Privacy Policy

1. Who We Are

DigiMateAI (“we”, “us”, or “our”) is an AI automation agency operated by Shakeel Ahmed, headquartered in the United Arab Emirates. We build WhatsApp bots, n8n automation workflows, and AI agents for businesses in the UAE, Saudi Arabia, Qatar, the United Kingdom, Germany, and the United States.

Data Controller: Shakeel Ahmed, DigiMateAI
Contact: shakeelahmed@digimateai.com

2. Data We Collect

2.1 Contact Form

When you submit the contact form on our website we collect your name, email address, phone number (optional), and the content of your message. This data is transmitted via a secure webhook to our n8n automation server and is stored in our CRM solely to respond to your enquiry and to send you relevant service information if you have opted in.

2.2 Chat Widget

The live chat widget on digimateai.com assigns each browser session a random UUID session_id stored in sessionStorage. This identifier resets when you close your browser tab and is never linked to your personal identity unless you choose to share identifying information in the chat. Chat messages and the session_id are transmitted to our n8n webhook at n8n.digimateai.com.

2.3 Analytics

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects standard internet log information and visitor behaviour patterns in a way that does not identify individuals. IP anonymisation is enabled. You can opt out via the Google Analytics Opt-out Browser Add-on.

2.4 WhatsApp Enquiries

If you contact us via WhatsApp, your phone number and message content are handled through Meta’s WhatsApp Business API. Please refer to WhatsApp’s Privacy Policy for Meta’s data practices.

2.5 Calendly Bookings

When you book a strategy call we use Calendly. Name, email, and meeting details are collected by Calendly under their own privacy policy. We receive a notification with the details you provide.

3. How We Use Your Data

• To respond to enquiries submitted via the contact form or chat widget.
• To deliver the automation services you have engaged us to build.
• To send project updates and invoices for active engagements.
• To improve our website content and user experience via aggregated analytics.
• To comply with legal obligations in the UAE and applicable jurisdictions.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

4. Third-Party Services

5. Data Retention

Contact form enquiries are retained for up to 24 months in our CRM to provide continuity of service. Chat session data is retained for 90 days for quality and training purposes. Analytics data is retained for the default GA4 period of 14 months. Project-related data (contracts, invoices) is retained for 7 years to meet UAE commercial law requirements.

6. Your Rights

Depending on your country of residence, you may have the following rights:

GDPR (UK & EU residents)

• Right of access, rectification, erasure (“right to be forgotten”)
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent at any time
• Right to lodge a complaint with a supervisory authority

UAE PDPL (UAE & Gulf residents)

• Right to access your personal data we hold
• Right to correct inaccurate data
• Right to request deletion of data no longer necessary

CCPA (California residents)

• Right to know what personal data is collected and sold
• Right to opt out of the sale of personal information (we do not sell data)
• Right to non-discrimination for exercising your rights

To exercise any of these rights, email shakeelahmed@digimateai.com with your request. We will respond within 30 days.

7. Cookies

This website uses essential session storage (not cookies) for the chat widget session_id. Google Analytics places third-party cookies. You can disable cookies in your browser settings or use the GA4 opt-out link above. We do not use advertising or tracking cookies.

8. Security

All data in transit is protected by TLS/HTTPS. Our n8n instance is self-hosted on a private VPS with restricted access, regular security updates, and encrypted backups. We apply the principle of least privilege: only team members who need access to your data for service delivery have it.

9. International Transfers

DigiMateAI operates servers in the European Union and UAE. If your data is transferred outside your home jurisdiction, we ensure appropriate safeguards are in place in compliance with applicable data protection law (Standard Contractual Clauses for GDPR transfers; UAE PDPL cross-border transfer requirements).

10. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of our website after changes constitute acceptance of the updated policy.

11. Contact Us

For all privacy-related requests, questions, or complaints: