ALLAI.AE POLICY
Data Processing Addendum
1. Scope and application
This Data Processing Addendum ("DPA") applies when BBK AI processes personal data on behalf of a business or institutional customer in connection with AllAI and the customer is a controller, business or equivalent decision-maker under applicable privacy law. It supplements the Terms of Service, an order form or another written agreement. If a signed agreement contains a specific DPA, that signed DPA controls.
2. Roles and instructions
The customer determines the purposes and essential means of processing for personal data it submits or directs AllAI to process on its behalf. BBK AI will process that data only on documented customer instructions, including instructions inherent in the customer's use of the contracted features, unless applicable law requires otherwise.
3. Customer responsibilities
The customer is responsible for having a lawful basis, providing required notices, obtaining required consents or permissions, configuring access appropriately, limiting submitted data to what is necessary, and ensuring its instructions comply with applicable law and third-party rights.
4. Confidentiality and access
BBK AI will limit access to personnel and providers who need the data to provide, secure, support or maintain the contracted service and who are subject to appropriate confidentiality obligations. Customer administrators are responsible for access granted within their organization.
5. Security measures
BBK AI will maintain reasonable administrative, technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, loss or destruction, taking into account the nature of the processing and the risks involved. No system can be guaranteed completely secure.
6. Subprocessors
The customer authorizes BBK AI to use subprocessors necessary to provide the service. Material provider categories are listed in the Service Providers and Subprocessors page. BBK AI will impose appropriate data-protection obligations on subprocessors acting on its behalf. A customer requiring advance notice of material changes may contact sales@allai.ae or rely on any notice mechanism stated in its signed order.
7. International processing
Personal data may be processed in countries where BBK AI or its providers operate. Where applicable law requires a transfer mechanism or additional safeguard, the parties will use an appropriate mechanism. Connected Platform Data remains subject to any stricter provider-specific restrictions in the Privacy Policy.
8. Data-subject requests
Taking into account the nature of the processing, BBK AI will provide reasonable assistance to enable the customer to respond to verified rights requests where the customer cannot reasonably complete the request using available service controls. Requests should identify the relevant account and data scope.
9. Security incidents
BBK AI will notify an affected business customer without undue delay after becoming aware of a confirmed personal-data breach involving customer personal data processed on its behalf, where notification is required by applicable law. Notice may be updated as investigation proceeds and does not constitute an admission of fault.
10. Return and deletion
Upon termination or a verified customer request, BBK AI will delete or return customer personal data as required by the agreement and applicable law, subject to technical backup rotation and records that must lawfully be retained. Subscription cancellation, account closure and connected-platform revocation may be separate actions.
11. Information and audits
BBK AI will make available information reasonably necessary to demonstrate compliance with this DPA. Any audit request must be proportionate, protect the security and confidentiality of other customers and systems, avoid unnecessary disruption, and use existing independent reports or documentation where reasonably sufficient.
12. Priority and liability
This DPA controls processor obligations for customer personal data where it conflicts with a broader general provision of the Terms. The liability framework in the applicable agreement applies to this DPA except where mandatory law requires otherwise.
13. Contact
Business and DPA enquiries may be sent to sales@allai.ae. Privacy and data-subject assistance may be sent to support@allai.ae.
Company. Company information
Legal company: BBK AI FOR COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN
Trade name: BBK AI
Product: AllAI
Location: Dubai, United Arab Emirates
General and account support: support@allai.ae
Sales: sales@allai.ae
Affiliate support: affiliate@allai.ae