Key terms at a glance
Who we are
the Remote Pro Ai entity in Egypt, Saudi Arabia or the UAE that provides your service.
Our role
controller for website, account, billing and talent data; processor for client engagement data under the DPA.
Laws we follow
Saudi PDPL, UAE PDPL, DIFC and ADGM rules, Egypt PDPL, GDPR, UK GDPR and US state privacy laws.
No sale
we do not sell personal data or share it for cross-context behavioural advertising.
Cookies
strictly necessary cookies only, until you opt in to analytics or marketing.
Legal bases
contract, legal obligation, legitimate interests where the law allows, and consent.
Transfers
SCCs under GDPR, Saudi SCCs with a risk assessment, and UAE PDPL safeguards.
Your rights
access, correction, deletion, portability, objection and consent withdrawal, answered within 30 days.
AI agents
always disclosed; a person approves every decision about a person.
Recordings
calls are recorded only after notice and with your consent; you can decline and continue unrecorded.
Retention
each category has a fixed period, listed in section 7.
Security
the technical and organisational measures published in our DPA apply to our own data too.
Age
our services are for businesses; we do not knowingly collect data from anyone under 18.
Changes
material changes are posted 30 days before they take effect.
What we collect, and from whom
We collect only what each service needs. Card numbers stay with our payment providers.
| Who you are | What we collect | Source |
|---|---|---|
| Website visitor | Device and browser data, pages viewed, IP address; cookies only as consented | You, your browser |
| Prospect or client contact | Name, work email, phone, company, role, messages, Scope Agent inputs, quotes | You, your colleagues |
| Company verification | Registry data, VAT or TRN numbers, signatories, sanctions-screening results | Public registries, verification providers |
| Founder identity check | Identity document data and verification result, including Nafath for Saudi IDs | You, identity providers |
| Billing | Billing contact, invoices, payment status; card data handled by payment providers | You, payment providers |
| Client OS user | Account details, sign-in events, approvals, ratings, support tickets | You, Client OS |
| Applicant or engineer | CV, assessments, video intro, availability, rate card, payout details, background-check outcome | You, assessors, screening providers |
| Trust Center visitor | Name, work email, company, NDA acceptance record, document access log | You |
Why we use your data, and on what basis
Each purpose has a legal basis under the GDPR and under the PDPL regimes. Where a regime requires consent, we ask for it.
| Purpose | GDPR basis | PDPL regimes (KSA, UAE, Egypt) |
|---|---|---|
| Quotes, contracts and service delivery | Contract | Contract or pre-contract steps |
| Company verification, sanctions screening, tax invoicing | Legal obligation | Legal obligation |
| Security, fraud prevention and access logging | Legitimate interests | Legitimate interest where the law allows; otherwise a statutory exception |
| Service emails about your account | Contract | Contract |
| Marketing emails | Consent, or existing-client exception where allowed | Consent |
| Analytics and marketing cookies | Consent | Consent |
| Call recording and AI transcription | Consent | Consent |
| Talent matching and assignment offers | Contract and pre-contract steps | Contract or consent |
| Background checks | Consent, plus legal authorisation for criminal-record data | Explicit consent |
Where your data goes, and how it is protected
Our teams work from Cairo and Al-Khobar, and Client OS data is hosted in the UAE or the EU, with in-Kingdom hosting on request.
Remote Pro Ai teams in our Cairo and Al-Khobar offices may access personal data to provide our services. Client data is hosted in the UAE (Vercel dxb1 and AWS Middle East) or the EU (Frankfurt), at the client’s choice; in-Kingdom (Saudi Arabia) hosting is available on request through a Saudi cloud region. Each transfer relies on a safeguard recognised by the law of the exporting country.
From the EU and UK
GDPR standard contractual clauses and the UK International Data Transfer Addendum, with transfer impact assessments
From Saudi Arabia
Saudi standard contractual clauses and a transfer risk assessment; we make no adequacy claims
From the UAE
UAE PDPL transfer safeguards; DIFC or ADGM clauses where those regimes apply
From Egypt
transfers under the Egypt PDPL and any licence it requires
Subprocessors
listed with purpose and region in the Trust Center register
Your rights, and how to use them
One request form covers every regime. We verify your identity, then answer within 30 days, free of charge.
Depending on where you are, you can:
- Know what data we hold and receive a copy, including in a portable format
- Correct inaccurate or incomplete data
- Have data deleted or destroyed when it is no longer needed
- Restrict or object to processing, including direct marketing
- Withdraw consent at any time, without affecting earlier processing
- Ask for human review of any decision made with automated help
- Know how to opt out of sale or sharing under US state laws; we do neither
- Complain to your regulator; the list of authorities by country follows below
- Regulators by country
- Saudi Arabia, SDAIA · UAE, the UAE Data Office · DIFC, the Commissioner of Data Protection · ADGM, the Office of Data Protection · Egypt, the Personal Data Protection Center · EU, your national supervisory authority · UK, the Information Commissioner’s Office
How to exercise them
Use the privacy request form, or the data settings in Client OS or Talent OS.
Confirm your identity through the link we send to your registered email.
Receive our answer within 30 days; any lawful extension is explained in writing.
AI agents and recordings, disclosed every time
You always know when you are talking to an AI agent or being recorded, and a person makes decisions about people.
Remote Pro Ai uses AI agents for scoping, quoting, security questionnaires, voice enquiries in English and Arabic, and sprint summaries. Each agent identifies itself at the start. Calls are recorded only after a spoken or on-screen notice and with your consent; you can decline and carry on without recording.
- AI outputs, such as quotes and scope drafts, are indicative until a signed document confirms them
- Our matching model ranks engineers with an explainable score; a person approves every placement
- AI providers we use process data under zero-retention terms and may not train their models on it
- You can ask for a human at any point in a voice or chat conversation
How long we keep each type of data
Data is deleted or anonymised at the end of each period unless a legal hold applies.
| Data | Retention period |
|---|---|
| Analytics cookies | Up to 14 months, and only after opt-in |
| Prospect and lead records | 24 months after the last interaction |
| Contracts, invoices and tax records | 7 years after the contract ends |
| Client account and engagement records | 3 years after the engagement ends |
| Company verification records | 5 years after the relationship ends |
| Call recordings | 90 days |
| Call and agent transcripts | 90 days |
| Applicants not admitted to the network | 12 months, so you can reapply within that period without repeating passed gates |
| Network members | Membership period plus the period tax and labour law requires |
| Background-check results | 12 months after the check, then deleted; we keep the completion flag and date |
| NDA acceptance and Trust Center access logs | Duration of the NDA plus 1 year |
Contact our Data Protection Officer
For questions, rights requests or complaints about how we handle personal data.
Data Protection Officer
Dina Mansour, Head of Governance & Trust
Email
privacy@remote-pro.ai
Post
Data Protection Officer, Remote Pro Ai, 34 Ibn Al-Nafis St., Nasr City, Cairo, Egypt
In-product
data settings in Client OS and Talent OS
EU and UK representatives
appointed under Article 27 GDPR and UK GDPR through a representative service, reachable at privacy@remote-pro.ai
Notice outline (full text)
- Who we are and how to contact us
- Scope of this notice
- Data we collect
- How we use data and our legal bases
- Cookies and similar technologies
- AI agents, calls and recordings
- Sharing and subprocessors
- International transfers and data residency
- Retention
- Security
- Your rights
- Children
- Changes to this notice
- Regulators and complaints
Version 2026.10 · published October 2026 · last legal review: pending counsel