Privacy Policy
1. Important Information
Halabrix FZ (“Halabrix”, “we”, “our”) is an AI services company based in the United Arab Emirates. We operate advanced AI voice and chat agents for business applications. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our services. We are committed to protecting your data and complying with applicable UAE data protection laws. If you have questions or requests about your personal information or this Policy, please contact us at legal@halabrix.com.
1.1. Privacy Commitment and Ownership
We believe that your data remains your property. We design our infrastructure and processes so that we only use the information needed to provide and improve our services. We store data securely on protected servers and use it to enhance AI performance and service quality. We will never sell your personal data to third parties.
1.2. Policy Updates
We may update this Privacy Policy to reflect changes in our practices or legal requirements. When we make significant changes, we will notify you via our website or by email. Material changes will take effect at least 30 days after notice, unless required sooner by law. Your continued use of Halabrix services after changes are posted constitutes acceptance of the updated Policy.
2. Use of Our Services
2.1. Customer-Controlled Use
Our services allow you to deploy AI voice and chat agents for tasks such as client outreach, appointment scheduling, customer support, lead follow-up, and other business functions. Halabrix provides the AI platform and tools, but you control the content, schedules, and business rules of the interactions. The information processed by our AI (for example, customer names, phone numbers, or conversation scripts) remains under your control. We process it only to deliver and improve the service according to your instructions and this Policy.
2.2. Sensitive Information
“Sensitive information” includes data like personal health details, financial account data, identification numbers, or other protected personal identifiers. Halabrix’s standard AI agents are not specifically designed for highly sensitive personal data. If you do submit such information (e.g. patient health data) through our platform, you must ensure you have the legal right to share it and have obtained necessary consents. We will treat any sensitive data as strictly confidential and apply strong safeguards—such as end-to-end encryption and limited access—to protect it. We recommend that you only provide sensitive data if absolutely necessary for the service and if compliant with all applicable privacy regulations.
3. Information We Collect
3.1. Website and Account Information
When you visit our website, you can browse most content without providing personal details. We begin collecting personal information when you register for an account. Account information may include your name, email, company name, billing address, and password. We use this data to create and manage your account, authenticate your access, and communicate with you about our services.
3.2. Voice and Communication Data
As you use our AI agents, we collect data generated during interactions. This includes voice recordings of calls, chat transcripts, message logs, and metadata (such as call timestamps or durations). We use this information to deliver the service, monitor performance, ensure quality, and improve our AI models. All recordings and transcripts are protected with encryption and stored securely within the UAE or in compliance with local regulations.
3.3. Business and Operational Data
To configure and support our AI agents, we collect details about your business needs. This may include company profiles, contact information for administrators or key users, workflow preferences, and integration settings (for example, CRM or scheduling software configurations). We use this data to tailor the AI agents to your requirements and maintain consistent service delivery.
3.4. Billing and Usage Data
If you purchase paid services, we collect billing-related information such as billing contacts, company VAT or tax IDs, and payment method details (e.g. payment card information). We do not store complete payment card numbers on our servers; instead, we partner with secure payment processors. We also collect usage data (such as service subscription levels, usage statistics, and activity logs) to generate invoices and monitor account status.
4. Use of Collected Information
4.1. AI Agent Operations
We use collected information primarily to run and improve our AI agents. Voice and chat data help us train and refine the AI models—for example, improving speech recognition, understanding local dialects, or enhancing response accuracy. We analyze interaction records to troubleshoot issues and adapt agents to better handle common customer questions and scenarios. All processing is done under strict security controls.
4.2. Personalization and Service Improvement
We use your personal and business data to personalize your experience. For example, we may adapt the tone and style of the AI agents to match your brand voice and send service updates or alerts to your preferred contacts. We also use aggregated and anonymized data to evaluate overall service performance, identify trends, and make platform improvements. Personal data is never sold or shared for marketing purposes without your explicit consent.
4.3. Testimonials and References
With your explicit permission, we may share anonymized or obfuscated success stories about how our AI agents helped your business. Any testimonials or case studies will either exclude personal details or use a customer’s own content. We will obtain your approval of any materials to be published as a testimonial.
4.4. Payment Processing
For paid services, we work with PCI-compliant payment processors. All payment transactions are conducted through secure, encrypted channels. We only retain the minimum billing details needed for invoicing (such as company name and contact information) and do not store sensitive payment card data on our systems.
5. Data Protection and Security
5.1. Security Measures
We implement industry-standard security measures to protect your information. All data in transit is encrypted using secure protocols, and data at rest is encrypted on our servers. We use secure, monitored data centers and conduct regular security audits and vulnerability assessments. Access to data is controlled through strong authentication and authorization processes.
5.2. Access Controls and Monitoring
Access to customer data within Halabrix is strictly limited to employees and contractors who need it to perform their job duties (for example, support or system maintenance staff). All access is logged and monitored. Employees receive regular training on data privacy and must adhere to confidentiality obligations. Any access to customer data is governed by internal policies that comply with UAE data protection regulations.
5.3. Incident Response
We maintain a detailed incident response plan. In the unlikely event of a data breach or security incident, we will promptly investigate and address the issue, and notify affected customers in accordance with applicable UAE laws. We will cooperate with regulatory authorities and take all necessary steps to remedy any unauthorized access.
6. International Data Transfers
6.1. Data Localization
Halabrix primarily processes and stores data within the UAE or in jurisdictions with adequate data protection measures, in compliance with local laws. If data transfer outside the UAE is necessary (for example, for cloud processing or data backup), we ensure appropriate safeguards are in place. These may include data transfer agreements, encryption, and compliance with any relevant international data protection standards.
6.2. Cross-Border Operations
For customers operating across borders, we will follow the strictest applicable standards. We will implement data transfer mechanisms (such as contracts or certifications) to comply with global best practices, while prioritizing the UAE’s data protection requirements. We will inform you if cross-border data transfer procedures affect your data or rights.
7. User Rights and Controls
7.1. Access and Control
You have the right to access and manage your personal information. Through our platform, you can view and update certain personal and business information associated with your account. You can request a complete export of your data or ask us to correct inaccuracies. To do so, contact us at legal@halabrix.com and we will assist you according to UAE law.
7.2. AI Agent Settings
You are in full control of your AI agents’ behavior and data handling. You can customize their communication style, operating hours, response rules, and data retention preferences through the Halabrix platform. Changes to these settings take effect immediately. You may disable or delete agents at any time; any changes will apply only to future interactions.
8. Data Retention and Deletion
8.1. Retention Period
We retain your data only as long as needed to provide our services and comply with legal requirements. Typically, voice recordings are kept for a limited period (for example, up to 90 days) for quality review, while interaction logs may be retained longer (for example, up to one year) for service improvement and audit purposes. Customer account and billing information are retained for the duration of the service relationship and as required for financial record-keeping.
8.2. Deletion Procedures
Upon your request or if you terminate your account, we will delete your personal data in accordance with UAE law. We will remove your information from our active systems and backup media within a reasonable period. Certain data may be retained if required by law (for example, billing records). We will notify you when deletion is complete. If you cancel the service, you may export your data within 30 days before it is erased.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in our data practices or legal obligations. If we make material changes, we will notify you via email or our platform. We may require your acknowledgment of significant updates before continuing the service. All updates will be consistent with UAE privacy laws and will uphold the protections described here.
10. Contact Information
If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact our Data Protection Officer at legal@halabrix.com. Our support team is available during UAE business hours to assist with privacy concerns. We aim to respond to privacy inquiries promptly.
11. Implementation and Enforcement
Halabrix maintains an internal compliance program to enforce this Privacy Policy. We conduct regular audits and train our staff on data protection. We have clear procedures for enforcing privacy practices, and any employee who violates this Policy may face disciplinary action. Our top management oversees privacy compliance to ensure that your data is handled responsibly and in compliance with UAE regulations.
12. Governing Law
This Privacy Policy and the practices described herein are governed by the laws of the United Arab Emirates. Any disputes related to data protection will be handled in accordance with UAE legal and regulatory procedures. This Policy represents our commitment to your privacy and will be interpreted in line with applicable UAE privacy laws.