Privacy Policy

1. Introduction

This Privacy Policy explains how Base 71 Ltd (“ComplyBase”, “we”, “us”, or “our”) collects, uses, stores, and protects your personal information when you use the ComplyBase platform located at complybase.ae and any associated services. We are committed to protecting your privacy in compliance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (“UAE Data Protection Law”) and, where applicable, the EU General Data Protection Regulation (“GDPR”).

2. Data Controller

The data controller responsible for your personal data is Base 71 Ltd, incorporated in the Abu Dhabi Global Market (ADGM), with its principal office in Abu Dhabi. For all data protection inquiries, you may contact us at hello@complybase.ae.

3. Information We Collect

We collect the following categories of personal data:

• Account information: Name, email address, and organization details provided during registration.
• Contact form submissions: First name, last name, work email, phone number, company name, regulator, and message content submitted through our website.
• Usage data: Pages visited, features used, session duration, and interaction patterns collected to improve the platform experience.
• Technical data: IP address, browser type, device information, and operating system collected automatically through server logs.
• Platform content: Documents, policies, screening data, and other content you upload or generate within the platform.

4. How We Use Your Information

We process your personal data for the following purposes:

• Providing, operating, and maintaining the ComplyBase platform and its features.
• Processing your requests, including demo requests and support inquiries.
• Generating AI-powered outputs such as policy drafts, risk assessments, screening results, and compliance reports based on your inputs.
• Improving platform performance, security, and user experience.
• Communicating with you about service updates, security alerts, and administrative matters.
• Complying with legal obligations and regulatory requirements applicable to our business.

5. AI-Powered Features

ComplyBase uses artificial intelligence to generate policies, analyze documents, screen entities, and produce compliance reports. When you use these features, your inputs are processed by third-party AI service providers solely for the purpose of generating the requested output. We do not use your data to train AI models. AI-generated content is advisory in nature and should always be reviewed by a qualified professional before reliance.

6. Data Storage and Security

Your data is stored on secure, encrypted infrastructure hosted in the Asia-Pacific region. We implement industry-standard security measures including encryption in transit (TLS 1.2+), encryption at rest, row-level security policies, and regular security audits. We use error monitoring services to detect and resolve technical issues promptly. Access to personal data is restricted to authorized personnel on a need-to-know basis.

7. Data Sharing and Third Parties

We do not sell, rent, or trade your personal data. We share data only with the following categories of service providers, solely for the purposes described in this policy:

• Authentication providers: To manage secure user sign-in and session management.
• AI service providers: To process your inputs and generate platform outputs. Data is transmitted securely and is not retained by these providers beyond the processing session.
• Infrastructure providers: To host, store, and deliver the platform securely.
• Error monitoring services: To detect and resolve platform issues. These services may capture technical metadata but are configured to minimize personal data collection.

8. Cookies and Tracking

ComplyBase uses essential cookies required for authentication and platform functionality. We do not use advertising or behavioral tracking cookies. You may manage your cookie preferences through our cookie consent banner. For more information, see our Cookie Policy.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the platform services. Contact form submissions are retained for up to 12 months. Upon account deletion or termination, we will delete or anonymize your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention or dispute resolution.

10. Your Rights

Under the UAE Data Protection Law and, where applicable, the GDPR, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Restriction: Request that we limit processing of your data in certain circumstances.
• Portability: Request your data in a structured, machine-readable format.
• Objection: Object to processing of your personal data for specific purposes.

To exercise any of these rights, contact us at hello@complybase.ae. We will respond within 30 days.

11. International Data Transfers

Your data may be processed by service providers located outside the UAE. Where such transfers occur, we ensure appropriate safeguards are in place, including contractual protections consistent with applicable data protection laws.

12. Children's Privacy

ComplyBase is a business-to-business platform intended for professional use by compliance officers and regulated firms. We do not knowingly collect personal data from individuals under the age of 18.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on our website with an updated effective date. Your continued use of the platform after any changes constitutes acceptance of the revised policy.