Privacy Policy

1. Introduction and Scope

This Privacy Policy outlines the practices of AcidBase Technologies FZCO ("AcidBase", "we", "us", or "our") in relation to the collection, use, protection, and management of your personal data. Our services are centered on empowering individuals, creators, influencers, and enterprises to build custom artificial intelligence (AI) personas, referred to as "AI Clones," which simulate natural interaction using social media-sourced content. This document governs how AcidBase interacts with users' data across all our platforms, applications, APIs, and integrations. By using our services, you acknowledge and agree to the data handling practices detailed herein.

2. Who We Are

AcidBase Technologies FZCO is a UAE-based AI innovation company headquartered at IFZA Business Park, Dubai Silicon Oasis. We specialize in the development of proprietary AI technologies that enable the creation of digital personalities trained on data voluntarily authorized by users. We are legally incorporated under UAE jurisdiction and operate across international markets, including the European Union, the United States, and the Middle East. Our mission is to responsibly unlock the potential of generative AI in personal and professional domains, while safeguarding user trust and data integrity.

3. Legal Basis for Processing

We rely on several lawful bases to process personal data in accordance with international data protection laws, including but not limited to the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and the UAE Federal Decree-Law No. 45 of 2021:Consent: Your explicit authorization when linking social media platforms or granting access to private data.Contractual Necessity: To fulfill obligations related to the services you have requested.Legitimate Interests: To improve, secure, and maintain the functionality of our services.Legal Obligation: When necessary to comply with laws, legal proceedings, or regulatory inquiries.

3A. User Consent

By connecting a social media platform or granting AcidBase access to your account via OAuth or similar methods, you provide explicit, revocable consent for us to collect, process, and use the authorized data. You can withdraw this consent at any time by disconnecting your accounts or requesting deletion of your profile.All private data accessed through API integrations is used solely for the purposes defined in this policy, and only within the scope you explicitly allow.

4. Data We Collect

AcidBase collects several categories of personal and behavioral data, as outlined below:a. Public Social Media DataReels, videos, photos, captions, and hashtags visible publicly on your connected accountsComments and public responses from other usersYour public username, display name, profile picture, bio, and follower metricsb. Private and Authorized Content (accessed only with your explicit permission)Direct messages (DMs), chats, or conversations through authorized APIsPrivate or archived posts, stories, and reelsMetadata such as message length, timestamps, and response frequencyYour connected account’s internal IDs and verified email addressc. Technical, Device, and Behavioral DataIP address, geolocation (approximate), time zone, and device typeBrowser and operating system version, user-agent stringNavigation patterns, session logs, click behavior, and response latencyAuthentication cookies, tokens, and session IDsd. Instagram Graph API DataIf you authorize AcidBase to connect with your Instagram account via the Instagram Graph API, we may collect the following data types:Instagram account ID, username, and biographyMedia content including captions, timestamps, and engagement stats (likes, views, comments)Profile picture and follower/following countsMessages sent to or received from followers (only if the Messaging permission is granted)Instagram Stories or media insights for performance analysisAll data retrieved via the Instagram Graph API is governed by Meta’s Platform Terms and is only used in accordance with your permission scope.

5. How We Use Your Data

We use the data we collect to provide, enhance, and secure your experience with AcidBase services. This includes:Training your AI Clone to accurately simulate your language patterns, tone, and emotional cadenceCreating personalized user interfaces and delivering dynamic interactions based on behaviorLeverage Instagram Graph API content to enable your AI Clone to generate accurate, platform-specific responses, including caption suggestions, story formats, and tone-matching language patternsPowering simulations, responses, and conversations your Clone may generateMonitoring the quality of AI outputs and improving model fidelityDiagnosing service errors, enforcing Terms of Service, and detecting suspicious behaviorWe do not monetize your data by selling or leasing it to third parties. We only access private content with clear, affirmative consent provided by you.

6. Sharing and Disclosure of Data

Your data is never sold. However, under strict conditions, we may disclose data:Vetted Service Providers: Cloud storage (e.g., AWS), AI compute providers, analytics services, or contracted engineers—all operating under signed Data Processing Agreements (DPAs).Platform APIs: When you connect Instagram, Meta, YouTube, or TikTok, we communicate with those platforms according to their approved API guidelines.Compliance and Legal Obligations: If required by court order, law enforcement, or authorized regulatory authority.Change of Ownership: In case of merger, acquisition, or reorganization, with prior user notice and data protection continuation.We prohibit all forms of third-party advertising, retargeting, and external profiling based on your data.

7. Your Rights and Controls

As a user, you maintain the right to access, control, and limit the use of your data at all times. You are entitled to:Revoke Access: Disconnect linked platforms or integrations with a single action.Erase Data: Permanently delete your account and AI Clone including all derived content.Portability: Request a structured, machine-readable export of your data.Correction: Update or correct any inaccuracies in your stored profile.Objection or Complaint: File a data rights complaint with your local data protection authority.All rights requests can be initiated via email. We respond to verified requests within 15 business days.

8. Data Retention and Deletion Policy

Publicly sourced content remains stored until you remove access or delete your profile.Private authorized data is retained only while it is being used for active training or feedback loops.We retain user data only as long as necessary to fulfill the services you request, or as long as we have your consent to do so. You may revoke this consent at any time, triggering full or partial deletion of the corresponding data.Full deletion of user accounts results in automatic anonymization or complete purging of all datasets within 30 days.Backup environments retain minimal necessary data for disaster recovery and compliance, auto-purged within 90 days.We follow strict lifecycle controls to minimize unnecessary storage and comply with data minimization principles. Certain data may be retained in anonymized form for internal AI training and system improvement, unless otherwise requested.

9. Data Security and Infrastructure Protections

We deploy a multi-layered security framework across all AcidBase systems:OAuth 2.0 authorization for all connected platform accessEnd-to-end encryption for data in transit and at rest using AES-256Cloud-based firewalling, access logging, and IP rate limitingPenetration testing by independent security auditors conducted annuallyInternal compliance with ISO 27001-inspired protocols and zero-trust network principlesOur infrastructure spans UAE, EU, and US regions with data center redundancy to ensure availability and compliance.

10. Cross-Border and International Transfers

In cases where data needs to be transferred outside of your jurisdiction, we implement:Standard Contractual Clauses (SCCs) approved by the European CommissionBinding Corporate Rules where applicable to subprocessorsData localization options if required by local lawsThese mechanisms guarantee that your data remains protected at all times under equivalent legal frameworks.

11. Children’s Data

12. Amendments and Policy Updates

We may periodically revise this Privacy Policy to reflect updates in legal requirements, technical capabilities, or our data practices. You will be informed of significant changes via email and/or through in-app notifications. The date of the latest update will always be prominently displayed.Continued use of our services after such updates implies consent to the revised terms.

13. Contact Information and Complaints

If you have questions, data access requests, or concerns regarding this policy, please contact:AcidBase Technologies FZCO IFZA Business Park, Building A1 Dubai Silicon Oasis, Dubai, UAE 📧 Email: privacy@acidbase.ioWe are committed to resolving any privacy-related disputes in a timely and transparent manner.