agreements with such providers.

Where applicable, we will disclose relevant training or improvement practices and obtain consent where legally required.

6.4. AI-Generated Content

AI-generated outputs may be inaccurate, incomplete, outdated, or unsuitable for a particular purpose.

You are responsible for reviewing and verifying AI-generated information before relying on it.

OptiLayer AI should not be treated as a substitute for professional legal, medical, financial, or other regulated advice.

7. Sharing of Personal Information

We do not sell personal information in the ordinary meaning of selling personal data.

However, we may share personal information with the following categories of recipients where necessary:

7.1. Service Providers

These may include:

• Cloud hosting providers;
• AI and machine learning infrastructure providers;
• Payment processing companies;
• Analytics and monitoring providers;
• Customer support platforms;
• Authentication and security providers;
• Email and communication service providers.

7.2. Business and Corporate Transactions

Personal information may be disclosed in connection with a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, subject to applicable legal requirements.

7.3. Legal and Regulatory Authorities

We may disclose information where reasonably necessary to:

• Comply with applicable laws or legal processes;
• Respond to lawful requests from competent authorities;
• Protect the rights, safety, and property of OptiLayer, users, or other parties;
• Investigate fraud, security incidents, or unlawful activities.

7.4. With Your Consent

We may share personal information with other parties where you have specifically authorized such disclosure.

8. International Data Transfers

OptiLayer operates from the United Arab Emirates and may use service providers and infrastructure located in other countries.

As a result, personal information may be transferred to, stored in, or processed in jurisdictions outside the UAE.

Where international transfers are subject to applicable data protection legislation, we will implement the required safeguards, which may include:

• Transfers to jurisdictions recognized as providing an adequate level of protection;
• Appropriate contractual safeguards;
• Other legally permitted transfer mechanisms.

We will take reasonable steps to ensure that personal information remains protected when transferred internationally.

9. Data Retention

We retain personal information only for as long as reasonably necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by applicable law.

Retention periods may depend on:

• The duration of your account;
• The nature of the Services used;
• Contractual and legal obligations;
• Security and fraud prevention requirements;
• Dispute resolution and enforcement needs.

When personal information is no longer required, we will take reasonable steps to delete, anonymize, or securely dispose of it.

Certain information may remain in encrypted backups or archived systems for a limited period in accordance with our retention procedures.

10. Data Security

We implement reasonable technical, organizational, and administrative safeguards designed to protect personal information against:

• Unauthorized access;
• Accidental loss;
• Destruction;
• Alteration;
• Disclosure;
• Misuse;
• Unauthorized processing.

Depending on the nature of the information and processing activities, safeguards may include encryption, access controls, authentication mechanisms, monitoring, and security assessments.

However, no internet-based service or electronic storage system can be guaranteed to be completely secure.

You are responsible for maintaining the confidentiality of your account credentials and notifying us of suspected unauthorized access.

11. Your Privacy Rights

Subject to applicable law, including the UAE Personal Data Protection Law, you may have the right to:

• Request access to your personal information;
• Request a copy of personal information we hold about you;
• Request correction of inaccurate or incomplete information;
• Request deletion of personal information where legally applicable;
• Request restriction of certain processing activities;
• Object to certain types of processing;
• Withdraw consent where processing is based on consent;
• Request transfer of personal information where applicable;
• Lodge a complaint with the competent data protection authority.

To exercise your rights, please contact us using the privacy contact details provided in Section 2.

We may request reasonable information to verify your identity before processing a request.

We will respond within the time limits established by applicable law.

Some rights may be subject to legal exceptions and limitations.

12. Children’s Privacy

Our Services are not intended for children under the age of 18 unless explicitly stated otherwise in the relevant product terms.

We do not knowingly collect personal information from children in violation of applicable laws.

If we become aware that personal information has been collected from a child without the necessary legal authorization or parental consent, where required, we will take appropriate steps to address the situation.

13. Third-Party Websites and Services

Our Services may contain links to third-party websites, applications, APIs, or services.

We are not responsible for the privacy practices, content, or security measures of third-party services.

Your use of such services is governed by their respective terms and privacy policies.

We encourage you to review those policies before submitting personal information to third parties.

14. Marketing Communications

We may send you service announcements, product updates, promotional materials, and other communications where permitted by applicable law.

You may opt out of marketing communications at any time by:

• Using the unsubscribe link included in marketing emails; or
• Contacting us directly.

Please note that opting out of marketing communications will not prevent us from sending essential administrative, transactional, or security-related notices.

15. Cookies Management

You may be able to manage or disable cookies through your browser settings or our cookie preference interface, where available.

Please note that disabling certain cookies may affect the availability or functionality of some parts of our Services.

Where legally required, we will provide appropriate cookie consent mechanisms.

16. Changes to This Privacy Policy

We may update this Policy from time to time to reflect changes in:

• Applicable laws and regulations;
• Our business operations;
• Technology and infrastructure;
• Data processing practices;
• Features and functionality of our Services.

Any updated version will be published on our website or within the relevant Services.

The “Last Updated” date at the beginning of this Policy will indicate when the latest changes were made.

Where required by applicable law, we will provide additional notice or obtain consent before implementing material changes.

17. Contact Us

If you have questions, requests, concerns, or complaints regarding this Privacy Policy or our handling of personal information, please contact:

We will review and respond to privacy-related inquiries in accordance with applicable laws and regulations.

© 2026 OptiLayer FZ-LLC. All rights reserved.