LEGAL
Privacy Policy
This Privacy Policy explains how BPI VENTURES GLOBAL – FZCO ("dtcpilot", "we", "us") collects, uses, shares and protects personal data when you visit dtcpilot.io, request a demo, or use the dtcpilot platform (the "Service").
1. Who is responsible
For personal data about website visitors, prospects and account users, BPI VENTURES GLOBAL – FZCO is the controller. For personal data that our customers upload or sync into the Service (for example their own shoppers' order and contact details), our customer is the controller and we process that data as a processor on the customer's instructions, under our Terms of Service and any data processing agreement we sign with them.
BPI VENTURES GLOBAL – FZCOIFZA Business Park, Building A1, Dubai Digital Park,
Dubai Silicon Oasis, Dubai, United Arab Emirates
Email: support@dtcpilot.io
2. Data we collect
Information you give us
- Demo and contact requests: work email address, the monthly revenue band you select, and anything you write to us.
- Account information: name, work email, company name, role, login credentials and settings.
- Billing information: billing contact and address, tax identifiers and payment records. Card details are collected and stored by our payment processor, not by us.
- Support communications: messages and attachments you send to support@dtcpilot.io.
Information collected automatically
- Usage and device data: IP address, browser and device type, pages viewed, referring URL, and actions taken in the Service.
- Cookies and similar technologies: see our Cookie Policy.
Customer Data processed on our customers' behalf
When a customer connects its stores, ad accounts and other tools, the Service processes data such as orders, products, subscriptions, ad performance and its shoppers' contact and transaction details. We use this data only to provide the Service to that customer.
3. How we use personal data
| Purpose | Legal basis (where applicable) |
|---|---|
| Respond to demo requests and enquiries | Steps at your request before entering a contract; legitimate interests |
| Provide, operate and secure the Service and your account | Performance of our contract with you |
| Billing, fraud prevention and record-keeping | Contract; legal obligation; legitimate interests |
| Improve and develop the Service, including aggregated analytics | Legitimate interests |
| Send service notices and, where permitted, product updates | Contract; legitimate interests or consent |
| Comply with law and enforce our terms | Legal obligation; legitimate interests |
We do not sell personal data. We do not use Customer Data to train generalised AI models offered to other customers.
4. How we share personal data
- Service providers (sub-processors) that host infrastructure, process payments, deliver email, provide AI model inference, or help us support customers, bound by contracts that limit their use of the data.
- Integrations you enable: data flows to and from the third-party platforms you connect, at your direction.
- Professional advisers and authorities where required by law or to protect our rights, users or the public.
- Business transfers: in a merger, acquisition or sale of assets, subject to this Policy.
5. International transfers
We are based in the United Arab Emirates and our service providers may process data in other countries. Where required, we put appropriate safeguards in place for cross-border transfers, such as contractual commitments, in line with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and, where it applies, the EU/UK GDPR.
6. Retention
We keep personal data only as long as needed for the purposes above: account data for the life of the account and a reasonable period after; billing records for as long as tax and accounting law requires; demo-request data for up to 24 months unless you become a customer. Customer Data is deleted or returned after the end of a subscription as described in our Terms.
7. Security
We use administrative, technical and organisational measures designed to protect personal data, including encryption in transit, access controls and per-company isolation of Customer Data. No system is completely secure; please tell us promptly if you suspect a security issue.
8. Your rights
Depending on where you live, you may have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent at any time. To exercise these rights, email support@dtcpilot.io. If your data is held by one of our customers (for example you bought from a brand that uses dtcpilot), please contact that brand directly; we will support them in responding. You may also complain to your local data protection authority.
9. Children
The Service is for businesses and is not directed at children under 18. We do not knowingly collect their personal data.
10. Changes
We may update this Policy from time to time. We will post the new version here with a new "Last updated" date and, for material changes, notify account owners by email.
11. Contact
Questions about this Policy or our privacy practices: support@dtcpilot.io.