Privacy Policy
Last updated: January 2026
1. Introduction
Aioby Technologies ("we", "us", "our") operates the Aioby marketplace platform. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services.
We are committed to protecting your privacy and complying with applicable data protection laws including the UAE Personal Data Protection Law (PDPL) and India's Digital Personal Data Protection Act (DPDPA).
2. Data We Collect
Account data: Name, email address, password (hashed), profile photo, and optional bio when you register.
Business data: Store name, description, address, phone, operating hours, and business category when you create a store listing.
Listing data: Photos, prices, descriptions, and other content you add to your listings.
Transaction data: Order details, booking records, and payment references (we do not store card details โ these are held by Stripe).
Usage data: Pages visited, searches performed, listings clicked, and time spent on the Platform.
Device data: Browser type, IP address, and device identifiers for security and analytics purposes.
3. How We Use Your Data
- To provide, operate, and improve the Aioby Platform
- To process transactions, bookings, and payments
- To send transactional emails (booking confirmations, order updates, etc.)
- To personalise your experience and show relevant content
- To power AI features including search, translations, and suggestions
- To detect and prevent fraud, abuse, and security threats
- To comply with legal obligations
- To send marketing communications (only with your consent)
4. Data Sharing
We do not sell your personal data. We share data only as necessary:
- Supabase: Database and authentication infrastructure (data hosted in EU region)
- Stripe: Payment processing (subject to Stripe's privacy policy)
- Vercel: Hosting and edge network
- Google (Gemini): AI features โ content you submit for translation/generation is processed by Gemini API
- Resend: Transactional email delivery
- Legal authorities: When required by law or to protect safety
5. Data Retention
We retain your data for as long as your account is active. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory reasons.
6. Your Rights
Depending on your location, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your data ("right to be forgotten")
- Object to or restrict processing of your data
- Data portability โ receive your data in a portable format
- Withdraw consent for marketing communications at any time
To exercise these rights, contact us at privacy@aioby.com.
7. Cookies
We use cookies and similar technologies to operate the Platform. See our Cookie Policy for full details.
8. Security
We implement appropriate technical and organisational security measures to protect your data, including encrypted connections (TLS), row-level security in our database, and regular security reviews. However, no system is 100% secure and we cannot guarantee absolute security.
9. Children
Aioby is not intended for users under 18 years of age. We do not knowingly collect data from minors. If you believe a minor has provided data to us, contact us and we will delete it promptly.
10. International Transfers
Your data may be processed in countries outside your own (including the EU via Supabase). We ensure appropriate safeguards are in place for any international transfers.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or prominent notice on the Platform. Continued use after changes constitutes acceptance.
12. Contact
For privacy-related questions or to exercise your rights: privacy@aioby.com
For general enquiries: Contact page