Privacy Policy

AdvoAssist is owned and operated by ADVOASSIST PORTAL L.L.C, licence number 1641338, Office 012-301, Building 301 – Control Tower, Al Hebiah First, Dubai, United Arab Emirates. In this Policy, the company and the service it operates are both referred to as "the Platform". The Platform is the controller of your personal data for the purposes of Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). This Policy is part of the Platform's Terms and Conditions.

1. WHO THIS POLICY COVERS

1.1 This Policy applies to visitors to the Platform's website, clients, persons who contact the Platform on behalf of a client, and Specialists. It covers the website, the web platform, the mobile apps, the chat bot, the call centre and the Platform's e-mail and messaging channels.

1.2 Specialists also receive separate information on how the Platform processes their data under the Specialist Agreement.

1.3 Some of the functions described in this Policy, including the auction process and the AI Tools described in section 5, are released in stages. Until a function is available in automated form, the corresponding process is carried out manually by the Platform's staff, and this Policy applies to that manual processing in the same way.

2. WHAT THE PLATFORM COLLECTS

2.1 Account details. Your name, e-mail address, phone number, password, preferred language and emirate. If you sign in with Google, the Platform receives your name, e-mail address and profile picture from Google. For company accounts, the Platform also collects the company name, trade licence details and the name of the authorised representative.

2.2 Case information. The description of your matter, the answers you give when placing a request, deadlines and hearing dates, and the documents you upload. Depending on your matter, this may include identity documents (such as your Emirates ID or passport), contracts, court papers, and information about your family, health, finances or criminal proceedings.

2.3 Communications. Messages in the chat with your Specialist, messages to Support and Arbitration, conversations with the chat bot, and calls with the Platform's call centre.

2.4 Payment details. The amount, date, method and status of each payment, invoices and refund records. Card payments are processed by the Platform's payment service provider. The Platform does not receive or store your full card number or security code.

2.5 Reviews and comments. Ratings, reviews and comments you post on the Platform.

2.6 Technical data. IP address, device and browser type, operating system, app version, pages visited, time spent, crash reports and information collected through cookies (see section 11).

2.7 Data from other people. Sometimes the Platform receives your data from someone else, for example a relative who contacts the Platform while you are detained, a person who pays for a Service for you, or a company that registers you as its representative. Where this happens, the Platform will tell you once it is in contact with you.

2.8 Specialists. Name, nickname, contact details, licence and registration details, qualifications, experience, languages, identity documents, insurance details, bank details for payouts, ratings, and performance data such as response times and case outcomes.

2.9 Acceptance records. When you accept the Terms and Conditions, the Cancellation and Refund Policy and this Policy, the Platform records the name you typed as your electronic signature, the version and date of each document accepted, the date and time of acceptance, the account concerned and technical data such as the IP address.

3. WHY THE PLATFORM USES YOUR DATA

3.1 The Platform uses personal data only for clear purposes and on a lawful basis under the PDPL, as follows:

Purpose	Main basis
Creating and managing your account	Performing the contract with you
Matching your request with a Specialist and running your Case	Performing the contract with you
Processing payments, invoices and refunds	Performing the contract; legal obligation
Quality control, Support and Arbitration	Performing the contract; the Platform's legitimate interest in keeping the service safe and fair
Security, fraud prevention and checking that contact details are not exchanged to take Cases off the Platform	Legitimate interest; legal obligation
Health, family, criminal or other sensitive data in your Case	Your explicit consent, given when you upload or share it, or where needed for legal claims
Sending service messages and deadline reminders	Performing the contract
Sending news and offers	Your consent, which you can withdraw at any time
Improving the Platform and producing anonymous statistics	Legitimate interest
Meeting legal, tax and regulatory requirements	Legal obligation

3.2 The Platform will not use your data for a purpose that is incompatible with the one for which it was collected without telling you and, where needed, asking for your consent.

4. WHO CAN SEE YOUR DATA

4.1 The documents in your personal archive are visible only to you by default.

4.2 Your Specialist. A Specialist sees your request and the documents attached to it only after accepting your Order. For Quotation Request, the invited Specialists see the request and attached documents while the auction is open, and when it closes only the Specialist you selected keeps access; until that function is available in automated form, a Platform manager shares your request with the invited Specialists manually on the same basis. A Specialist never sees your full archive, or documents you have shared with a different Specialist on a different matter. Clients see Specialists under a public nickname, and Specialists' private contact details are not shown.

4.3 Platform staff. Authorised Platform staff can access Case documents and chats when it is needed for a defined purpose: managing your request, Support, quality control, Arbitration, security checks (including preventing the exchange of contact details for off-platform work and detecting unlawful content) and legal compliance. Access is limited by role, logged, and given only to staff who have signed a confidentiality agreement.

4.4 Service providers. The Platform uses trusted companies to host the Platform, store data, process payments, send e-mails and notifications, run analytics, and provide the chat bot and the other AI Tools described in section 5. They act on the Platform's instructions under written contracts, must keep your data confidential, may not use it for their own purposes and may not use it to train their own general models. The current list of the Platform's service providers, including its hosting, payment, communication, analytics and AI providers, is published on the Platform's website and updated whenever a provider changes.

4.5 Authorities. The Platform discloses data to courts, public prosecutors, police or regulators where the law requires it, where a valid order is served on the Platform, or where it is necessary to protect someone's life or safety or to defend the Platform's legal rights.

4.6 Business transfer. If the Platform is sold or merged, your data may pass to the new owner, who must continue to protect it in line with this Policy.

4.7 The Platform does not sell your personal data, and it does not give it to third parties for their own marketing.

5. AI AND AUTOMATED TOOLS

5.1 The Platform uses automated tools and artificial intelligence ("AI Tools") to support its services. Depending on the stage of release, AI Tools may process your data in order to:

(a) answer your first questions through the chat bot and help you choose a Service;

(b) suggest suitable Specialists for your request, based on area of law, language and location;

(d) highlight possible risks, missing documents, deadlines and points for attention in your Case;

(e) prepare draft text, templates and suggested next steps for a Specialist to review;

(f) produce indicative estimates of cost, duration or the likelihood of a particular outcome; and

(g) detect malware, spam, fraud, abuse and the exchange of contact details.

5.2 The data processed by AI Tools is the data described in section 2, in particular your Case information, documents and messages. It is processed to perform the contract with you and, for security and fraud prevention, on the basis of the Platform's legitimate interest. Where your documents contain sensitive information, the processing is based on your explicit consent, given when you upload or share them.

5.3 Your conversations with the chat bot are stored in your account and may be reviewed by Platform staff to handle your request and improve the answers given.

5.4 AI Tools are provided by service providers engaged under written contracts. Those providers may process your data only on the Platform's instructions, must keep it confidential and may not use it for their own purposes or to train their own general models. The current list of providers is published on the Platform's website.

5.5 The output of AI Tools, including summaries, risk indicators and estimates of cost, duration or likelihood of success, is generated automatically, may be incorrect or incomplete, and is not legal advice. It is reviewed by a Specialist or by Platform staff before it is acted upon.

5.6 The Platform does not take decisions that produce legal effects for you, or that similarly significantly affect you, by automated means alone. You may ask for a person to review any automated decision, express your point of view and contest the decision.

5.7 While a function is not yet released in automated form, the same analysis and matching steps are carried out manually by the Platform's staff. This Policy applies to that manual processing in the same way.

6. TRANSFERS OUTSIDE THE UAE

6.1 Transfers outside the UAE. Some of the Platform's service providers, including its artificial intelligence and payment service providers, store or process personal data outside the United Arab Emirates. In each such case, the Platform transfers personal data only to a country that the UAE Data Office recognises as affording an adequate level of protection for personal data, or does so subject to standard contractual clauses or other safeguards permitted under the PDPL. The current list of the Platform's service providers, including the countries in which they process personal data, is published on the Platform's website in accordance with clause 4.4. When that happens, the Platform transfers data only to countries that the UAE Data Office considers to have adequate protection, or under contracts and other safeguards permitted by the PDPL.

7. HOW LONG THE PLATFORM KEEPS DATA

Type of data	How long the Platform keeps it
Account details	While your account is open, and 2 years after it is closed
Case files, documents and chats	5 years after the Case is closed, unless you ask for them to be deleted earlier and the Platform is not required to keep them
Payment and invoice records	At least 5 years, or longer where UAE tax law requires
Chat bot conversations	12 months
Marketing preferences	Until you withdraw consent
Specialist data	While the Specialist is active, and 5 years after leaving the Platform

7.1 After these periods the Platform deletes data or makes it anonymous. The Platform may keep data longer where it is needed for a legal claim, an investigation or an order of a competent authority.

7.2 Acceptance records described in clause 2.9 are kept for as long as your account exists and for [5] years after it is closed, as evidence that the Terms and the policies were accepted.

8. HOW THE PLATFORM PROTECTS DATA

8.1 The Platform protects data with encryption in transit and at rest, role-based access, confidentiality agreements with staff and Specialists, access logs and regular security reviews.

8.2 No system connected to the internet is completely secure. If a breach occurs that is likely to affect your rights, the Platform will inform you and the UAE Data Office as the PDPL requires.

8.3 You can help by keeping your password private, logging out on shared devices and sharing documents only within the relevant Case.

9. YOUR RIGHTS

9.1 Under the PDPL you have the right, free of charge:

(a) to be told how your data is used;

(b) to get a copy of your personal data, and to receive it in a structured format so that it can be passed to another provider;

(d) to have your data deleted where it is no longer needed or where you withdraw your consent;

(e) to restrict or object to processing in certain cases, including processing for direct marketing;

(f) to object to decisions made only by automated means that significantly affect you; and

(g) to withdraw your consent at any time, without affecting processing that took place before.

9.2 You can view and update most of your data in your account settings, and you can delete your account in the app or by writing to support@advoassist.com. The Platform will reply within 30 days and may need to confirm your identity before acting on a request.

9.3 Some data must be kept even after a deletion request, for example payment records required by tax law or information needed for an ongoing dispute. The Platform will tell you if that is the case.

9.4 If you are not satisfied with the Platform's reply, you may complain to the UAE Data Office.

10. MARKETING

10.1 The Platform will send you news, legal updates and offers only if you have agreed to it. You can unsubscribe using the link in any e-mail or in your account settings.

10.2 Service messages about your Case, payments and deadlines are not marketing, and they will continue while you have an active Case.

11. COOKIES

11.1 The Platform's website uses cookies and similar technologies, which are small files stored on your device. The Platform uses:

(a) strictly necessary cookies, which keep you logged in and keep the Platform secure. These cannot be switched off;

(b) analytics cookies, which show how the Platform is used so that problems can be fixed and improve it (for example Google Analytics and Firebase);

(d) marketing cookies, which help the Platform measure its advertising.

11.2 Cookies other than strictly necessary ones are used only with your consent, which you can give or change through the cookie banner or your browser settings. Some features may not work if you switch cookies off.

12. MOBILE APPS

12.1 When the Platform's app is available, it may ask for access to your camera (to photograph documents), files (to upload documents) and notifications (to send Case updates). You can change these permissions in your device settings at any time.

12.2 If you download the app from the Apple App Store or Google Play, Apple and Google process some data about you under their own privacy policies.

13. LINKS TO OTHER WEBSITES

13.1 The Platform may contain links to government portals and other websites. The Platform is not responsible for how those websites handle personal data, so please read their own privacy notices.

14. CHANGES TO THIS POLICY

14.1 The Platform may update this Policy when its services or the law change. It will publish the new version on the Platform with a new date and, for important changes, notify registered users by e-mail or in their account.

16. CONTACT THE PLATFORM

If you have any questions about this Policy or want to exercise your rights, please contact the Platform:

ADVOASSIST PORTAL L.L.C

Data protection contact: Authorised Representative

E-mail: support@advoassist.com

Phone: +971 56 996 2815

Address: Office 012-301, Building 301 – Control Tower, Al Hebiah First, Dubai, United Arab Emirates