Privacy policy

Valzak is the data controller for personal data collected through this website. We operate under Dubai E-Trader License No. 1617867, issued by the Department of Economy and Tourism.

For any privacy question, email hello@valzak.ae.

We only collect what's needed for three flows:

• Contact form: your name, email address, WhatsApp number (optional), and the message you write.
• Discovery call booking: your name, email, WhatsApp number (optional), topic (optional), and your selected date and time.
• AI Design Pitcher: the business description, pain point, and service interest you type in. This text is sent to our AI model provider to generate the pitch response. We do not store it on our servers.
• Technical data: your IP address (for rate limiting and spam prevention), approximate location, browser user agent, and pages viewed. This is used in aggregate only.

• To respond to your enquiry and book our conversation.
• To generate a tailored proposal via the AI Design Pitcher.
• To understand which parts of the site work (anonymised analytics only — see section 5).
• To prevent abuse (rate-limiting by IP address).

We do not send marketing emails, newsletters, or promotional messages unless you explicitly ask us to. We do not sell, trade, or rent your data to anyone, ever.

Your data may transit the following processors, each chosen for their privacy and security posture. All are industry-standard SaaS used by millions of companies:

• Google (Gemini API)— processes AI pitcher input to generate the pitch. Text is not used to train their models on paid-tier usage and is deleted per Google's retention policy.
• Groq — fallback AI provider for when the primary is unavailable.
• Resend — delivers emails from our contact form and booking confirmations.
• Vercel — hosts the website and provides basic traffic analytics.
• Upstash — stores booking-slot reservations and rate-limit counters.
• Cloudflare Web Analytics (if enabled) — cookieless, privacy-first traffic analytics.

Several of these providers are based outside the UAE. By using this site you consent to the transfer of your data to these processors.

We use Vercel Analytics for aggregate traffic metrics (page views, referrers, rough geolocation). It does not set advertising cookies or track you across sites. We do not use Google Analytics and we do not place marketing pixels. No cookie consent banner is required because we are not placing tracking cookies.

We may add a second, cookie-free analytics provider in the future (e.g. Cloudflare Web Analytics). If we do, we will update this page before it goes live.

• Contact form submissions arrive in our email inbox and are kept until the enquiry is resolved or until you ask us to delete them.
• Booking records are kept in our slot-reservation store for up to 90 days after the meeting date.
• AI Pitcher input is not stored by us at all. Our AI providers retain it per their own retention policies (typically under 30 days).
• Rate-limit counters expire within 24 hours.
• Analytics data is aggregated and retained for up to 12 months.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate data.
• Request deletion of your data.
• Object to our processing in specific circumstances.
• Withdraw any consent you've previously given.
• Lodge a complaint with the UAE Data Office if you believe we've mishandled your data.

To exercise any of these rights, email hello@valzak.ae and we'll respond within 14 working days.

The site runs on HTTPS everywhere, stores no passwords, sets security headers on every response, and uses IP-based rate limiting and spam protection on every form. Our infrastructure providers (Vercel, Upstash, Resend, Google, Groq) are SOC 2 certified or equivalent.

This site is intended for business use and is not directed at children under 18. We don't knowingly collect data from minors; if you believe a child has submitted personal data, contact us and we'll delete it.

We'll update this page if our data practices change. The “Last updated” date below always reflects the most recent revision. Substantial changes that affect you materially will be flagged on the home page.

Questions, data requests, or concerns about privacy: email hello@valzak.ae.