Privacy Policy

Friction FZE LLC ("Friction," "we," "our," or "us") operates friction.ae (the "Site"). This Privacy Policy explains what personal data we collect through the Site, how we use it, who we share it with, and the rights available to you. By using the Site, you acknowledge the practices described in this Policy.

1. Information We Collect

Tech check assessments. While a session is in progress, your conversation is held temporarily against a session identifier and is not linked to your identity. If you choose to unlock your results, we store your name, role, company, email address, phone number, the conversation transcript, information extracted from that conversation, and the resulting assessment. If you upload a document during a session, the file is processed to extract relevant facts and text and is not retained; the extracted content becomes part of the stored transcript once a session is unlocked.

NDA signatures. If you sign our non-disclosure agreement before sharing a document, we record your name, email address, company, IP address, browser user agent, the agreement version, and a hash of the signed text.

Contact form. If you submit the contact form, we collect your name, email address, phone number, and message.

Website usage data. We set a first-party cookie and record page views, referrers, IP addresses, and, where present in the URL, campaign parameters (such as utm_source, utm_medium, utm_campaign) and advertising click identifiers (such as Google, Facebook, LinkedIn, or Microsoft ad click IDs) against it for up to 180 days. This allows us to recognize a returning visitor who later submits a form and to attribute that submission to the campaign or referral that brought you here. If you submit a form, this usage history and campaign attribution is linked to the resulting record in our customer relationship management system, and later page visits may continue to be added to that record. See our Cookie Policy for detail.

Analytics and advertising measurement. We use Google Analytics and Google Ads conversion measurement. These place cookies and send Google your IP address, the pages you view, and, where present, the ad click that brought you here, so that we can measure which campaigns produce enquiries and booked calls. Google acts as a third party in its own right and may use this data to personalize advertising across other websites. We do not send Google your name, email address, phone number, or anything you type into a form or a tech check.

2. How We Use Your Information

We use the information described above to:

• Generate and deliver the assessment you request;
• Respond to enquiries submitted through the Site;
• Maintain records of agreements you enter into with us;
• Follow up on your enquiry with relevant context rather than a generic response; and
• Maintain the security and integrity of the Site.

We do not sell personal data, and we do not use it to train any artificial intelligence model.

3. Legal Basis for Processing

We process personal data on the basis of your consent, given by submitting information through the Site, and our legitimate interest in responding to enquiries and delivering the services requested. Where applicable, we comply with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

4. How We Share Your Information

We share personal data with service providers acting on our behalf and solely for the purposes described in this Policy, including providers of cloud data storage and hosting, artificial intelligence processing used to generate your assessment, email delivery, our internal customer relationship management system, and a push-notification service we use to alert our team to a new enquiry, tech check completion, NDA signature, or call booking. That notification includes the contact details and a summary of what you submitted. These providers are contractually restricted from using your data for any purpose other than performing services for us.

We do not otherwise disclose personal data to third parties except where required by law.

5. International Data Transfers

Our database infrastructure is hosted in Australia. By using the Site, you consent to the transfer of your personal data to, and its processing in, jurisdictions outside the United Arab Emirates, which may have data protection laws different from those of your jurisdiction.

6. Data Security

We apply technical safeguards appropriate to the data we hold, including row-level access controls restricting write access on our databases, rate limiting on Site endpoints, encrypted transport (HTTPS) across the Site, and a signed confidentiality agreement required before any document is processed. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes described in this Policy, or until you request its deletion in accordance with Section 8.

8. Your Rights

You may request access to, correction of, or deletion of your personal data at any time by contacting us at hello@friction.ae. We will respond to and act on verified requests without undue delay.

9. Automated Decision-Making

Assessments generated through the Site are informational and are reviewed by a member of our team before any follow-up. No decision that produces a legal or similarly significant effect on you is made on a fully automated basis.

10. Children's Privacy

The Site is intended for business use and is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to This Policy

We may update this Policy from time to time. The date at the top of this page reflects the most recent revision. Material changes will be reflected here before they take effect.

12. Contact Us

For questions about this Policy or our data practices, contact us at hello@friction.ae.