Privacy Policy
Effective date: 18 December 2025
By using Fective AI’s websites, applications, APIs, and related services (the “Platform”), you agree to this Privacy Policy and our Terms of Service. If you do not agree, do not use the Platform.
We aim to keep this policy short and clear. If anything is unclear, or if you have privacy-related questions or requests, contact our privacy lead at martin@fective.ai.
1. Who we are and scope
Controller: Fective AI (operated by a Meydan Free Zone limited liability company, United Arab Emirates) ("Fective AI", "we", "us").
Applies to: fective.ai and its subpages, web application, APIs, customer support channels, and marketing pages.
Not covered: Third-party websites or services you access via links or integrations from the Platform.
2. What data we collect
We collect only what is necessary to operate, secure, and improve the Platform.
Account and contact information
Name, email address, password hash, role, and organization details.
Product content you provide
Information you submit in the Platform, including descriptions of your enterprise offering, notes, tags, prompts, feedback, and AI inputs and outputs associated with your workspace.
Usage and device data
IP address, device and browser type, log events, pages or screens viewed, and crash or error reports.
Cookies and SDKs
Used for authentication, preferences, analytics, and (where permitted) marketing. In the EEA and UK, we request consent where required.
Payment and billing data
Payments are processed by third-party payment providers. Fective AI does not store full payment card details. We retain billing contact details, subscription plan information, and invoices.
3. Why we use your data (legal bases)
We process personal data for the following purposes:
Providing the Platform
Account creation, workspace management, feature delivery, customer support, security, and fraud prevention. (Contract; Legitimate Interests)
Improving and analyzing the Platform
Monitoring performance, debugging, analytics, A/B testing, and product development. (Legitimate Interests; Consent for cookies/SDKs where required)
Communications
Service-related messages, product updates, and surveys. Marketing communications are sent only with consent or where otherwise permitted by law, and you may opt out at any time. (Consent; Legitimate Interests)
Compliance and enforcement
Accounting, tax, legal obligations, and enforcement of our Terms. (Legal Obligation; Legitimate Interests)
4. AI processing
The Platform uses automated and AI-based systems to summarize, analyze, and score business and financial information and to generate outputs you explicitly request.
We store prompts and outputs as necessary to deliver the functionality, secure the Platform, and improve reliability. We do not train foundation or general-purpose AI models on your private workspace content or customer-specific outputs.
5. How we share data
We do not sell personal data. We share personal data only with:
Service providers (sub-processors)
Cloud hosting, email delivery, analytics, payments, and error monitoring providers, all bound by contractual confidentiality and data protection obligations.
Affiliates
Only where necessary to operate and improve the Platform, subject to this Policy.
Legal and regulatory authorities
Where required by law or to protect rights, safety, and the integrity of the Platform.
Business transfers
In connection with a merger, acquisition, or asset sale, subject to appropriate safeguards.
A current list of sub-processors is made available upon request, and we will notify customers of material changes where required.
6. International data transfers
Fective AI’s primary market is the United States, and we operate from the United Arab Emirates. Personal data may be transferred to and processed in jurisdictions outside your country of residence. Where required by law, we rely on appropriate safeguards such as EU Standard Contractual Clauses (SCCs), UK IDTA, DIFC-approved mechanisms, or equivalent contractual and technical protections, together with supplementary security measures.
7. Data retention
We retain personal data only for as long as necessary to provide the Platform and to meet legitimate business or legal requirements. Typical retention periods include:
Account data: for the duration of the account
Usage logs: approximately 30–180 days
Billing and invoice data: up to 7 years, as required by law
Upon request, we will delete personal data without undue delay, unless retention is required by law. Backup copies may persist for a limited period.
8. Security
We implement industry-standard technical and organizational measures, including encryption in transit and at rest, access controls, logging, and backups. No system is completely secure. If a data breach occurs that poses a risk to your rights and freedoms, we will notify affected users and regulators as required by law.
9. Your rights and choices
Depending on your location, you may have the right to:
access, correct, or delete your personal data;
request a copy or export of certain data;
object to or restrict certain processing;
withdraw consent where processing is based on consent;
opt out of marketing communications at any time.
We aim to respond to valid data protection requests within thirty (30) days.
You can exercise these rights via in-app settings or by contacting martin@fective.ai.
You may also lodge a complaint with the DIFC Commissioner of Data Protection or your local data protection authority (for EEA or UK residents).
10. Cookies and tracking
We use cookies and similar technologies for authentication, preferences, analytics, and (where permitted) marketing. In the EEA and UK, we provide a consent banner with granular controls. You can also manage cookies through your browser settings.
11. Children
The Platform is intended for users aged 18 and over and is not directed to children. We do not knowingly collect personal data from children.
12. Business customers and DPA
For paid workspaces, a Data Processing Addendum (DPA) is available and forms part of our contractual arrangements. Generally, you act as controller for personal data within your workspace, and Fective AI acts as processor. For public-source data curated independently by Fective AI (such as public company filings), Fective AI may act as an independent controller.
13. Updates to this Policy
We may update this Privacy Policy from time to time. The effective date above reflects the latest version. If changes are material, we will notify you in-app or by email where required.
14. Contact
Fective AI
Email: martin@fective.ai
Linked documents: Terms of Service · Cookie Policy