Privacy Policy
Effective Date: April 2026
Overview
This Privacy Policy describes how GMME KFM - FZCO ("we") collects and processes personal data in accordance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and the GDPR (where applicable).
1. Data We Collect
Identity Data: Name, email, social media handles.
Financial Data: Transaction history and billing address (stored via third-party processors; we do not store full credit card numbers).
Technical Data: IP address, browser type, and "Link-in-bio" click analytics.
AI Input Data: Text prompts and media provided to our AI tools.
Financial Data: Transaction history and billing address (stored via third-party processors; we do not store full credit card numbers).
Technical Data: IP address, browser type, and "Link-in-bio" click analytics.
AI Input Data: Text prompts and media provided to our AI tools.
2. How We Use Your Data
• To facilitate account creation and platform personalization.
• To process payments and calculate creator earnings.
• To optimize our AI models (anonymized data only).
• To comply with UAE anti-money laundering (AML) regulations.
• To process payments and calculate creator earnings.
• To optimize our AI models (anonymized data only).
• To comply with UAE anti-money laundering (AML) regulations.
3. Data Sharing & Transfers
We share data with:
Service Providers: Cloud hosting (e.g., AWS), AI providers (e.g., OpenAI/Anthropic), and analytics tools.
Legal Authorities: When required by Dubai/UAE law enforcement.
International Transfers: Your data may be processed outside the UAE. We ensure "Standard Contractual Clauses" are in place to protect your privacy.
Service Providers: Cloud hosting (e.g., AWS), AI providers (e.g., OpenAI/Anthropic), and analytics tools.
Legal Authorities: When required by Dubai/UAE law enforcement.
International Transfers: Your data may be processed outside the UAE. We ensure "Standard Contractual Clauses" are in place to protect your privacy.
4. Data Retention
We retain personal data only as long as necessary to provide the Services or as required by UAE financial record-keeping laws (typically 5–10 years for transaction data).
5. Your Rights
Under the UAE Data Protection Law and GDPR, you have the right to:
• Access and receive a copy of your data.
• Rectify inaccurate information.
• Request Deletion (the "Right to be Forgotten").
• Object to automated decision-making and profiling.
To exercise these rights, contact [email protected].
• Access and receive a copy of your data.
• Rectify inaccurate information.
• Request Deletion (the "Right to be Forgotten").
• Object to automated decision-making and profiling.
To exercise these rights, contact [email protected].