Legal
Privacy Policy
How we handle your personal data, in line with the UAE Personal Data Protection Law (PDPL).
Last updated 13 June 2026
This is a plain-language draft provided for transparency. It is not legal advice. Please have it reviewed by a UAE-qualified lawyer before you rely on it.
1. Who is responsible for your data
AiZag (“AiZag,” “we,” “us”) operates the car marketplace at aizag.ai. The data controller is [REGISTERED ENTITY NAME], United Arab Emirates. For any privacy question or request, contact us at admin@aizag.ae. This policy explains what personal data we collect, why, who we share it with, and the rights you have under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, the “PDPL”).
2. The information we collect
Account information
When you register we collect your name and email, and (if you provide them) your phone number, username, profile photo, short bio, city/country, preferred language and the year you started driving. We store your password only as a secure one-way hash; we never see your actual password.
Listings and vehicle information
If you sell, we collect what you put in your listing: title, description, price, mileage, specification, optional VIN, photos, and the contact methods you choose to enable (phone, WhatsApp, in-app chat). If you add a location, that may include a city and an approximate address or map point.
Dealer information
Dealer accounts may provide business details such as business name, address, opening hours, logo, website, languages spoken, and trade-licence details for verification.
Activity on the platform
We collect the things you do on AiZag: offers you make, messages and conversations with other users, callback requests, favourites, comparisons, saved searches, vehicles in your garage, dealer reviews and follows, blocks, and any listings or users you report.
Payment information
When you pay for a paid feature, the payment is processed by Stripe. We receive a record of the transaction (amount, type, date and status) and your wallet balance, but we do not store your full card number. That is handled directly by Stripe.
Technical and usage information
Like most websites, we automatically receive some technical data when you visit, such as device and browser information and, if you consent, analytics about how you use the site (see cookies below). Our sign-in system uses a secure session cookie to keep you logged in.
3. How we use your information
- To create and run your account and show your listings to buyers.
- To enable buyers and sellers to contact each other and use marketplace features.
- To take payment for paid features and maintain your wallet.
- To review listings, keep the marketplace safe, prevent fraud and enforce our policies.
- To provide support and respond to your requests.
- To understand and improve how AiZag is used (analytics, with your consent).
- To meet legal and regulatory obligations.
Under the PDPL we rely on your consent, the performance of our contract with you, our legitimate business interests (such as security and improving the service), and compliance with the law, as appropriate to each use.
4. Cookies
We use a strictly necessary cookie to keep you signed in, store some of your preferences in your browser, and, only if you accept, analytics cookies. You can read the detail and manage your choice in our Cookie Policy.
5. Who we share your information with
Other users. Your public listing and the contact methods you enable are visible to other users and visitors, and dealer showroom profiles are public. Please do not put sensitive personal information in a listing.
Service providers (processors) who help us run AiZag:
- Stripe: processing card payments.
- Google (Google Analytics 4): website analytics, only with your consent.
- Google (Gemini): generating draft listing descriptions and identifying a car from a photo, when you use those features.
- Auto.dev: decoding a VIN you enter into vehicle details.
- Amazon Web Services (AWS Amplify): secure hosting of the website.
- Google Cloud Storage: storing listing images.
We share only what each provider needs to perform its task, and they are required to protect it. We may also disclose information where the law requires it, to enforce our terms, or to protect the rights and safety of our users and AiZag.
We do not sell your personal data.
6. International transfers
Some of our service providers process data outside the UAE. Where personal data is transferred abroad, we take steps required by the PDPL to make sure it remains protected to an appropriate standard.
7. How long we keep your information
- We keep your account information while your account is active.
- Listings expire automatically after a period of inactivity (currently 60 days) and may then be removed from public view.
- Sign-in session tokens expire automatically (refresh sessions within about 30 days).
- We keep transaction records for as long as needed for accounting, tax and legal reasons.
- When you close your account we delete or anonymise your personal data unless we must keep some of it by law.
8. How we protect your information
We use technical and organisational measures to protect your data, including encrypted connections, hashed passwords, secure sign-in sessions, access controls and listing moderation. No online service can be completely secure, but we work to keep your information safe and to act quickly if something goes wrong.
9. Your rights
Under the PDPL you have the right to:
- access the personal data we hold about you;
- ask us to correct inaccurate or incomplete data;
- ask us to delete your data, where the law allows;
- object to or ask us to restrict certain processing;
- withdraw consent you have given (for example, analytics cookies); and
- ask for your data in a portable format, where applicable.
To exercise any of these, email admin@aizag.ae. We will respond within the time the law allows. If you are not satisfied, you may complain to the UAE Data Office.
10. Children
AiZag is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will remove it.
11. Changes to this policy
We may update this policy as AiZag changes. We will update the “last updated” date above and, for significant changes, take reasonable steps to let you know.
12. Contact us
For any privacy question or to exercise your rights, email admin@aizag.ae.