Privacy Policy

This Privacy Policy explains how KYEVOR collects, uses, stores and protects personal data when you visit our website, contact us or use our services.

Mistry Ventures LLC, trading as KYEVOR ("KYEVOR", "we", "us" or "our"), respects your privacy and is committed to protecting personal data that we collect, use and process.

This Privacy Policy explains how we handle personal data when you visit kyevor.ai, contact us, engage with our services, communicate with us, or otherwise interact with KYEVOR.

We process personal data in accordance with applicable laws of the United Arab Emirates, including Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data.

1. About KYEVOR

KYEVOR is an AI and digital growth agency operated by:

KYEVOR provides services that may include artificial intelligence systems, automation, digital marketing, customer communication systems, AI agents, lead-generation systems, customer-support solutions, CRM automation and related digital services.

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data processed by KYEVOR in connection with:

• our website;
• enquiries and contact forms;
• prospective and current clients;
• sales and business communications;
• meetings and calls;
• delivery of our services;
• AI-powered systems and automations;
• analytics and website technologies;
• marketing communications; and
• other interactions with KYEVOR.

Where KYEVOR processes personal data solely on behalf of a client, the client's own privacy policy may also apply.

3. Our Role When Processing Personal Data

Data we collect for our own business

Where we collect information directly through our website, sales process, billing activities or business communications, KYEVOR generally determines why and how that information is processed.

Data processed on behalf of clients

When KYEVOR processes personal data belonging to a client's customers, leads, employees or other individuals in order to provide contracted services, the client will generally determine the purposes for which that data is processed.

KYEVOR will process such information according to the client's documented instructions, applicable contractual arrangements and applicable law.

Where appropriate, KYEVOR may enter into a separate data processing agreement with the client.

4. Information We Collect

The information we collect depends on how you interact with KYEVOR.

Contact and identification information

We may collect:

• name;
• email address;
• telephone number;
• company name;
• job title;
• business address; and
• other contact information you provide.

Enquiry and business information

If you contact KYEVOR, request information, book a meeting or discuss our services, we may collect:

• your enquiry;
• business requirements;
• company website;
• services you are interested in;
• marketing objectives;
• business challenges;
• approximate budget;
• business performance information;
• information relating to your existing technology or systems; and
• other information you voluntarily provide.

Client information

When you become a client, we may process information required to manage our relationship, including:

• contracts;
• project information;
• billing details;
• invoices;
• account information;
• communications;
• system access information;
• business documentation;
• project files; and
• service configuration information.

Client customer data

Depending on the services we provide, our systems may process information concerning a client's customers, leads or users.

This may include:

• names;
• email addresses;
• telephone numbers;
• enquiry information;
• booking information;
• CRM records;
• customer communications;
• chat transcripts;
• call information or recordings;
• lead information; and
• other information submitted to systems operated or supported by KYEVOR.

The exact information processed will depend on the particular client and service.

Website and technical information

When you use our website, certain information may be collected automatically, including:

• IP address;
• browser type;
• operating system;
• device type;
• approximate geographic location;
• referring website;
• pages viewed;
• date and time of access;
• interactions with the website; and
• cookie or similar identifiers.

Communications and recordings

If you communicate with KYEVOR through email, telephone, video conferencing, messaging platforms or similar services, we may retain those communications.

Calls or meetings may be recorded or transcribed where appropriate. Where notice or consent is required, this will be provided or obtained before recording.

Payment information

Where payments are processed through third-party payment providers, those providers may collect payment card or financial information directly.

KYEVOR does not intend to store full payment card numbers or payment card security codes on its own systems.

5. How We Collect Information

We may collect personal data:

• directly from you;
• through our website;
• when you contact us;
• when you book a consultation;
• during sales discussions;
• when you become a client;
• through integrations authorised by a client;
• through CRM or automation systems;
• through client-provided databases or systems;
• through analytics technologies;
• from service providers;
• from publicly available business sources; or
• when another organisation lawfully provides information to us.

6. How We Use Personal Data

Provide our services

We may use personal data to:

• respond to enquiries;
• prepare proposals;
• enter into and manage contracts;
• provide AI and automation services;
• develop and configure client systems;
• provide customer support;
• maintain integrations;
• troubleshoot systems;
• monitor service performance; and
• communicate with clients.

Operate our business

We may use information to:

• manage client relationships;
• maintain business records;
• process payments and invoices;
• manage suppliers and contractors;
• administer our website;
• improve business processes;
• measure service performance; and
• plan and develop our services.

Maintain security

We may process information to:

• protect accounts and systems;
• detect unauthorised access;
• prevent fraud or misuse;
• investigate security incidents;
• maintain system integrity; and
• protect KYEVOR, our clients and other users.

Analyse and improve our website and services

We may use analytics and operational information to understand how our website and services are used and how they can be improved.

Where possible and appropriate, information may be aggregated or anonymised for these purposes.

Marketing

Where permitted by applicable law, we may use contact information to:

• follow up on enquiries;
• provide information about KYEVOR services;
• send requested information;
• send marketing communications; and
• communicate relevant offers or business updates.

You can opt out of marketing communications at any time.

Legal and regulatory purposes

We may process information where necessary to:

• comply with applicable laws;
• respond to lawful government or regulatory requests;
• maintain required business records;
• establish or defend legal claims;
• enforce agreements; or
• protect our legal rights.

Where processing relies on consent, consent will be obtained where required and may be withdrawn subject to applicable law.

7. Artificial Intelligence and AI Data Processing

Because KYEVOR provides AI-powered services, some information may be processed using artificial intelligence, machine-learning models and automated systems.

Third-party AI providers

KYEVOR may use third-party AI or machine-learning service providers for functions such as:

• natural-language processing;
• AI assistants;
• chatbots;
• voice agents;
• transcription;
• content generation;
• analysis;
• automation;
• classification;
• information extraction; and
• customer communication.

Information may therefore be transmitted to or processed by external AI service providers when reasonably necessary to provide a service.

Data minimisation

Where practical, KYEVOR seeks to limit the personal data submitted to AI systems to what is reasonably necessary for the relevant purpose.

We may use techniques such as limiting data fields, removing unnecessary information, pseudonymisation or anonymisation where appropriate.

AI model training

Where third-party AI providers are used, their processing and retention practices may depend on the specific service, account type and configuration used.

KYEVOR seeks to use appropriate business-grade services and privacy configurations where commercially available and appropriate.

AI-generated outputs

Personal data contained in prompts, conversations, documents or other inputs may form part of an AI system's processing in order to generate requested outputs.

KYEVOR will use such processing only for legitimate service-related purposes and in accordance with applicable contractual and legal requirements.

8. Automated Processing and Decision-Making

KYEVOR may use automation to perform routine business functions such as:

• responding to enquiries;
• scheduling appointments;
• categorising leads;
• routing communications;
• providing recommendations;
• assisting customer support;
• updating CRM systems;
• generating content; and
• triggering workflows.

KYEVOR does not intend to use personal data collected through its own website to make solely automated decisions that have legal consequences or similarly serious effects on individuals.

Where a client asks KYEVOR to implement automated systems that may significantly affect individuals, the use of such systems should be separately assessed and appropriately configured.

9. Client-Controlled AI and Automation Systems

Some services provided by KYEVOR may operate on behalf of our clients.

Examples may include:

• AI receptionists;
• website chatbots;
• AI voice agents;
• booking assistants;
• customer-support agents;
• lead-qualification systems;
• CRM automations;
• email automations;
• WhatsApp or messaging workflows;
• review-generation systems;
• sales workflows; and
• internal business automations.

When an individual interacts with one of these systems, the relevant client may be primarily responsible for deciding why personal data is collected and used.

If you wish to exercise rights relating to information collected by one of our clients, you may need to contact that client directly.

KYEVOR will reasonably assist clients with legitimate data-protection requests where required.

10. Sensitive Personal Data

KYEVOR does not intentionally request sensitive personal information unless it is necessary for a specifically agreed service and appropriate safeguards are in place.

Clients and users should not provide sensitive information unless it is genuinely required and KYEVOR has agreed to process it.

Sensitive information may include information relating to matters such as:

• health;
• biometric identification;
• religion;
• ethnicity;
• political views;
• criminal records; or
• other information treated as sensitive under applicable law.

11. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Necessary functions

These technologies help the website operate correctly and may be required for security, navigation or other essential functions.

Analytics

Analytics technologies may help us understand how visitors use our website. This may include information such as pages viewed, traffic sources, device information and website interactions.

Marketing and advertising

Where enabled, marketing technologies may be used to:

• measure advertising effectiveness;
• understand conversions;
• create advertising audiences; or
• deliver more relevant advertising.

Where consent is required by applicable law, non-essential technologies will be used subject to the required consent.

You may also be able to control cookies through your browser settings or any cookie-management controls provided on our website.

12. Marketing Communications

KYEVOR may send marketing communications where permitted by applicable law.

Where consent is required, we will seek appropriate consent before sending marketing communications.

You may withdraw your consent or opt out at any time using:

• the unsubscribe mechanism contained in the communication; or
• privacy@kyevor.ai.

Where KYEVOR uses telephone, SMS, WhatsApp or similar channels for marketing, we will seek to operate those activities in accordance with applicable UAE telecommunications and telemarketing requirements.

13. How We Share Personal Data

We may share information where reasonably necessary with the following categories of recipients.

Technology providers

This may include providers of:

• website hosting;
• cloud infrastructure;
• email;
• CRM systems;
• cloud storage;
• analytics;
• cybersecurity;
• automation;
• API integrations;
• AI and machine-learning systems;
• communications;
• telephony;
• video conferencing;
• transcription;
• scheduling; and
• payment processing.

Contractors and service providers

We may provide limited access to employees, contractors, freelancers, consultants or technical specialists where they need access to perform work for KYEVOR or our clients.

Access should be limited to what is reasonably necessary for their role.

Professional advisers

Information may be shared with:

• accountants;
• auditors;
• lawyers;
• insurers; or
• other professional advisers.

Government authorities

We may disclose personal data where required by applicable law, legal process, court order or lawful request from a competent government or regulatory authority.

Business transactions

If KYEVOR or Mistry Ventures LLC undergoes a merger, restructuring, acquisition, investment, sale of assets or similar transaction, relevant information may be disclosed to appropriate parties subject to reasonable confidentiality and data-protection safeguards.

14. Third-Party Service Providers

KYEVOR uses external technology providers to operate its business and deliver services.

These may include providers of:

• hosting;
• cloud services;
• artificial intelligence;
• CRM software;
• payment processing;
• email;
• analytics;
• communications;
• automation;
• document storage; and
• cybersecurity.

Our technology stack may change over time as we introduce, remove or replace service providers.

KYEVOR seeks to select service providers appropriate to the nature of the information and the services being provided.

Additional information about relevant service providers may be made available where appropriate or required.

15. International Transfers

Although KYEVOR operates from the United Arab Emirates, some of our technology providers may store or process information in other countries.

As a result, personal data may be transferred to or accessed from jurisdictions outside the UAE.

Where required, KYEVOR will seek to use appropriate safeguards permitted under applicable UAE data-protection law, which may include contractual protections or other lawful transfer mechanisms.

16. Data Retention

KYEVOR retains personal data only for as long as reasonably necessary for the purposes for which it was collected, subject to legal, contractual, accounting, security and regulatory requirements.

As a general guideline:

Where a third-party provider controls technical retention periods, its retention period may differ from KYEVOR's internal retention period.

Information may be retained longer where necessary to:

• comply with law;
• establish or defend legal claims;
• resolve disputes;
• investigate fraud or security incidents; or
• comply with contractual obligations.

Information that is no longer required may be deleted, anonymised or securely destroyed.

17. Security

KYEVOR uses reasonable technical and organisational measures designed to protect personal data against:

• unauthorised access;
• loss;
• misuse;
• alteration;
• disclosure; and
• destruction.

Depending on the systems involved, measures may include:

• HTTPS and encryption in transit;
• encryption at rest where supported;
• multi-factor authentication;
• strong authentication controls;
• password management;
• restricted access;
• least-privilege access principles;
• secure cloud services;
• backups;
• confidentiality obligations;
• security updates;
• vendor assessments; and
• incident-response procedures.

No internet-connected system can be guaranteed to be completely secure. Accordingly, we cannot guarantee absolute security.

18. Data Breaches

If KYEVOR becomes aware of a personal-data breach, we will assess the incident and take reasonable steps to:

• contain the incident;
• investigate what occurred;
• mitigate potential harm;
• protect affected systems; and
• make notifications to relevant parties or authorities where required by applicable law.

19. Your Privacy Rights

Subject to applicable UAE law and any lawful limitations or exceptions, you may have rights concerning your personal data.

These may include the right to:

• obtain information about personal data being processed;
• request access to information concerning the processing;
• request correction of inaccurate information;
• request completion of incomplete information;
• request deletion in applicable circumstances;
• request restriction of processing;
• object to certain processing;
• object to direct marketing;
• withdraw consent where processing is based on consent;
• request transfer of personal data where applicable and technically feasible;
• object to certain automated decisions; and
• request human review of certain automated decisions where applicable.

Exercising your rights

To submit a privacy request, contact: privacy@kyevor.ai

Please provide enough information for us to understand and verify your request.

We may request reasonable information to confirm your identity before responding, particularly where disclosure of information could affect another person's privacy or security.

Certain requests may be restricted or refused where permitted or required by applicable law.

20. Withdrawal of Consent

Where we rely on consent to process personal data, you may withdraw that consent.

Withdrawal will not affect processing that was lawfully carried out before consent was withdrawn.

You can contact us at: privacy@kyevor.ai

21. Children's Privacy

KYEVOR provides business and professional services and is not directed at children under the age of 18.

We do not knowingly seek to collect personal data directly from children through our own website.

If you believe a child has provided personal data to KYEVOR without appropriate authorisation, contact us at privacy@kyevor.ai.

22. Third-Party Websites

Our website or communications may contain links to third-party websites, platforms or services.

KYEVOR does not control the privacy practices of those third parties.

You should review the relevant third party's privacy information before providing personal data to them.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• changes to our services;
• changes to our technology;
• changes to our data-processing practices;
• new AI or automation systems;
• legal or regulatory developments; or
• changes to our business.

The latest version will be published on kyevor.ai with an updated "Last Updated" date.

Where an update materially changes how we process personal data, we may provide additional notice where appropriate or required.

24. UAE Law

This Privacy Policy is intended primarily to address KYEVOR's operations in the United Arab Emirates.

Where additional data-protection laws apply to a particular processing activity or individual, KYEVOR will process personal data in accordance with those applicable requirements.

25. Contact Us

Questions, concerns or requests relating to this Privacy Policy or KYEVOR's processing of personal data can be sent to: