Privacy Policy

Last Updated: December 22, 2025

1Introduction

Welcome to Gloora AI. This Privacy Policy explains how Gloora AI (F.Z.C.), located at AMC Boulevard-A Building, Ajman Media City, Ajman, United Arab Emirates ("Company", "we", "us", or "our"), collects, uses, discloses, and protects your personal information when you use our platform and services.

We are committed to protecting your privacy and handling your data in an open and transparent manner. This policy complies with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and the EU General Data Protection Regulation (GDPR) where applicable.

Important Distinction - Controller vs. Processor: It is important to note the distinction between Gloora AI as a 'Data Controller' and as a 'Data Processor.' We act as a Controller regarding the information you (the Business Owner) provide to us to create your account. However, regarding the data of your end-customers (appointments, client lists) that you upload or manage via our platform, we act as a Data Processor, and you act as the Data Controller.

2Information We Collect

Information You Provide:

  • Account information: name, email address, business name, trade license details
  • Business information: services offered, pricing, staff details, business hours
  • Customer data: names, contact information, appointment history, preferences
  • Payment information: billing details (processed securely through third-party processors)
  • Communications: messages, support requests, feedback

Information Collected Automatically:

  • Device information: IP address, browser type, operating system
  • Usage data: pages visited, features used, actions taken
  • Location data: general geographic location based on IP address
  • Cookies and similar technologies (see our Cookie Policy)

3How We Use Your Information

We use your information to:

  • Provide, maintain, and improve our services
  • Process transactions and send related information
  • Send appointment reminders and marketing communications (with consent)
  • Respond to your comments, questions, and support requests
  • Monitor and analyze trends, usage, and activities
  • Detect, investigate, and prevent fraudulent transactions and other illegal activities
  • Personalize and improve your experience
  • Comply with legal obligations

Marketing and Communications Compliance: Please note: When using the platform's marketing or communication features to contact your own clients, you (the Subscriber) are solely responsible for obtaining necessary consents (opt-ins) required by applicable laws (such as GDPR, UAE regulations, or CAN-SPAM).

4Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Contract: Processing necessary to provide our services to you
  • Legitimate Interests: Business operations, fraud prevention, security
  • Consent: Marketing communications, cookies, optional features
  • Legal Obligation: Compliance with applicable laws and regulations

5Information Sharing

We may share your information with:

  • Service Providers: Cloud hosting, payment processing, email delivery, analytics
  • Infrastructure and Technology Partners: We utilize third-party sub-processors to provide the underlying technology, hosting, and infrastructure necessary to operate the Gloora AI platform
  • Business Partners: Only with your explicit consent
  • Legal Requirements: When required by law, court order, or government authority
  • Business Transfers: In connection with any merger, acquisition, or sale of assets

We do not sell your personal information to third parties.

6Data Security

We utilize industry-leading third-party infrastructure providers to host our services. Together with our providers, we implement appropriate technical and organizational measures to protect your data, including:

  • Encryption of data in transit (SSL/TLS) and at rest
  • Strict access controls and multi-factor authentication
  • Regular security assessments and audits of our infrastructure
  • Employee training on data protection
  • Incident response procedures

While we strive to use commercially acceptable means to protect your Personal Information, no method of transmission over the Internet is 100% secure. We cannot guarantee its absolute security.

7Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. When data is no longer needed, we securely delete or anonymize it.

8Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Erasure: Request deletion of your data ("right to be forgotten")
  • Restriction: Limit how we process your data
  • Portability: Receive your data in a structured, machine-readable format
  • Object: Object to processing based on legitimate interests
  • Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at legal@gloora.ai.

9International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. By using the Service, you acknowledge and agree that your data may be hosted on servers located in the United States or other jurisdictions, which are subject to our sub-processors' data protection standards.

We ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms approved by relevant data protection authorities.

10Children's Privacy

Our platform is intended for use by businesses and is not directed to individuals under 18. We do not knowingly collect personal information from children.

However, we acknowledge that our Subscribers (Salons/Clinics) may use the platform to book appointments for children. In such cases, the Subscriber is responsible for obtaining verifiable parental consent for the processing of any minor's data.

If you become aware that a child has provided us with personal data without parental consent, please contact us immediately.

11Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or through a prominent notice on our platform at least 30 days before the changes take effect.

12Contact Us

For questions about this Privacy Policy or our data practices, contact us at:

Gloora AI (F.Z.C.)
AMC Boulevard-A Building, Ajman Media City
Ajman, United Arab Emirates
Email: legal@gloora.ai

Questions? Contact us at legal@gloora.ai
Privacy Policy | Gloora AI