Legal

Privacy Policy

What we collect when you use gridstudio.ai or talk to us, why we collect it, who else sees it, and how to make us stop.

Last updated 2 September 2026

1. Who we are

GridStudio ("GridStudio", "we", "us") is an AI venture studio headquartered in Dubai, United Arab Emirates, with offices at Arenco Tower, Office 705, Dubai Internet City and at AI Campus, Innovation One, Level 3, DIFC. This policy covers the gridstudio.ai website and the enquiries and business relationships that start from it.

Our portfolio companies — including MonoChat, Tiko.ai, Paratik, BoldGlobal, AskVela, AI Dealer, Just Sold Now and ConvoStream — operate their own products under their own privacy policies. Where you are using one of those products, that product's policy governs, not this one.

Where we process personal data on behalf of a client — for example, end-customer conversations flowing through a deployment we built — we act as a processor and that client is the controller. This policy describes what we do as a controller, for our own website and business contacts.

2. What we collect

We collect three kinds of information, and no more than we need:

  • Information you give us. Your name, work email, company, the subject you select and the message you write when you use the contact form; anything you send us by email, WhatsApp or live chat; and details exchanged in the course of a commercial relationship.
  • Information collected automatically. If — and only if — you accept analytics cookies, we collect standard analytics data: pages viewed, referring page, approximate location derived from a truncated IP address, device and browser type, and session duration. Essential cookies needed to serve the site are always active.
  • Information from third parties. Publicly available business information about companies we work with or are considering working with, and information passed on by partners who refer an introduction.

We do not buy marketing lists, and we do not run advertising or advertising cookies on this site.

3. Why we use it

  • To answer your enquiry and, where it goes further, to scope and deliver work.
  • To manage a contract with you or your organisation, including invoicing and support.
  • To understand how the site is used, so we can make it better. Only with your consent.
  • To send occasional updates about our work — only where you asked for them, and every message has an unsubscribe link.
  • To meet our legal, tax and regulatory obligations, and to establish or defend legal claims.

We do not use your personal data to train AI models, and we do not sell personal data to anyone.

Where the EU or UK GDPR applies to our processing, we rely on: consent for analytics cookies and marketing email; contract to deliver services you have asked for; legitimate interests to respond to business enquiries, secure our systems and run the business, balanced against your rights; and legal obligation where a law requires the processing. In the UAE we process personal data in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, and, for our DIFC presence, the DIFC Data Protection Law No. 5 of 2020.

5. Who we share it with

We share personal data only with:

  • Service providers who host our infrastructure, deliver our email and run our analytics and live chat, under contract and only for those purposes.
  • Group companies, where an enquiry is genuinely about one of our portfolio brands and is better answered by that team.
  • Professional advisers — lawyers, accountants, auditors — where they need it to advise us.
  • Authorities, where we are legally required to disclose.

The current processors behind this site are Google (Analytics), Cloudflare (network and delivery) and our own MonoChat live chat and email infrastructure.

6. International transfers

We are headquartered in the UAE and operate across the UAE, Türkiye, Georgia, Portugal and the United States, so your data may be transferred outside the country where you are located. Where data leaves the EEA or the UK, we rely on adequacy decisions where they exist, and otherwise on Standard Contractual Clauses with our processors. You can ask us for a copy of the safeguards in place.

7. How long we keep it

  • Contact form and enquiry correspondence: up to 24 months from our last exchange, unless it becomes part of a contract.
  • Client and contract records: for the life of the relationship and then as long as tax and company law require.
  • Analytics data: retained in Google Analytics for 14 months.
  • Marketing consent records: until you withdraw consent, plus a record of the withdrawal itself.

8. Your rights

Depending on where you live, you can ask us to:

  • Tell you what personal data we hold about you, and give you a copy.
  • Correct anything that is wrong or incomplete.
  • Delete it, where we have no continuing reason to keep it.
  • Restrict or object to how we use it, including objecting to processing based on legitimate interests.
  • Receive it in a portable, machine-readable format.
  • Withdraw consent at any time — for analytics, by declining in the cookie banner or clearing site data; for email, by using the unsubscribe link.

Write to [email protected] and we will respond within 30 days. If you are not satisfied with our response, you can complain to your local data protection authority, to the UAE Data Office, or to the DIFC Commissioner of Data Protection.

9. Security

We use encryption in transit, access control on a need-to-know basis, logging and monitoring, and regular review of the providers we depend on. No system is perfect; if a breach occurs that is likely to put your rights at risk, we will notify you and the relevant regulator as required by law.

10. Children's data

This site and our services are for business use. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We update this policy when our practices change. The "last updated" date at the top always reflects the current version. Where a change materially affects your rights, we will make that clear rather than quietly reissuing the page.

12. Contact us

Privacy questions: [email protected]
General: [email protected]
Post: GridStudio, Arenco Tower, Office 705, Dubai Internet City, Dubai, United Arab Emirates