Privacy Policy

One By Zero is a technology and creative services business based in Dubai, United Arab Emirates. This Privacy Policy explains how we handle information through our website, contact form, AI assistant and communications with our team. Data handled within a client project is also subject to the relevant project agreement.

• Enquiries: your name, email address, selected services and project message. If you contact us by phone or WhatsApp, we also receive the details you choose to share there.
• AI conversations: the messages you send, recent conversation context and generated replies. Voice features process microphone audio and its transcription when you choose to use them.
• Website activity: pages visited, device and browser information, referral information, interactions and online identifiers. Our website and service providers also process technical request data, including IP addresses, to deliver and protect the service.

We use information to reply to enquiries, discuss project requirements, deliver requested AI responses, operate the website, understand how it is used and limit spam or misuse. Project communications may also be needed to administer our services and meet applicable legal obligations.

Depending on the activity and applicable law, processing may be based on your consent, steps you request before a contract, performance of an agreement, a legal obligation or another permitted basis.

Our assistant uses OpenAI to generate replies. Messages and recent conversation context are sent through our server to OpenAI. If you enable voice, audio is sent for transcription; the resulting text is used to generate a reply, and reply text may be sent for speech generation. Microphone access requires your browser permission. You can end the call or revoke that permission in your browser.

• The website keeps recent chat context in the current tab’s memory, not a saved chat account. Closing the chat clears its local conversation; ending a voice call clears that call’s context. Our application does not maintain a permanent chat or audio archive.
• Clearing the chat does not erase data already processed by a provider. OpenAI’s API data controls explain its service-specific retention, including abuse-monitoring retention of up to 30 days by default for chat and speech generation, with exceptions. API data is not used for model training by default unless the API customer opts in.
• Voice abuse protection: a signed, first-party browser cookie and hashed IP identifier enforce up to three voice sessions per Dubai calendar day, with a three-minute limit per session. People sharing an internet connection may share this allowance. The cookie lasts up to 24 hours. Active session records expire after three minutes and daily counters expire at midnight Dubai time. These records contain identifiers and usage counts, not conversation text or recordings.

Please do not share passwords, access keys, payment details, sensitive personal information or confidential client material with the assistant. AI replies may be inaccurate. Confirm project details with our team.

• OpenAI API data controls

• Google Workspace handles email delivery and correspondence, including contact-form enquiries sent to our team.
• Google Analytics measures website visits and usage. Microsoft Clarity provides interaction analysis, heatmaps and session replays. The chat widget is marked for content masking in Clarity. Masking does not replace the need to avoid sharing sensitive information.
• Hosting, content delivery and external media services process technical requests to load the site. This includes Google Fonts and Cloudinary images where used.
• WhatsApp and social links take you to services with their own privacy policies. Information may also be disclosed where necessary to comply with law or protect legal rights.

These providers may process data outside the UAE. Processing locations and safeguards depend on the provider, service and applicable arrangements.

Enquiries and correspondence may remain in our business email records while needed to respond, manage an ongoing relationship, resolve a dispute or meet legal obligations. Retention varies by record and purpose. Browser storage and provider retention are described separately in our Cookie Policy and the provider information above.

We use technical safeguards such as input validation, request limits and server-side handling of service credentials. No online service can guarantee absolute security. Contact us if you believe information has been exposed.

You can choose not to use AI or voice features and contact us directly instead. You can manage cookies and site data in your browser. Depending on applicable law, you may request access, correction or deletion of personal information, object to or restrict processing, request a transferable copy, or withdraw consent where processing relies on it. Some records may need to be retained for legal reasons.

Email us with enough detail to identify your request. We may need to verify your identity before responding. You may also raise concerns with the relevant data-protection authority where applicable.

This website is intended for business enquiries and is not directed at children. If a child has shared personal information with us, please contact us. We update this policy when our practices change and show the revision date at the top of this page.

For privacy questions or personal-data requests, contact One By Zero in Dubai, United Arab Emirates.