Privacy Policy

1. Who We Are

O8 Software FZ-LLC is a company incorporated in a free zone in the United Arab Emirates.

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, O8 Software acts as a data controller in respect of personal data processed through the Services.

2. Scope of This Policy

This Privacy Policy applies to personal data relating to individual users of the Services. The Services are designed primarily for business and operational data. Users should not intentionally upload personal data unless strictly necessary.

3. Personal Data We Collect

3.1 Account and Contact Information

• Name
• Business email address
• Company name and role
• Login credentials

3.2 Usage and Technical Data

• IP address
• Device and browser information
• Log files, timestamps, and usage metrics

3.3 Payment and Token Data

Payments for the Services are made by purchasing usage tokens through the website.

• Payments are processed by third-party payment service providers
• O8 Software does not store full payment card details
• We may store transaction references, payment status, invoices, token balances, and usage history

3.4 Customer Data

Customer Data uploaded to the Services may incidentally contain personal data. Such data is processed solely to provide the Services and in accordance with our Terms and Conditions.

4. How We Use Personal Data

We process personal data for the following purposes:

• Providing, operating, and securing the Services
• Creating and managing user accounts
• Processing payments and managing token balances
• Generating invoices and maintaining accounting records
• Improving the Services and AI Models
• Customer support and communications
• Security monitoring, fraud prevention, and misuse detection
• Compliance with legal and regulatory obligations

5. Legal Bases for Processing

We rely on the following lawful bases under UK GDPR:

• Contractual necessity – to provide the Services and process token purchases
• Legitimate interests – to improve our Services, ensure security, and prevent fraud
• Legal obligation – to comply with applicable laws and regulations

6. Artificial Intelligence and Anonymised Data

O8 Software uses Customer Data to generate Outputs and to improve its AI Models.

Where Customer Data is used for analytics, pattern recognition, or AI training purposes, O8 Software will take reasonable steps to anonymise and aggregate such data so that it no longer identifies any individual or business.

Anonymised and aggregated data may be retained and used on an ongoing basis.

7. Data Storage and International Transfers

Customer Data and personal data are stored using reputable cloud service providers, including Amazon Web Services (AWS).

Data may be stored and processed in multiple countries, which may change from time to time, including outside the United Kingdom and European Economic Area.

Where required, O8 Software will implement appropriate safeguards for international data transfers.

8. Data Security

We implement appropriate technical and organisational measures designed to protect personal data against unauthorised access, loss, or misuse.

However, no system is completely secure, and we cannot guarantee absolute security.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including legal, accounting, and regulatory requirements.

Anonymised and aggregated data may be retained indefinitely.

10. Your Rights

Subject to applicable law, you may have the right to:

• Access your personal data
• Request correction or deletion
• Object to or restrict processing
• Request data portability

Requests may be made by contacting us using the details below.

11. Third-Party Services

The Services may integrate with or link to third-party services. O8 Software is not responsible for the privacy practices of third parties.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Services constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us via the website.